The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libwbclientUpgrade samba-domainjoin-guiUpgrade samba-winbind-develUpgrade samba-testUpgrade samba-commonUpgrade samba4-winbindUpgrade samba4-dcUpgrade libsmbclient-develUpgrade samba-winbindUpgrade samba4-winbind-clientsUpgrade samba-develUpgrade samba-winbind-krb5-locatorUpgrade samba4Upgrade samba4-clientUpgrade samba3x-swatUpgrade sambaUpgrade samba4-pidlUpgrade samba-docUpgrade samba4-libsUpgrade samba-pythonUpgrade samba-libsUpgrade samba4-pythonUpgrade samba4-testUpgrade samba3x-commonUpgrade samba-test-develUpgrade samba-pidlUpgrade libwbclient-develUpgrade samba3x-winbindUpgrade samba4-commonUpgrade samba4-develUpgrade samba3xUpgrade samba-vfs-glusterfsUpgrade samba3x-docUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba4-winbind-krb5-locatorUpgrade samba4-swatUpgrade samba3x-domainjoin-guiUpgrade samba4-dc-libsUpgrade samba-swatUpgrade samba3x-winbind-develUpgrade libsmbclientUpgrade samba3x-clientUpgrade samba-glusterfsUpgrade samba-winbind-modulesUpgrade samba-dcUpgrade samba-dc-libs | Dec 1, 2016 | Feb 23, 2015 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Feb 24, 2015 |
| Freebsd | — | Upgrade samba4Upgrade samba36Upgrade samba41 | Dec 10, 2025 | Feb 23, 2015 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Feb 23, 2015 |
| Hpux | — | Update CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest version | Aug 11, 2017 | Feb 23, 2015 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.6.25-0.175.2.8.0.4.0 on Solaris 11.2 | May 29, 2017 | Feb 23, 2015 |
| Oracle_linux | — | Upgrade samba4-develUpgrade samba-winbindUpgrade samba3x-domainjoin-guiUpgrade samba-pidlUpgrade samba3xUpgrade samba4-commonUpgrade samba4-swatUpgrade samba3x-clientUpgrade samba4-dc-libsUpgrade samba4-libsUpgrade samba3x-swatUpgrade samba-glusterfsUpgrade samba4-winbind-krb5-locatorUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba-winbind-develUpgrade sambaUpgrade libwbclient-develUpgrade samba-test-develUpgrade samba-swatUpgrade samba4-testUpgrade samba-docUpgrade libsmbclientUpgrade samba3x-docUpgrade samba4-pythonUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade samba3x-winbindUpgrade samba-clientUpgrade samba4-dcUpgrade samba-dc-libsUpgrade libwbclientUpgrade samba4-winbind-clientsUpgrade samba-commonUpgrade samba-winbind-krb5-locatorUpgrade samba4-winbindUpgrade samba-develUpgrade samba4Upgrade samba3x-commonUpgrade samba4-clientUpgrade samba3x-winbind-develUpgrade samba-domainjoin-guiUpgrade samba-testUpgrade samba-dcUpgrade samba-vfs-glusterfsUpgrade samba4-pidlUpgrade libsmbclient-devel | May 3, 2019 | Feb 24, 2015 |
| Samba | — | Upgrade to Samba version 3.6.25Upgrade to Samba version 4.0.25Upgrade to Samba version 4.1.17 | Feb 27, 2015 | Feb 23, 2015 |
| Suse | — | Upgrade libsamba-policy-python3-develUpgrade libsamdb0-32bitUpgrade libsamba-errors0Upgrade libwbclient-develUpgrade libndr1-32bitUpgrade samba-libs-python3-32bitUpgrade libtalloc1-32bitUpgrade libtalloc1Upgrade libdcerpc-atsvc-develUpgrade libsmbconf0-32bitUpgrade libsmbldap0-32bitUpgrade libndr-nbt0Upgrade libsmbclient-raw0Upgrade libdcerpc-binding0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libldb-develUpgrade libsmbldap0Upgrade libsamba-errors-develUpgrade libtalloc2-x86Upgrade libndr-nbt-develUpgrade libndr0-32bitUpgrade samba-docUpgrade libsamba-credentials-develUpgrade libsamba-policy-develUpgrade libsmbclient0-32bitUpgrade libndr-krb5pac0-32bitUpgrade samba-test-develUpgrade libsmbclient-raw0-32bitUpgrade libsamba-util0Upgrade libsamba-errors0-32bitUpgrade samba-cephUpgrade libndr0Upgrade libsamdb-develUpgrade libsamdb0Upgrade samba-client-x86Upgrade samba-x86Upgrade libsmbconf-develUpgrade ctdbUpgrade libregistry0Upgrade samba-winbindUpgrade libnetapi0Upgrade libndr-nbt0-32bitUpgrade samba-kdcUpgrade libndr1Upgrade sambaUpgrade libnetapi-develUpgrade libsmbconf0Upgrade libpdb0Upgrade libtdb-develUpgrade libsmbsharemodes-develUpgrade libsmbclient0Upgrade libsmbldap2-32bitUpgrade samba-client-32bitUpgrade libndr-develUpgrade samba-core-develUpgrade libpdb0-32bitUpgrade libsmbldap2Upgrade libwbclient0-32bitUpgrade samba-winbind-32bitUpgrade libgensec0Upgrade libdcerpc-binding0Upgrade samba-krb-printingUpgrade libdcerpc0-32bitUpgrade samba-libs-32bitUpgrade libndr-standard0Upgrade samba-clientUpgrade libsamba-credentials0-32bitUpgrade libtdb1-32bitUpgrade libsamba-hostconfig-develUpgrade libgensec-develUpgrade libtevent-util0Upgrade libsamba-policy0-python3Upgrade samba-libs-python3Upgrade libdcerpc0Upgrade libsmbclient-develUpgrade libndr-krb5pac-develUpgrade libldb1Upgrade libldb1-32bitUpgrade samba-32bitUpgrade libtdb1Upgrade libtalloc2Upgrade libwbclient0-x86Upgrade libsamba-util-develUpgrade libdcerpc-samr0Upgrade ldapsmbUpgrade libtalloc2-32bitUpgrade libsmbsharemodes0Upgrade libdcerpc-samr-develUpgrade libpdb-develUpgrade libgensec0-32bitUpgrade libtdb1-x86Upgrade libtalloc-develUpgrade libsamba-hostconfig0Upgrade libtevent0-32bitUpgrade samba-libsUpgrade samba-winbind-x86Upgrade libsamba-passdb0-32bitUpgrade libsamba-util0-32bitUpgrade libsamba-passdb-develUpgrade libsmbclient0-x86Upgrade libnetapi0-32bitUpgrade libtevent-util-develUpgrade libsmbclient-raw-develUpgrade libwbclient0Upgrade libsamba-policy0Upgrade libtevent0Upgrade samba-develUpgrade libdcerpc-atsvc0Upgrade samba-testUpgrade libsamba-passdb0Upgrade samba-dsdb-modulesUpgrade libtevent-util0-32bitUpgrade libsamba-credentials0Upgrade libsmbldap-develUpgrade libndr-krb5pac0Upgrade libndr-standard0-32bitUpgrade libregistry-develUpgrade libdcerpc-develUpgrade libndr-standard-develUpgrade samba-pythonUpgrade samba-python3Upgrade libtevent-devel | Dec 18, 2015 | Feb 23, 2015 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Feb 24, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub