Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade samba-clientUpgrade libsmbclientUpgrade libsmbclient-develUpgrade samba-commonUpgrade sambaUpgrade samba-swat | Dec 1, 2016 | Aug 5, 2013 |
| Debian | — | Upgrade sambaUpgrade samba4 | Jul 30, 2024 | Aug 6, 2013 |
| Freebsd | — | Upgrade samba4Upgrade samba34Upgrade samba35Upgrade samba36 | Dec 10, 2025 | Aug 9, 2013 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Aug 5, 2013 |
| Hpux | — | Update CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-CFSM.CFSM-KRN to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-CFSM.CFSM-RUN to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest version | Aug 11, 2017 | Aug 5, 2013 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.6.18-0.175.1.12.0.3.0 on Solaris 11.1 | May 29, 2017 | Aug 5, 2013 |
| Oracle_linux | — | Upgrade samba-swatUpgrade libsmbclient-develUpgrade sambaUpgrade samba-commonUpgrade samba-clientUpgrade libsmbclient | Oct 16, 2024 | Aug 5, 2013 |
| Samba | — | Upgrade to Samba version 3.5.22Upgrade to Samba version 4.0.8Upgrade to Samba version 3.6.17 | Nov 13, 2013 | Aug 5, 2013 |
| Suse | — | Upgrade libwbclient-develUpgrade libsmbclient0-x86Upgrade libldb-develUpgrade libtalloc2-x86Upgrade libnetapi0Upgrade libsmbclient0Upgrade libnetapi-develUpgrade libtdb1-32bitUpgrade cifs-mountUpgrade samba-x86Upgrade libldb1Upgrade libtalloc1Upgrade samba-krb-printingUpgrade libwbclient0-32bitUpgrade libtalloc1-32bitUpgrade libtdb1-x86Upgrade libsmbsharemodes-develUpgrade samba-client-x86Upgrade libtdb-develUpgrade sambaUpgrade libtdb1Upgrade samba-winbind-x86Upgrade libtalloc-develUpgrade sle-sdk-releaseUpgrade ldapsmbUpgrade libtevent-develUpgrade samba-client-32bitUpgrade libwbclient0Upgrade libsmbsharemodes0Upgrade samba-winbindUpgrade samba-clientUpgrade libldb1-32bitUpgrade libsmbclient-develUpgrade samba-docUpgrade samba-develUpgrade libtevent0Upgrade samba-winbind-32bitUpgrade libtalloc1-x86Upgrade libtevent0-32bitUpgrade libwbclient0-x86Upgrade libtalloc2Upgrade samba-32bitUpgrade libsmbclient0-32bitUpgrade libtalloc2-32bit | Feb 17, 2015 | Aug 5, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Aug 6, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub