The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-pidlUpgrade samba4-testUpgrade samba4-develUpgrade samba-vfs-glusterfsUpgrade samba3x-commonUpgrade samba3x-domainjoin-guiUpgrade samba-winbind-clientsUpgrade samba3x-winbind-develUpgrade libsmbclientUpgrade samba3xUpgrade samba4-swatUpgrade samba4-winbind-krb5-locatorUpgrade samba-dc-libsUpgrade samba-test-develUpgrade samba-glusterfsUpgrade samba3x-clientUpgrade samba4-dc-libsUpgrade libwbclient-develUpgrade samba3x-docUpgrade samba-swatUpgrade samba3x-winbindUpgrade samba4-commonUpgrade samba-dcUpgrade sambaUpgrade samba3x-swatUpgrade samba4-clientUpgrade libsmbclient-develUpgrade samba4-pythonUpgrade samba4-winbind-clientsUpgrade samba-commonUpgrade samba-winbind-krb5-locatorUpgrade samba4Upgrade samba-develUpgrade samba-winbindUpgrade samba-domainjoin-guiUpgrade samba4-winbindUpgrade samba4-pidlUpgrade libwbclientUpgrade samba-libsUpgrade samba4-dcUpgrade samba4-libsUpgrade samba-winbind-develUpgrade samba-testUpgrade samba-docUpgrade samba-python | Dec 1, 2016 | Feb 23, 2015 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Feb 24, 2015 |
| Freebsd | — | Upgrade samba4Upgrade samba41Upgrade samba36 | Dec 10, 2025 | Feb 23, 2015 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Feb 23, 2015 |
| Hpux | — | Update CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest version | Aug 11, 2017 | Feb 23, 2015 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.6.25-0.175.2.8.0.4.0 on Solaris 11.2 | May 29, 2017 | Feb 23, 2015 |
| Oracle_linux | — | Upgrade libwbclientUpgrade samba-dcUpgrade libsmbclient-develUpgrade samba-domainjoin-guiUpgrade samba-dc-libsUpgrade samba-testUpgrade samba-commonUpgrade samba4-dcUpgrade samba4-winbind-clientsUpgrade samba-libsUpgrade samba3x-winbindUpgrade samba4Upgrade samba-clientUpgrade samba3x-winbind-develUpgrade samba4-pidlUpgrade samba-develUpgrade samba-winbind-krb5-locatorUpgrade samba-vfs-glusterfsUpgrade samba4-clientUpgrade samba3x-commonUpgrade samba4-winbindUpgrade libwbclient-develUpgrade samba3x-domainjoin-guiUpgrade libsmbclientUpgrade samba4-pythonUpgrade samba-pidlUpgrade samba-winbind-clientsUpgrade samba4-dc-libsUpgrade samba-winbindUpgrade samba3x-clientUpgrade samba4-commonUpgrade samba4-develUpgrade samba4-swatUpgrade samba4-libsUpgrade samba-pythonUpgrade samba3xUpgrade samba3x-swatUpgrade samba-swatUpgrade samba-winbind-modulesUpgrade samba4-testUpgrade samba-docUpgrade samba-test-develUpgrade samba-winbind-develUpgrade sambaUpgrade samba-glusterfsUpgrade samba4-winbind-krb5-locatorUpgrade samba3x-doc | May 3, 2019 | Feb 24, 2015 |
| Samba | — | Upgrade to Samba version 3.6.25Upgrade to Samba version 4.1.17Upgrade to Samba version 4.0.25 | Feb 27, 2015 | Feb 23, 2015 |
| Suse | — | Upgrade libsamba-hostconfig-develUpgrade libwbclient-develUpgrade libsamba-errors0Upgrade libsamba-credentials-develUpgrade libpdb0-32bitUpgrade samba-kdcUpgrade samba-core-develUpgrade ctdbUpgrade libtalloc1Upgrade libsmbclient-raw0-32bitUpgrade libsmbconf0-32bitUpgrade samba-libs-python3-32bitUpgrade samba-libs-32bitUpgrade libnetapi-develUpgrade libnetapi0Upgrade libsamba-errors0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libndr0Upgrade libsmbclient-raw0Upgrade libndr1Upgrade samba-cephUpgrade libndr-nbt0Upgrade sambaUpgrade libldb-develUpgrade libgensec0Upgrade libsmbldap0-32bitUpgrade libndr-nbt-develUpgrade libtalloc2-x86Upgrade samba-docUpgrade libdcerpc0-32bitUpgrade libsamba-policy-develUpgrade libdcerpc-atsvc-develUpgrade libsmbconf0Upgrade samba-krb-printingUpgrade libndr-krb5pac0-32bitUpgrade libsmbclient0-32bitUpgrade samba-winbind-32bitUpgrade libsmbclient0Upgrade libregistry0Upgrade samba-client-x86Upgrade libndr-standard0Upgrade libsmbldap2-32bitUpgrade libsmbconf-develUpgrade samba-clientUpgrade samba-x86Upgrade libpdb0Upgrade libndr0-32bitUpgrade libsamdb-develUpgrade libdcerpc-binding0-32bitUpgrade libsmbldap2Upgrade libtdb-develUpgrade libndr-nbt0-32bitUpgrade libwbclient0-32bitUpgrade libndr-develUpgrade libtalloc1-32bitUpgrade samba-winbindUpgrade libndr1-32bitUpgrade libsamdb0-32bitUpgrade libsamba-credentials0-32bitUpgrade libtdb1-32bitUpgrade libsmbldap0Upgrade libdcerpc-binding0Upgrade samba-client-32bitUpgrade samba-test-develUpgrade libsmbsharemodes-develUpgrade libsamba-util0Upgrade libsamba-errors-develUpgrade libsamba-policy-python3-develUpgrade libsamdb0Upgrade libsamba-policy0-python3Upgrade libdcerpc0Upgrade libsamba-util0-32bitUpgrade libdcerpc-samr-develUpgrade libregistry-develUpgrade libtevent-develUpgrade libtdb1Upgrade libgensec-develUpgrade libndr-krb5pac-develUpgrade libtdb1-x86Upgrade libndr-standard-develUpgrade samba-develUpgrade libsamba-passdb0-32bitUpgrade libtevent0Upgrade libsmbclient-develUpgrade libldb1Upgrade libtalloc2-32bitUpgrade libsmbldap-develUpgrade libsamba-policy0Upgrade libldb1-32bitUpgrade libtalloc-develUpgrade libsamba-hostconfig0Upgrade libdcerpc-samr0Upgrade libtevent-util-develUpgrade libdcerpc-atsvc0Upgrade samba-libsUpgrade ldapsmbUpgrade libtevent-util0Upgrade samba-32bitUpgrade libgensec0-32bitUpgrade libtevent-util0-32bitUpgrade libsamba-credentials0Upgrade libsamba-passdb0Upgrade samba-dsdb-modulesUpgrade libsmbsharemodes0Upgrade samba-libs-python3Upgrade libsmbclient-raw-develUpgrade libtalloc2Upgrade libdcerpc-develUpgrade libndr-standard0-32bitUpgrade samba-python3Upgrade libndr-krb5pac0Upgrade libsamba-util-develUpgrade samba-testUpgrade libpdb-develUpgrade libwbclient0Upgrade libnetapi0-32bitUpgrade libsamba-passdb-develUpgrade samba-winbind-x86Upgrade libwbclient0-x86Upgrade libsmbclient0-x86Upgrade libtevent0-32bitUpgrade samba-python | Dec 18, 2015 | Feb 23, 2015 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Feb 24, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub