The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return values to ensure successful ASN.1 memory allocation, which allows remote attackers to cause a denial of service (memory consumption and daemon crash) via crafted packets.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Dec 29, 2015 |
| Centos_linux | — | Upgrade samba4-commonUpgrade samba4-swatUpgrade samba4-pidlUpgrade samba4-clientUpgrade samba4-pythonUpgrade samba4Upgrade samba4-dc-libsUpgrade samba4-winbind-clientsUpgrade samba4-dcUpgrade samba4-develUpgrade samba4-winbind-krb5-locatorUpgrade samba4-testUpgrade samba4-libsUpgrade samba4-winbind | Jul 6, 2016 | Dec 29, 2015 |
| Debian | — | Upgrade samba | Jan 4, 2016 | Dec 29, 2015 |
| Freebsd | — | Upgrade samba36Upgrade samba43Upgrade ldbUpgrade samba4Upgrade samba41Upgrade samba42 | Dec 10, 2025 | Dec 19, 2015 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Dec 29, 2015 |
| Oracle_linux | — | Upgrade samba-testUpgrade samba4-pidlUpgrade samba4-swatUpgrade samba-test-libsUpgrade samba-dc-libsUpgrade samba-pythonUpgrade samba4-winbindUpgrade samba-test-develUpgrade samba-commonUpgrade samba4-clientUpgrade samba4-pythonUpgrade samba4-winbind-clientsUpgrade samba-winbind-clientsUpgrade samba-vfs-glusterfsUpgrade samba4-dc-libsUpgrade samba-dcUpgrade samba-pidlUpgrade libsmbclientUpgrade libwbclient-develUpgrade samba4-testUpgrade samba-common-libsUpgrade samba4-winbind-krb5-locatorUpgrade samba-winbind-modulesUpgrade samba4-dcUpgrade libwbclientUpgrade samba4Upgrade libsmbclient-develUpgrade samba-libsUpgrade samba4-commonUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-develUpgrade samba4-develUpgrade sambaUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade samba4-libs | Oct 16, 2024 | Dec 29, 2015 |
| Samba | — | Upgrade to Samba version 4.1.22 | Mar 24, 2016 | Dec 29, 2015 |
| Suse | — | Upgrade libnetapi0-debuginfo-32bitUpgrade libdcerpc-binding0-32bitUpgrade python-tevent-32bitUpgrade talloc-debugsourceUpgrade libgensec-develUpgrade libwbclient0Upgrade libregistry0-debuginfo-32bitUpgrade libsamba-hostconfig0-debuginfoUpgrade libsamdb0-32bitUpgrade libgensec0-debuginfoUpgrade pytalloc-debuginfoUpgrade libndr-krb5pac-develUpgrade libndr-nbt0-debuginfo-32bitUpgrade samba-winbind-debuginfo-32bitUpgrade libndr-nbt0-debuginfoUpgrade libpdb0Upgrade libtevent0-debuginfoUpgrade libdcerpc0-debuginfo-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libndr-nbt-develUpgrade libtdb1Upgrade libpdb0-debuginfo-32bitUpgrade libnetapi0-32bitUpgrade libgensec0-32bitUpgrade samba-client-debuginfoUpgrade libsamba-policy0Upgrade libsmbconf0-debuginfo-32bitUpgrade libldb1-debuginfo-32bitUpgrade libsamba-credentials0Upgrade ldb-debugsourceUpgrade libtevent-util0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libdcerpc-samr-develUpgrade samba-client-debuginfo-32bitUpgrade libndr-standard0-32bitUpgrade tdb-toolsUpgrade libtalloc2-debuginfoUpgrade python-tdbUpgrade libtalloc2-debuginfo-32bitUpgrade libsamba-credentials0-debuginfoUpgrade libsmbclient-raw-develUpgrade libtalloc-develUpgrade libregistry-develUpgrade libgensec0-debuginfo-32bitUpgrade libregistry0Upgrade libdcerpc-binding0Upgrade libdcerpc-samr0-debuginfo-32bitUpgrade libsamdb0-debuginfo-32bitUpgrade samba-testUpgrade libtevent0-32bitUpgrade samba-32bitUpgrade samba-libsUpgrade libwbclient0-32bitUpgrade libtevent0Upgrade libsamba-util-develUpgrade libdcerpc-atsvc0Upgrade libsamba-util0-debuginfo-32bitUpgrade python-tdb-debuginfo-32bitUpgrade samba-winbindUpgrade libsmbclient-develUpgrade samba-winbind-debuginfoUpgrade libdcerpc-binding0-debuginfoUpgrade libsamba-policy-develUpgrade libsmbclient-raw0-debuginfo-32bitUpgrade libsamba-policy0-debuginfoUpgrade libsmbclient0-debuginfo-32bitUpgrade libwbclient-develUpgrade libndr0-debuginfo-32bitUpgrade libndr0-debuginfoUpgrade libtevent0-debuginfo-32bitUpgrade libtevent-util0-debuginfo-32bitUpgrade libndr-krb5pac0Upgrade libwbclient0-debuginfo-32bitUpgrade python-tevent-debuginfo-32bitUpgrade samba-python-debuginfoUpgrade libtalloc2Upgrade samba-core-develUpgrade libdcerpc0-32bitUpgrade libsamba-policy0-32bitUpgrade libndr-krb5pac0-debuginfoUpgrade libdcerpc0Upgrade samba-test-debuginfoUpgrade libsmbsharemodes-develUpgrade libtevent-develUpgrade tevent-debugsourceUpgrade libsamba-hostconfig0-debuginfo-32bitUpgrade libtalloc2-32bitUpgrade libpdb0-debuginfoUpgrade tdb-tools-debuginfoUpgrade libnetapi0-debuginfoUpgrade libtevent-util0Upgrade tdb-debugsourceUpgrade pytallocUpgrade libwbclient0-debuginfoUpgrade libsmbclient-raw0-debuginfoUpgrade pyldb-debuginfoUpgrade python-tdb-32bitUpgrade libdcerpc-samr0-32bitUpgrade libdcerpc-atsvc0-32bitUpgrade libtevent-util-develUpgrade libsmbconf-develUpgrade libndr-krb5pac0-debuginfo-32bitUpgrade python-teventUpgrade libtdb1-debuginfoUpgrade samba-docUpgrade pyldbUpgrade libsamba-hostconfig0Upgrade samba-client-32bitUpgrade libndr-standard0-debuginfo-32bitUpgrade libsmbsharemodes0-debuginfoUpgrade libsamba-util0-debuginfoUpgrade libsmbconf0-32bitUpgrade libtdb1-32bitUpgrade libsmbclient-raw0Upgrade libsamba-credentials0-32bitUpgrade libdcerpc-samr0-debuginfoUpgrade libsamba-util0Upgrade python-tevent-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-libs-debuginfo-32bitUpgrade libsmbclient0-32bitUpgrade libsmbldap0-debuginfo-32bitUpgrade libldb1Upgrade libpdb0-32bitUpgrade libsmbclient0Upgrade pytalloc-debuginfo-32bitUpgrade libsmbconf0Upgrade libdcerpc-atsvc0-debuginfoUpgrade libldb-develUpgrade libpdb-develUpgrade libsmbclient0-debuginfoUpgrade libsamba-util0-32bitUpgrade libsamba-credentials0-debuginfo-32bitUpgrade libsamba-hostconfig-develUpgrade samba-debuginfo-32bitUpgrade pyldb-develUpgrade libndr0Upgrade samba-clientUpgrade libregistry0-debuginfoUpgrade libsmbldap0-debuginfoUpgrade libgensec0Upgrade libndr-krb5pac0-32bitUpgrade samba-pidlUpgrade libsamdb0Upgrade libsamdb-develUpgrade libdcerpc0-debuginfoUpgrade libdcerpc-atsvc-develUpgrade libsamdb0-debuginfoUpgrade pytalloc-32bitUpgrade samba-debugsourceUpgrade libndr-develUpgrade libdcerpc-samr0Upgrade libnetapi0Upgrade libsamba-credentials-develUpgrade python-tdb-debuginfoUpgrade pyldb-debuginfo-32bitUpgrade libnetapi-develUpgrade libsamba-policy0-debuginfo-32bitUpgrade ldb-toolsUpgrade sambaUpgrade libtdb-develUpgrade libndr-standard0-debuginfoUpgrade libtevent-util0-debuginfoUpgrade libdcerpc-binding0-debuginfo-32bitUpgrade libsmbconf0-debuginfoUpgrade libldb1-debuginfoUpgrade samba-pythonUpgrade samba-test-develUpgrade libsmbldap-develUpgrade libldb1-32bitUpgrade ldb-tools-debuginfoUpgrade samba-winbind-32bitUpgrade libndr-nbt0Upgrade samba-libs-32bitUpgrade libndr-standard0Upgrade libdcerpc-develUpgrade libdcerpc-atsvc0-debuginfo-32bitUpgrade libndr0-32bitUpgrade pyldb-32bitUpgrade libsmbsharemodes0Upgrade libtdb1-debuginfo-32bitUpgrade samba-debuginfoUpgrade libsmbldap0Upgrade libsmbldap0-32bitUpgrade libregistry0-32bitUpgrade pytalloc-develUpgrade libndr-nbt0-32bitUpgrade libndr-standard-devel | Jan 4, 2016 | Dec 24, 2015 |
| Ubuntu | — | Upgrade samba | Feb 2, 2016 | Dec 29, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub