Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted field in a packet.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Samba | — | Apply OS X security update 2010-005 | Dec 16, 2011 | Jun 17, 2010 |
| Centos_linux | — | Upgrade samba3x-commonUpgrade samba-clientUpgrade samba3x-winbindUpgrade libtalloc-develUpgrade libtallocUpgrade samba3x-swatUpgrade samba-swatUpgrade samba3x-winbind-develUpgrade sambaUpgrade samba3xUpgrade samba3x-clientUpgrade samba3x-docUpgrade tdb-toolsUpgrade libtdbUpgrade libtdb-develUpgrade samba3x-domainjoin-guiUpgrade samba-common | Dec 1, 2016 | Jun 17, 2010 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Jun 17, 2010 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Jun 17, 2010 |
| Hpux | — | Update CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-CFSM.CFSM-MAN to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-MAN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-CFSM.CFSM-RUN to the latest versionUpdate CIFS-CFSM.CFSM-KRN to the latest version | Aug 11, 2017 | Jun 17, 2010 |
| Oracle_linux | — | Upgrade tdb-toolsUpgrade samba3x-docUpgrade samba-commonUpgrade samba-swatUpgrade libtdb-develUpgrade sambaUpgrade libsmbclientUpgrade samba3x-domainjoin-guiUpgrade samba3xUpgrade libsmbclient-develUpgrade samba-clientUpgrade samba3x-commonUpgrade libtdbUpgrade libtalloc-develUpgrade samba3x-winbindUpgrade samba3x-swatUpgrade samba3x-winbind-develUpgrade libtallocUpgrade samba3x-client | Oct 16, 2024 | Jun 17, 2010 |
| Samba | — | Upgrade to Samba version 3.3.13 | Nov 13, 2013 | Jun 17, 2010 |
| Suse | — | Upgrade libsmbsharemodes-develUpgrade libtalloc1-64bitUpgrade libtdb1-64bitUpgrade samba-winbind-x86Upgrade libtdb-develUpgrade samba-client-64bitUpgrade libtalloc1Upgrade libsmbclient-64bitUpgrade ldapsmbUpgrade libtalloc1-x86Upgrade libtdb1Upgrade samba-winbind-64bitUpgrade samba-clientUpgrade samba-vscanUpgrade libsmbclient-x86Upgrade libsmbclient0-x86Upgrade libsmbsharemodes0Upgrade samba-develUpgrade libtalloc-develUpgrade libsmbclient-develUpgrade samba-pdbUpgrade libwbclient0Upgrade samba-client-x86Upgrade samba-client-32bitUpgrade libtdb1-x86Upgrade libwbclient0-64bitUpgrade samba-x86Upgrade libtdb1-32bitUpgrade libsmbsharemodesUpgrade libsmbclient-32bitUpgrade libwbclient0-x86Upgrade libmsrpcUpgrade libsmbclient0Upgrade sap-aio-releaseUpgrade libnetapi0Upgrade libsmbclientUpgrade libmsrpc-develUpgrade samba-64bitUpgrade cifs-mountUpgrade libwbclient-develUpgrade libsmbclient0-64bitUpgrade libwbclient0-32bitUpgrade samba-docUpgrade samba-32bitUpgrade sambaUpgrade libtalloc1-32bitUpgrade libsmbclient0-32bitUpgrade samba-pythonUpgrade samba-krb-printingUpgrade samba-winbindUpgrade libnetapi-develUpgrade samba-winbind-32bit | Feb 17, 2015 | Jun 17, 2010 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Jun 17, 2010 |
| Vmsa 2010 0013 | — | Upgrade VMware ESX 3.5 to build number 283373 | Nov 19, 2010 | Jun 17, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub