The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade samba-libsUpgrade samba-domainjoin-guiUpgrade samba4-winbindUpgrade samba4-pythonUpgrade libwbclientUpgrade samba-winbindUpgrade samba-docUpgrade samba4-libsUpgrade samba-winbind-krb5-locatorUpgrade samba4-winbind-clientsUpgrade samba-commonUpgrade samba-pythonUpgrade sambaUpgrade samba4-pidlUpgrade samba-develUpgrade samba4-dcUpgrade samba4-clientUpgrade libsmbclient-develUpgrade samba4Upgrade samba-testUpgrade samba-winbind-develUpgrade samba3x-swatUpgrade samba-vfs-glusterfsUpgrade samba4-commonUpgrade samba-swatUpgrade samba-dc-libsUpgrade samba4-develUpgrade libsmbclientUpgrade libwbclient-develUpgrade samba3x-clientUpgrade samba4-dc-libsUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba4-testUpgrade samba-glusterfsUpgrade samba3x-commonUpgrade samba3x-winbind-develUpgrade samba-winbind-clientsUpgrade samba3x-domainjoin-guiUpgrade samba4-swatUpgrade samba-dcUpgrade samba3x-docUpgrade samba4-winbind-krb5-locatorUpgrade samba3x-winbindUpgrade samba3xUpgrade samba-test-develUpgrade samba-pidl | Dec 1, 2016 | Feb 23, 2015 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Feb 24, 2015 |
| Freebsd | — | Upgrade samba4Upgrade samba41Upgrade samba36 | Dec 10, 2025 | Feb 23, 2015 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Feb 23, 2015 |
| Hpux | — | Update CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest version | Aug 11, 2017 | Feb 23, 2015 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.6.25-0.175.2.8.0.4.0 on Solaris 11.2 | May 29, 2017 | Feb 23, 2015 |
| Oracle_linux | — | Upgrade samba4-winbind-krb5-locatorUpgrade sambaUpgrade samba-glusterfsUpgrade samba3x-docUpgrade samba-docUpgrade samba-test-develUpgrade samba-swatUpgrade samba-pythonUpgrade samba4-libsUpgrade samba-pidlUpgrade samba3x-domainjoin-guiUpgrade samba-winbind-develUpgrade libwbclient-develUpgrade samba4-pythonUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba3x-clientUpgrade samba-winbindUpgrade samba4-dc-libsUpgrade samba4-testUpgrade samba4-develUpgrade samba4-swatUpgrade samba4-commonUpgrade samba3x-swatUpgrade samba3xUpgrade samba-winbind-modulesUpgrade samba-testUpgrade samba-vfs-glusterfsUpgrade samba4-dcUpgrade samba4Upgrade samba3x-commonUpgrade samba-commonUpgrade samba4-winbindUpgrade samba-dcUpgrade samba4-pidlUpgrade libwbclientUpgrade libsmbclient-develUpgrade samba-dc-libsUpgrade samba-clientUpgrade samba3x-winbindUpgrade samba-libsUpgrade samba4-winbind-clientsUpgrade samba-domainjoin-guiUpgrade samba-winbind-krb5-locatorUpgrade samba-develUpgrade samba3x-winbind-develUpgrade samba4-client | May 3, 2019 | Feb 24, 2015 |
| Samba | — | Upgrade to Samba version 4.1.17Upgrade to Samba version 4.0.25Upgrade to Samba version 3.6.25 | Feb 27, 2015 | Feb 23, 2015 |
| Suse | — | Upgrade ctdbUpgrade libsamba-policy-develUpgrade libsamba-hostconfig0-32bitUpgrade libldb-develUpgrade samba-docUpgrade libsamdb-develUpgrade samba-core-develUpgrade libsamba-util0Upgrade libsamba-errors-develUpgrade libdcerpc-atsvc-develUpgrade libnetapi0Upgrade libtdb-develUpgrade libdcerpc-binding0-32bitUpgrade samba-test-develUpgrade libtalloc2-x86Upgrade libsmbconf0-32bitUpgrade samba-libs-python3-32bitUpgrade libndr-nbt-develUpgrade libsamba-credentials0-32bitUpgrade libndr-nbt0Upgrade libndr1Upgrade libdcerpc-binding0Upgrade libsmbclient-raw0Upgrade libsmbclient-raw0-32bitUpgrade libsamba-policy-python3-develUpgrade libsamba-errors0Upgrade libnetapi-develUpgrade samba-winbindUpgrade libsmbldap0-32bitUpgrade libndr1-32bitUpgrade libsmbsharemodes-develUpgrade samba-client-32bitUpgrade libsamdb0Upgrade libsmbldap0Upgrade samba-cephUpgrade sambaUpgrade libdcerpc0-32bitUpgrade libtalloc1Upgrade libregistry0Upgrade samba-client-x86Upgrade libsamba-hostconfig-develUpgrade libtalloc1-32bitUpgrade libndr0-32bitUpgrade libwbclient0-32bitUpgrade libpdb0-32bitUpgrade libsamba-errors0-32bitUpgrade libsmbclient0Upgrade libndr0Upgrade libndr-nbt0-32bitUpgrade samba-libs-32bitUpgrade libtdb1-32bitUpgrade libndr-develUpgrade libsmbldap2-32bitUpgrade libsmbconf-develUpgrade libsamba-credentials-develUpgrade libndr-standard0Upgrade samba-krb-printingUpgrade samba-winbind-32bitUpgrade libsmbconf0Upgrade libsmbclient0-32bitUpgrade samba-x86Upgrade samba-clientUpgrade samba-kdcUpgrade libndr-krb5pac0-32bitUpgrade libsamdb0-32bitUpgrade libwbclient-develUpgrade libgensec0Upgrade libpdb0Upgrade libsmbldap2Upgrade libtalloc2-32bitUpgrade libtevent-util0Upgrade libdcerpc-samr-develUpgrade libwbclient0Upgrade libsamba-util-develUpgrade libndr-standard0-32bitUpgrade samba-python3Upgrade libsamba-passdb0-32bitUpgrade libsmbsharemodes0Upgrade libdcerpc0Upgrade samba-libs-python3Upgrade libsamba-credentials0Upgrade libtevent-util-develUpgrade samba-winbind-x86Upgrade samba-libsUpgrade libsmbclient0-x86Upgrade libtalloc-develUpgrade libgensec-develUpgrade libdcerpc-develUpgrade libsmbldap-develUpgrade libtevent0Upgrade libnetapi0-32bitUpgrade libsamba-policy0Upgrade samba-develUpgrade libwbclient0-x86Upgrade libtevent0-32bitUpgrade samba-testUpgrade libpdb-develUpgrade libdcerpc-atsvc0Upgrade ldapsmbUpgrade libndr-standard-develUpgrade libsamba-passdb0Upgrade libgensec0-32bitUpgrade samba-dsdb-modulesUpgrade libtevent-util0-32bitUpgrade libtdb1-x86Upgrade libsamba-util0-32bitUpgrade libsamba-policy0-python3Upgrade libregistry-develUpgrade libdcerpc-samr0Upgrade samba-32bitUpgrade libsamba-hostconfig0Upgrade samba-pythonUpgrade libndr-krb5pac-develUpgrade libtevent-develUpgrade libtdb1Upgrade libtalloc2Upgrade libldb1-32bitUpgrade libsmbclient-develUpgrade libldb1Upgrade libsmbclient-raw-develUpgrade libsamba-passdb-develUpgrade libndr-krb5pac0 | Dec 18, 2015 | Feb 23, 2015 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Feb 24, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub