Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade sambaUpgrade samba-swatUpgrade libsmbclient-develUpgrade libsmbclientUpgrade samba-commonUpgrade samba-client | Dec 1, 2016 | Aug 5, 2013 |
| Debian | — | Upgrade sambaUpgrade samba4 | Jul 30, 2024 | Aug 6, 2013 |
| Freebsd | — | Upgrade samba36Upgrade samba34Upgrade samba35Upgrade samba4 | Dec 10, 2025 | Aug 9, 2013 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Aug 5, 2013 |
| Hpux | — | Update CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-CFSM.CFSM-RUN to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-CFSM.CFSM-KRN to the latest version | Aug 11, 2017 | Aug 5, 2013 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.6.18-0.175.1.12.0.3.0 on Solaris 11.1 | May 29, 2017 | Aug 5, 2013 |
| Oracle_linux | — | Upgrade libsmbclient-develUpgrade samba-swatUpgrade sambaUpgrade samba-commonUpgrade samba-clientUpgrade libsmbclient | Oct 16, 2024 | Aug 5, 2013 |
| Samba | — | Upgrade to Samba version 3.6.17Upgrade to Samba version 4.0.8Upgrade to Samba version 3.5.22 | Nov 13, 2013 | Aug 5, 2013 |
| Suse | — | Upgrade samba-clientUpgrade libsmbclient0-32bitUpgrade samba-develUpgrade samba-winbindUpgrade libwbclient0Upgrade libwbclient0-x86Upgrade sle-sdk-releaseUpgrade samba-winbind-32bitUpgrade libtevent0-32bitUpgrade samba-32bitUpgrade ldapsmbUpgrade libtevent0Upgrade samba-winbind-x86Upgrade libsmbsharemodes0Upgrade samba-client-32bitUpgrade libsmbclient-develUpgrade libldb1-32bitUpgrade libtalloc1-x86Upgrade libtalloc2Upgrade libtevent-develUpgrade samba-docUpgrade sambaUpgrade libtalloc2-32bitUpgrade libtdb1Upgrade libtalloc-develUpgrade libsmbclient0-x86Upgrade libnetapi-develUpgrade libsmbsharemodes-develUpgrade libnetapi0Upgrade libldb1Upgrade libwbclient0-32bitUpgrade samba-x86Upgrade libtdb-develUpgrade libtalloc1-32bitUpgrade cifs-mountUpgrade libtdb1-x86Upgrade libtalloc1Upgrade samba-krb-printingUpgrade libldb-develUpgrade libtalloc2-x86Upgrade samba-client-x86Upgrade libsmbclient0Upgrade libtdb1-32bitUpgrade libwbclient-devel | Feb 17, 2015 | Aug 5, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Aug 6, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub