The sys_recvfrom function in nmbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed UDP packet.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | May 28, 2014 |
| Centos_linux | — | Upgrade samba-clientUpgrade samba3x-winbindUpgrade samba-commonUpgrade samba-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-test-develUpgrade samba-domainjoin-guiUpgrade samba4-pidlUpgrade samba3x-commonUpgrade samba4-winbindUpgrade samba-dc-libsUpgrade libsmbclient-develUpgrade samba4-dc-libsUpgrade samba4Upgrade samba-testUpgrade samba-winbind-clientsUpgrade samba4-winbind-clientsUpgrade samba-develUpgrade samba3x-winbind-develUpgrade samba4-clientUpgrade samba-vfs-glusterfsUpgrade samba4-swatUpgrade samba-swatUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba3x-docUpgrade samba-winbindUpgrade samba-pidlUpgrade samba4-commonUpgrade samba3x-swatUpgrade samba4-develUpgrade samba-pythonUpgrade samba4-testUpgrade samba4-libsUpgrade libsmbclientUpgrade samba4-dcUpgrade libwbclient-develUpgrade samba3xUpgrade samba4-winbind-krb5-locatorUpgrade samba3x-clientUpgrade samba3x-domainjoin-guiUpgrade samba-winbind-develUpgrade libwbclientUpgrade samba4-pythonUpgrade samba-dcUpgrade samba-doc | Dec 1, 2016 | Jun 23, 2014 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Jun 23, 2014 |
| Freebsd | — | Upgrade samba4Upgrade samba41Upgrade samba36 | Dec 10, 2025 | Jun 23, 2014 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Jun 23, 2014 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.6.24-0.175.2.1.0.5.0 on Solaris 11.2 | May 29, 2017 | Jun 23, 2014 |
| Oracle_linux | — | Upgrade samba-winbind-krb5-locatorUpgrade samba-pidlUpgrade samba3x-winbind-develUpgrade samba-libsUpgrade samba-develUpgrade samba-vfs-glusterfsUpgrade samba-testUpgrade samba-winbind-develUpgrade samba-commonUpgrade sambaUpgrade samba-dcUpgrade samba-domainjoin-guiUpgrade libsmbclient-develUpgrade libwbclientUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba3x-winbindUpgrade samba-test-develUpgrade samba3x-clientUpgrade libsmbclientUpgrade samba3x-swatUpgrade libwbclient-develUpgrade samba3x-commonUpgrade samba-dc-libsUpgrade samba3x-docUpgrade samba3xUpgrade samba-pythonUpgrade samba-docUpgrade samba-winbindUpgrade samba3x-domainjoin-guiUpgrade samba-swatUpgrade samba-winbind-clients | Jun 26, 2018 | Jun 23, 2014 |
| Samba | — | Upgrade to Samba version 4.1.9Upgrade to Samba version 4.0.19Upgrade to Samba version 3.6.24 | Jun 24, 2014 | Jun 24, 2014 |
| Suse | — | Upgrade libldb-develUpgrade libndr0Upgrade libpdb-develUpgrade libsmbconf-develUpgrade libsamba-hostconfig0Upgrade samba-winbind-32bitUpgrade libsamba-policy0Upgrade libsmbconf0Upgrade libsmbclient0Upgrade libndr-krb5pac0-32bitUpgrade ctdbUpgrade samba-docUpgrade libsamba-passdb0-32bitUpgrade libsmbldap2-32bitUpgrade samba-winbindUpgrade samba-testUpgrade samba-dsdb-modulesUpgrade libdcerpc-samr0Upgrade samba-pythonUpgrade libdcerpc-develUpgrade libsmbconf0-32bitUpgrade libsamba-errors0-32bitUpgrade libtevent-util-develUpgrade libnetapi0Upgrade samba-libs-python3Upgrade libtdb-develUpgrade libtdb1-x86Upgrade libdcerpc-atsvc0Upgrade libsamba-util0-32bitUpgrade samba-core-develUpgrade samba-test-develUpgrade libsamba-errors-develUpgrade libsamdb0Upgrade libsmbldap0Upgrade libnetapi-develUpgrade libsamba-credentials0-32bitUpgrade libndr-nbt0Upgrade samba-libs-32bitUpgrade libsmbldap-develUpgrade libdcerpc-binding0Upgrade libldb1Upgrade libtalloc2Upgrade libsmbldap0-32bitUpgrade libndr0-32bitUpgrade libgensec-develUpgrade libsmbsharemodes0Upgrade sambaUpgrade samba-winbind-x86Upgrade libwbclient-develUpgrade samba-develUpgrade samba-client-x86Upgrade libwbclient0-x86Upgrade libsamba-credentials0Upgrade samba-32bitUpgrade libdcerpc-atsvc-develUpgrade libsamba-hostconfig-develUpgrade libtalloc2-x86Upgrade libndr-standard0-32bitUpgrade libgensec0Upgrade libldb1-32bitUpgrade libtevent-util0-32bitUpgrade libtalloc-develUpgrade libsmbclient-raw0Upgrade libsamba-hostconfig0-32bitUpgrade libgensec0-32bitUpgrade libwbclient0Upgrade libpdb0-32bitUpgrade libsamba-policy-develUpgrade libdcerpc0Upgrade libsamba-credentials-develUpgrade libregistry-develUpgrade samba-libsUpgrade libsmbsharemodes-develUpgrade libsmbclient-raw0-32bitUpgrade libndr-krb5pac-develUpgrade ldapsmbUpgrade samba-clientUpgrade libwbclient0-32bitUpgrade libndr-krb5pac0Upgrade libsmbclient0-32bitUpgrade libsamba-errors0Upgrade libsamdb-develUpgrade samba-x86Upgrade libsamba-util0Upgrade libtevent0-32bitUpgrade samba-kdcUpgrade libtdb1Upgrade libdcerpc0-32bitUpgrade libregistry0Upgrade libndr-develUpgrade libndr-standard-develUpgrade libtalloc1Upgrade libtalloc2-32bitUpgrade libtevent-util0Upgrade libndr-standard0Upgrade libsmbclient-develUpgrade samba-libs-python3-32bitUpgrade libtevent-develUpgrade samba-client-32bitUpgrade libdcerpc-binding0-32bitUpgrade libsamba-passdb0Upgrade libsamba-util-develUpgrade libsmbldap2Upgrade libnetapi0-32bitUpgrade libtevent0Upgrade libndr-nbt-develUpgrade libsamba-passdb-develUpgrade libsamdb0-32bitUpgrade libsmbclient0-x86Upgrade libpdb0Upgrade libdcerpc-samr-develUpgrade libtdb1-32bitUpgrade libtalloc1-32bitUpgrade samba-krb-printingUpgrade libndr-nbt0-32bitUpgrade libsmbclient-raw-devel | Dec 18, 2015 | Jun 23, 2014 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Jun 23, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub