The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | Apr 10, 2012 |
| Apple Osx Loginwindow | — | Upgrade macOS to the latest versionApply OS X security update 2012-002 | Aug 28, 2015 | Apr 10, 2012 |
| Apple Osx Samba | — | Apply OS X security update 2012-002 | Jul 16, 2012 | Apr 10, 2012 |
| Centos_linux | — | Upgrade openchange-develUpgrade samba-winbind-clientsUpgrade samba4-testUpgrade samba3x-docUpgrade samba4-commonUpgrade samba4-winbind-krb5-locatorUpgrade samba3x-commonUpgrade samba4-pythonUpgrade samba4-dcUpgrade libsmbclientUpgrade samba-winbind-develUpgrade samba-swatUpgrade samba3xUpgrade samba3x-domainjoin-guiUpgrade evolution-mapi-develUpgrade samba-winbindUpgrade openchange-clientUpgrade samba4-swatUpgrade samba3x-clientUpgrade samba4-develUpgrade evolution-mapiUpgrade samba4-dc-libsUpgrade samba-clientUpgrade samba4Upgrade samba-commonUpgrade samba4-winbind-clientsUpgrade openchangeUpgrade sambaUpgrade samba3x-swatUpgrade samba-winbind-krb5-locatorUpgrade samba4-clientUpgrade libsmbclient-develUpgrade samba4-winbindUpgrade samba3x-winbindUpgrade samba-docUpgrade samba4-pidlUpgrade samba3x-winbind-develUpgrade samba4-libsUpgrade samba-domainjoin-guiUpgrade openchange-devel-docs | Dec 1, 2016 | Apr 10, 2012 |
| Cifs Samba | — | Upgrade to Samba version 3.4.16Upgrade to Samba version 3.5.14Upgrade to Samba version 3.6.4 | May 15, 2012 | Apr 10, 2012 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Apr 10, 2012 |
| Freebsd | — | Upgrade samba36Upgrade samba35Upgrade samba34 | Dec 10, 2025 | Apr 10, 2012 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 10, 2012 |
| Hpux | — | Update CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-MAN to the latest versionUpdate CIFS-CFSM.CFSM-KRN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-CFSM.CFSM-MAN to the latest versionUpdate CIFS-CFSM.CFSM-RUN to the latest version | Aug 11, 2017 | Apr 10, 2012 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.5.14-0.175.0.7.0.5.0 on Solaris 11.0 | May 29, 2017 | Apr 10, 2012 |
| Oracle_linux | — | Upgrade samba3x-clientUpgrade samba-docUpgrade samba4-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade sambaUpgrade openchange-develUpgrade samba4-swatUpgrade samba4-develUpgrade samba-swatUpgrade samba4-commonUpgrade samba4-pythonUpgrade samba3x-swatUpgrade evolution-mapiUpgrade samba-winbindUpgrade libsmbclientUpgrade samba4-libsUpgrade samba3xUpgrade samba3x-docUpgrade samba3x-commonUpgrade samba3x-domainjoin-guiUpgrade openchange-clientUpgrade samba4-dc-libsUpgrade samba4-testUpgrade samba-winbind-krb5-locatorUpgrade samba4-winbindUpgrade samba-domainjoin-guiUpgrade samba4Upgrade libsmbclient-develUpgrade openchangeUpgrade samba-clientUpgrade samba-winbind-develUpgrade samba3x-winbind-develUpgrade openchange-devel-docsUpgrade evolution-mapi-develUpgrade samba4-pidlUpgrade samba-commonUpgrade samba4-dcUpgrade samba4-clientUpgrade samba3x-winbindUpgrade samba4-winbind-clients | Oct 16, 2024 | Apr 10, 2012 |
| Suse | — | Upgrade libsmbclient0-debuginfo-x86Upgrade libwbclient-develUpgrade libwbclient0-32bitUpgrade samba-debuginfo-32bitUpgrade libldb1-debuginfo-32bitUpgrade libldb1-debuginfoUpgrade libmsrpcUpgrade libmsrpc-develUpgrade libsmbsharemodes-develUpgrade libtdb1-debuginfo-x86Upgrade samba-krb-printingUpgrade samba-client-64bitUpgrade samba-debuginfoUpgrade samba-debugsourceUpgrade libldb-develUpgrade samba-debuginfo-x86Upgrade libwbclient0-debuginfo-x86Upgrade libldb1Upgrade samba-client-debuginfo-x86Upgrade samba-winbind-debuginfo-x86Upgrade libtdb-develUpgrade libldb1-x86Upgrade libsmbclientUpgrade libnetapi-develUpgrade libnetapi0Upgrade libtdb1-debuginfoUpgrade libtalloc2-debuginfoUpgrade libtdb1-32bitUpgrade libsmbclient0-debuginfoUpgrade libsmbclient-32bitUpgrade libsmbclient0Upgrade libtalloc2-x86Upgrade cifs-mountUpgrade samba-x86Upgrade libsmbclient-x86Upgrade libtevent0-debuginfoUpgrade libnetapi0-debuginfoUpgrade libtalloc2-32bitUpgrade libsmbclient0-debuginfo-32bitUpgrade libsmbsharemodes0Upgrade samba-winbind-debuginfoUpgrade samba-winbind-x86Upgrade libsmbclient0-x86Upgrade libtalloc2-debuginfo-32bitUpgrade libsmbsharemodesUpgrade samba-clientUpgrade samba-client-debuginfoUpgrade samba-client-32bitUpgrade libldb1-debuginfo-x86Upgrade libtevent0-32bitUpgrade libwbclient0Upgrade libtalloc-develUpgrade libsmbsharemodes0-debuginfoUpgrade libwbclient0-debuginfo-32bitUpgrade samba-client-x86Upgrade samba-winbindUpgrade libwbclient0-debuginfoUpgrade samba-winbind-64bitUpgrade libtevent0-debuginfo-32bitUpgrade ldapsmbUpgrade samba-32bitUpgrade samba-winbind-debuginfo-32bitUpgrade libsmbclient0-32bitUpgrade libtevent-develUpgrade libsmbclient-develUpgrade libtalloc2-debuginfo-x86Upgrade libtdb1-x86Upgrade samba-krb-printing-debuginfoUpgrade samba-64bitUpgrade samba-docUpgrade libtalloc2Upgrade libtdb1-debuginfo-32bitUpgrade libsmbclient-64bitUpgrade libtevent0-x86Upgrade libtdb1Upgrade samba-pythonUpgrade samba-vscanUpgrade libldb1-32bitUpgrade libtevent0-debuginfo-x86Upgrade samba-client-debuginfo-32bitUpgrade sambaUpgrade libwbclient0-x86Upgrade libtevent0Upgrade samba-winbind-32bitUpgrade samba-devel | Feb 17, 2015 | Apr 10, 2012 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Apr 10, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub