Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade samba-clientUpgrade samba-swatUpgrade libsmbclientUpgrade sambaUpgrade samba-commonUpgrade libsmbclient-devel | Dec 1, 2016 | Aug 5, 2013 |
| Debian | — | Upgrade samba4Upgrade samba | Jul 30, 2024 | Aug 6, 2013 |
| Freebsd | — | Upgrade samba36Upgrade samba34Upgrade samba35Upgrade samba4 | Dec 10, 2025 | Aug 9, 2013 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Aug 5, 2013 |
| Hpux | — | Update CIFS-CFSM.CFSM-KRN to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-CFSM.CFSM-RUN to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest version | Aug 11, 2017 | Aug 5, 2013 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.6.18-0.175.1.12.0.3.0 on Solaris 11.1 | May 29, 2017 | Aug 5, 2013 |
| Oracle_linux | — | Upgrade samba-clientUpgrade samba-commonUpgrade libsmbclientUpgrade libsmbclient-develUpgrade samba-swatUpgrade samba | Oct 16, 2024 | Aug 5, 2013 |
| Samba | — | Upgrade to Samba version 3.6.17Upgrade to Samba version 4.0.8Upgrade to Samba version 3.5.22 | Nov 13, 2013 | Aug 5, 2013 |
| Suse | — | Upgrade libwbclient-develUpgrade libnetapi-develUpgrade libtdb1-32bitUpgrade libtalloc1Upgrade samba-krb-printingUpgrade libsmbclient0Upgrade libldb1Upgrade samba-x86Upgrade libwbclient0-32bitUpgrade libtdb-develUpgrade libtalloc2-x86Upgrade libsmbsharemodes-develUpgrade libsmbclient0-x86Upgrade cifs-mountUpgrade libtalloc1-32bitUpgrade libtdb1-x86Upgrade libldb-develUpgrade samba-client-x86Upgrade libnetapi0Upgrade libwbclient0-x86Upgrade libtevent-develUpgrade samba-docUpgrade libtalloc-develUpgrade samba-develUpgrade libsmbclient0-32bitUpgrade libsmbclient-develUpgrade libtevent0Upgrade samba-winbindUpgrade libtalloc2-32bitUpgrade libtalloc2Upgrade samba-client-32bitUpgrade sle-sdk-releaseUpgrade libwbclient0Upgrade libtdb1Upgrade samba-winbind-x86Upgrade samba-winbind-32bitUpgrade libtalloc1-x86Upgrade libldb1-32bitUpgrade libtevent0-32bitUpgrade sambaUpgrade samba-clientUpgrade samba-32bitUpgrade ldapsmbUpgrade libsmbsharemodes0 | Feb 17, 2015 | Aug 5, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Aug 6, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub