The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade samba-winbind-develUpgrade samba-commonUpgrade samba4-winbindUpgrade sambaUpgrade samba4Upgrade samba-libsUpgrade samba-winbindUpgrade samba4-pidlUpgrade samba3x-swatUpgrade samba4-pythonUpgrade libwbclientUpgrade samba-testUpgrade samba4-dcUpgrade libsmbclient-develUpgrade samba-develUpgrade samba-pythonUpgrade samba-winbind-krb5-locatorUpgrade samba-domainjoin-guiUpgrade samba4-libsUpgrade samba4-winbind-clientsUpgrade samba-docUpgrade samba4-clientUpgrade samba3x-winbind-develUpgrade samba-test-develUpgrade samba-glusterfsUpgrade libwbclient-develUpgrade samba-dc-libsUpgrade samba-swatUpgrade samba4-dc-libsUpgrade samba-winbind-modulesUpgrade samba-vfs-glusterfsUpgrade samba-clientUpgrade samba3x-docUpgrade samba4-winbind-krb5-locatorUpgrade samba3x-commonUpgrade samba-pidlUpgrade samba-winbind-clientsUpgrade samba-dcUpgrade libsmbclientUpgrade samba4-testUpgrade samba4-commonUpgrade samba3x-clientUpgrade samba3x-domainjoin-guiUpgrade samba3x-winbindUpgrade samba4-develUpgrade samba3xUpgrade samba4-swat | Dec 1, 2016 | Feb 23, 2015 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Feb 24, 2015 |
| Freebsd | — | Upgrade samba4Upgrade samba36Upgrade samba41 | Dec 10, 2025 | Feb 23, 2015 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Feb 23, 2015 |
| Hpux | — | Update CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest version | Aug 11, 2017 | Feb 23, 2015 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.6.25-0.175.2.8.0.4.0 on Solaris 11.2 | May 29, 2017 | Feb 23, 2015 |
| Oracle_linux | — | Upgrade samba3x-domainjoin-guiUpgrade samba4-dc-libsUpgrade samba4-swatUpgrade samba3x-docUpgrade samba3x-swatUpgrade samba4-develUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-pythonUpgrade samba4-winbind-krb5-locatorUpgrade samba-swatUpgrade samba-pidlUpgrade libwbclient-develUpgrade samba4-pythonUpgrade samba-docUpgrade samba-winbind-modulesUpgrade samba4-testUpgrade samba-winbindUpgrade samba-winbind-develUpgrade samba-glusterfsUpgrade samba3xUpgrade samba4-libsUpgrade samba3x-clientUpgrade samba-test-develUpgrade samba4-commonUpgrade sambaUpgrade samba3x-winbindUpgrade samba3x-winbind-develUpgrade samba-libsUpgrade samba-dc-libsUpgrade samba4-winbind-clientsUpgrade samba-commonUpgrade samba-develUpgrade samba-dcUpgrade samba-testUpgrade samba4-pidlUpgrade samba4-clientUpgrade libwbclientUpgrade samba-vfs-glusterfsUpgrade samba4-winbindUpgrade samba4Upgrade samba3x-commonUpgrade samba-clientUpgrade samba4-dcUpgrade samba-domainjoin-guiUpgrade libsmbclient-develUpgrade samba-winbind-krb5-locator | May 3, 2019 | Feb 24, 2015 |
| Samba | — | Upgrade to Samba version 4.1.17Upgrade to Samba version 4.0.25Upgrade to Samba version 3.6.25 | Feb 27, 2015 | Feb 23, 2015 |
| Suse | — | Upgrade libtalloc-develUpgrade libdcerpc-develUpgrade libgensec0-32bitUpgrade libldb1-32bitUpgrade samba-dsdb-modulesUpgrade libsamba-passdb0Upgrade samba-testUpgrade libdcerpc-samr-develUpgrade ldapsmbUpgrade libldb1Upgrade libtevent0Upgrade libtdb1Upgrade libsmbldap-develUpgrade libndr-standard-develUpgrade libgensec-develUpgrade libsmbsharemodes0Upgrade libtevent-develUpgrade libtevent-util0-32bitUpgrade libsamba-credentials0Upgrade libtevent-util0Upgrade samba-winbind-x86Upgrade samba-libsUpgrade samba-32bitUpgrade libdcerpc0Upgrade libtdb1-x86Upgrade libsamba-policy0-python3Upgrade libregistry-develUpgrade libsamba-policy0Upgrade libwbclient0Upgrade libndr-standard0-32bitUpgrade libsamba-util-develUpgrade libtalloc2-32bitUpgrade libsmbclient-develUpgrade libdcerpc-samr0Upgrade libndr-krb5pac0Upgrade samba-python3Upgrade libwbclient0-x86Upgrade libpdb-develUpgrade samba-develUpgrade libdcerpc-atsvc0Upgrade libsamba-passdb-develUpgrade libtevent0-32bitUpgrade libsamba-hostconfig0Upgrade samba-pythonUpgrade libtalloc2Upgrade libsamba-util0-32bitUpgrade samba-libs-python3Upgrade libnetapi0-32bitUpgrade libsmbclient0-x86Upgrade libsamba-passdb0-32bitUpgrade libsmbclient-raw-develUpgrade libtevent-util-develUpgrade libndr-krb5pac-develUpgrade libsmbclient-raw0-32bitUpgrade samba-client-32bitUpgrade libsamba-policy-develUpgrade libpdb0Upgrade libsamba-util0Upgrade libdcerpc0-32bitUpgrade libwbclient-develUpgrade libnetapi0Upgrade libnetapi-develUpgrade libndr-develUpgrade libsamdb-develUpgrade samba-test-develUpgrade libsamdb0-32bitUpgrade libtalloc1Upgrade libsamba-policy-python3-develUpgrade ctdbUpgrade samba-core-develUpgrade libsamba-credentials-develUpgrade samba-kdcUpgrade libpdb0-32bitUpgrade libgensec0Upgrade libsmbldap2Upgrade libwbclient0-32bitUpgrade libtalloc1-32bitUpgrade libsmbconf0Upgrade samba-winbind-32bitUpgrade samba-krb-printingUpgrade libsmbclient0-32bitUpgrade libsmbconf0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libdcerpc-binding0Upgrade samba-x86Upgrade samba-libs-python3-32bitUpgrade samba-clientUpgrade libregistry0Upgrade libsmbldap2-32bitUpgrade libtalloc2-x86Upgrade libsamba-errors-develUpgrade libndr-standard0Upgrade libldb-develUpgrade libsmbsharemodes-develUpgrade libndr-nbt-develUpgrade sambaUpgrade libndr1Upgrade samba-cephUpgrade samba-winbindUpgrade libsmbldap0-32bitUpgrade libndr0Upgrade libsamba-errors0-32bitUpgrade libndr-nbt0Upgrade libsmbclient0Upgrade libtdb-develUpgrade libsamba-credentials0-32bitUpgrade libndr-nbt0-32bitUpgrade libsmbldap0Upgrade samba-libs-32bitUpgrade libndr1-32bitUpgrade libsamba-hostconfig-develUpgrade libsmbclient-raw0Upgrade libsamdb0Upgrade samba-docUpgrade samba-client-x86Upgrade libndr0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libtdb1-32bitUpgrade libsamba-errors0Upgrade libsmbconf-develUpgrade libsamba-hostconfig0-32bitUpgrade libdcerpc-atsvc-devel | Dec 18, 2015 | Feb 23, 2015 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Feb 24, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub