Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade samba-clientUpgrade samba-swatUpgrade libsmbclientUpgrade sambaUpgrade samba-commonUpgrade libsmbclient-devel | Dec 1, 2016 | Aug 5, 2013 |
| Debian | — | Upgrade sambaUpgrade samba4 | Jul 30, 2024 | Aug 6, 2013 |
| Freebsd | — | Upgrade samba36Upgrade samba35Upgrade samba4Upgrade samba34 | Dec 10, 2025 | Aug 9, 2013 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Aug 5, 2013 |
| Hpux | — | Update CIFS-CFSM.CFSM-RUN to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-CFSM.CFSM-KRN to the latest version | Aug 11, 2017 | Aug 5, 2013 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.6.18-0.175.1.12.0.3.0 on Solaris 11.1 | May 29, 2017 | Aug 5, 2013 |
| Oracle_linux | — | Upgrade samba-clientUpgrade libsmbclientUpgrade samba-commonUpgrade sambaUpgrade libsmbclient-develUpgrade samba-swat | Oct 16, 2024 | Aug 5, 2013 |
| Samba | — | Upgrade to Samba version 3.5.22Upgrade to Samba version 4.0.8Upgrade to Samba version 3.6.17 | Nov 13, 2013 | Aug 5, 2013 |
| Suse | — | Upgrade libtalloc1-32bitUpgrade libldb-develUpgrade samba-client-x86Upgrade libtalloc2-x86Upgrade libnetapi0Upgrade libsmbsharemodes-develUpgrade libwbclient-develUpgrade cifs-mountUpgrade libtalloc1Upgrade libwbclient0-32bitUpgrade libldb1Upgrade samba-x86Upgrade libtdb-develUpgrade libnetapi-develUpgrade samba-krb-printingUpgrade libsmbclient0-x86Upgrade libtdb1-x86Upgrade libtdb1-32bitUpgrade libsmbclient0Upgrade libtalloc1-x86Upgrade samba-develUpgrade libwbclient0-x86Upgrade libsmbsharemodes0Upgrade samba-32bitUpgrade samba-winbind-32bitUpgrade libldb1-32bitUpgrade libtdb1Upgrade libtalloc-develUpgrade samba-winbind-x86Upgrade sle-sdk-releaseUpgrade libtevent-develUpgrade ldapsmbUpgrade sambaUpgrade samba-docUpgrade libtalloc2Upgrade libtalloc2-32bitUpgrade samba-client-32bitUpgrade libsmbclient-develUpgrade libwbclient0Upgrade samba-clientUpgrade libtevent0Upgrade samba-winbindUpgrade libtevent0-32bitUpgrade libsmbclient0-32bit | Feb 17, 2015 | Aug 5, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Aug 6, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub