The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade sambaUpgrade libsmbclient-develUpgrade samba4-winbindUpgrade samba4-pythonUpgrade samba-winbindUpgrade samba4Upgrade samba-docUpgrade samba-pythonUpgrade samba-domainjoin-guiUpgrade libwbclientUpgrade samba4-libsUpgrade samba4-pidlUpgrade samba4-dcUpgrade samba-libsUpgrade samba3x-swatUpgrade samba4-winbind-clientsUpgrade samba-testUpgrade samba-winbind-develUpgrade samba4-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-develUpgrade samba-commonUpgrade samba-test-develUpgrade samba-pidlUpgrade samba3x-domainjoin-guiUpgrade samba-winbind-clientsUpgrade samba3xUpgrade samba3x-commonUpgrade samba-vfs-glusterfsUpgrade samba4-develUpgrade samba3x-docUpgrade samba-winbind-modulesUpgrade samba3x-winbind-develUpgrade samba3x-winbindUpgrade samba4-winbind-krb5-locatorUpgrade samba4-dc-libsUpgrade samba-swatUpgrade samba-dcUpgrade samba-clientUpgrade libwbclient-develUpgrade samba4-commonUpgrade samba-glusterfsUpgrade samba-dc-libsUpgrade samba3x-clientUpgrade libsmbclientUpgrade samba4-swatUpgrade samba4-test | Dec 1, 2016 | Feb 23, 2015 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Feb 24, 2015 |
| Freebsd | — | Upgrade samba4Upgrade samba41Upgrade samba36 | Dec 10, 2025 | Feb 23, 2015 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Feb 23, 2015 |
| Hpux | — | Update CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest version | Aug 11, 2017 | Feb 23, 2015 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.6.25-0.175.2.8.0.4.0 on Solaris 11.2 | May 29, 2017 | Feb 23, 2015 |
| Oracle_linux | — | Upgrade samba4-pidlUpgrade samba3x-winbind-develUpgrade samba-domainjoin-guiUpgrade samba-libsUpgrade samba-commonUpgrade samba3x-commonUpgrade samba3x-winbindUpgrade samba-dcUpgrade samba4-clientUpgrade samba4-winbind-clientsUpgrade samba-vfs-glusterfsUpgrade samba4-dcUpgrade libsmbclient-develUpgrade libwbclientUpgrade samba-dc-libsUpgrade samba-develUpgrade samba-winbind-krb5-locatorUpgrade samba-testUpgrade samba4Upgrade samba4-winbindUpgrade samba-clientUpgrade samba-docUpgrade libwbclient-develUpgrade samba4-libsUpgrade samba3x-swatUpgrade samba3xUpgrade samba4-swatUpgrade samba-pythonUpgrade samba-swatUpgrade samba-glusterfsUpgrade samba-test-develUpgrade samba4-winbind-krb5-locatorUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-winbind-develUpgrade samba3x-docUpgrade samba-winbindUpgrade samba-pidlUpgrade samba4-dc-libsUpgrade samba3x-domainjoin-guiUpgrade samba-winbind-clientsUpgrade samba3x-clientUpgrade samba4-testUpgrade libsmbclientUpgrade samba4-develUpgrade samba4-pythonUpgrade samba4-common | May 3, 2019 | Feb 24, 2015 |
| Samba | — | Upgrade to Samba version 4.0.25Upgrade to Samba version 4.1.17Upgrade to Samba version 3.6.25 | Feb 27, 2015 | Feb 23, 2015 |
| Suse | — | Upgrade libsamdb0-32bitUpgrade sambaUpgrade ctdbUpgrade libregistry0Upgrade libsamba-errors0Upgrade libsamdb-develUpgrade libwbclient-develUpgrade samba-winbindUpgrade libsmbldap0-32bitUpgrade libndr-nbt-develUpgrade libndr-standard0Upgrade samba-core-develUpgrade samba-x86Upgrade libsmbclient0-32bitUpgrade libgensec0Upgrade libsmbldap2-32bitUpgrade libnetapi-develUpgrade libsamba-credentials-develUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-errors-develUpgrade libsamba-util0Upgrade libsmbconf0Upgrade libsamba-policy-develUpgrade libnetapi0Upgrade libdcerpc-atsvc-develUpgrade libsmbclient0Upgrade libsmbclient-raw0Upgrade samba-krb-printingUpgrade samba-winbind-32bitUpgrade libtalloc1Upgrade samba-kdcUpgrade libndr-nbt0Upgrade samba-client-x86Upgrade libndr-krb5pac0-32bitUpgrade libpdb0Upgrade samba-docUpgrade samba-libs-python3-32bitUpgrade libdcerpc0-32bitUpgrade libtalloc1-32bitUpgrade samba-cephUpgrade libsamba-policy-python3-develUpgrade libtalloc2-x86Upgrade libsamdb0Upgrade libsamba-hostconfig-develUpgrade libsamba-credentials0-32bitUpgrade samba-test-develUpgrade libndr-nbt0-32bitUpgrade samba-client-32bitUpgrade samba-libs-32bitUpgrade libndr0-32bitUpgrade libtdb1-32bitUpgrade libdcerpc-binding0-32bitUpgrade libtdb-develUpgrade samba-clientUpgrade libndr1Upgrade libpdb0-32bitUpgrade libsmbldap2Upgrade libsmbconf-develUpgrade libndr0Upgrade libwbclient0-32bitUpgrade libndr-develUpgrade libsmbsharemodes-develUpgrade libsmbconf0-32bitUpgrade libsamba-errors0-32bitUpgrade libldb-develUpgrade libsmbclient-raw0-32bitUpgrade libdcerpc-binding0Upgrade libndr1-32bitUpgrade libsmbldap0Upgrade libsamba-util-develUpgrade libtdb1-x86Upgrade samba-winbind-x86Upgrade libsamba-policy0-python3Upgrade libtevent-develUpgrade ldapsmbUpgrade libtdb1Upgrade libsmbclient0-x86Upgrade libgensec-develUpgrade samba-develUpgrade samba-32bitUpgrade libtalloc2-32bitUpgrade samba-pythonUpgrade libsamba-hostconfig0Upgrade libregistry-develUpgrade samba-libsUpgrade libndr-krb5pac-develUpgrade libndr-standard-develUpgrade libndr-standard0-32bitUpgrade libwbclient0Upgrade libsmbclient-develUpgrade libgensec0-32bitUpgrade samba-dsdb-modulesUpgrade libsmbclient-raw-develUpgrade libldb1-32bitUpgrade libtalloc2Upgrade libdcerpc-develUpgrade libldb1Upgrade libsamba-credentials0Upgrade libtevent-util0-32bitUpgrade libsamba-passdb0Upgrade libpdb-develUpgrade libtevent0-32bitUpgrade samba-testUpgrade libsamba-policy0Upgrade libwbclient0-x86Upgrade libsamba-passdb-develUpgrade libsamba-passdb0-32bitUpgrade libsmbsharemodes0Upgrade libtalloc-develUpgrade libdcerpc-samr0Upgrade libsmbldap-develUpgrade libtevent-util0Upgrade libtevent0Upgrade libdcerpc-atsvc0Upgrade libdcerpc-samr-develUpgrade samba-libs-python3Upgrade libndr-krb5pac0Upgrade libnetapi0-32bitUpgrade libdcerpc0Upgrade samba-python3Upgrade libtevent-util-develUpgrade libsamba-util0-32bit | Dec 18, 2015 | Feb 23, 2015 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Feb 24, 2015 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub