client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libsmbclient-develUpgrade samba-swatUpgrade sambaUpgrade libsmbclientUpgrade samba-commonUpgrade samba-client | Dec 1, 2016 | Feb 4, 2010 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Feb 4, 2010 |
| Gentoo Linux | — | Upgrade net-fs/mount-cifs. | Oct 30, 2017 | Feb 4, 2010 |
| Oracle_linux | — | Upgrade samba-swatUpgrade libsmbclientUpgrade libsmbclient-develUpgrade sambaUpgrade samba-commonUpgrade samba-client | Oct 16, 2024 | Feb 4, 2010 |
| Samba | — | Upgrade to Samba version 3.4.6 | Apr 30, 2018 | Feb 4, 2010 |
| Suse | — | Upgrade libldb1Upgrade libndr-standard0-32bitUpgrade libsmbldap2-32bitUpgrade samba-ldb-ldapUpgrade wb-cifs-idmap-pluginUpgrade samba-winbind-x86Upgrade cifs-utilsUpgrade libsmbldap-develUpgrade samba-client-langUpgrade libsmbconf0-32bitUpgrade samba-libs-python3-32bitUpgrade libtalloc2Upgrade sambaUpgrade libdcerpc-atsvc0Upgrade libwbclient0Upgrade libtalloc1-32bitUpgrade libsamba-passdb0-32bitUpgrade libsmbsharemodes0Upgrade libsamba-hostconfig0-32bitUpgrade libdcerpc-binding0Upgrade libndr-develUpgrade libnetapi0Upgrade samba-client-libsUpgrade libsamba-hostconfig-develUpgrade libtalloc-develUpgrade libdcerpc-atsvc-develUpgrade samba-core-develUpgrade samba-libs-32bitUpgrade libndr0Upgrade libsmbclient-develUpgrade samba-pythonUpgrade libgensec0-32bitUpgrade libndr-nbt0Upgrade libgensec-develUpgrade libsmbconf0Upgrade libtevent0-32bitUpgrade libtdb1-x86Upgrade samba-dsdb-modulesUpgrade samba-ad-dc-libsUpgrade libwbclient-develUpgrade libtevent-develUpgrade samba-winbind-libs-langUpgrade libdcerpc-samr0Upgrade libsmbclient-raw0-32bitUpgrade samba-docUpgrade samba-testUpgrade libldb2Upgrade libndr-krb5pac-develUpgrade libtevent0Upgrade samba-winbind-32bitUpgrade samba-winbindUpgrade libdcerpc-develUpgrade libsmbclient-raw-develUpgrade libwbclient0-32bitUpgrade samba-python3Upgrade samba-32bitUpgrade cifs-utils-develUpgrade libtevent-util0-32bitUpgrade samba-dcerpcUpgrade samba-winbind-libsUpgrade samba-libsUpgrade libtevent0-x86Upgrade samba-libs-python3Upgrade libsamba-passdb-develUpgrade libsamba-credentials0Upgrade libsamba-policy0Upgrade libpdb-develUpgrade libwbclient0-x86Upgrade libndr-krb5pac0Upgrade samba-test-develUpgrade libtalloc2-x86Upgrade libtdb-develUpgrade libsamba-util-develUpgrade cifs-mountUpgrade libtalloc1-x86Upgrade ldb-toolsUpgrade libsamdb0-32bitUpgrade libsmbldap2Upgrade libdcerpc0-32bitUpgrade samba-develUpgrade libpdb0Upgrade libnetapi0-32bitUpgrade libsmbclient0-32bitUpgrade libsamba-errors0-32bitUpgrade libpdb0-32bitUpgrade libsamba-util0-32bitUpgrade samba-clientUpgrade samba-x86Upgrade libsamdb0Upgrade libsamdb-develUpgrade libsmbldap0-32bitUpgrade python3-ldbUpgrade samba-ad-dcUpgrade libldb-develUpgrade libsamba-util0Upgrade libnetapi-develUpgrade samba-gpupdateUpgrade libtdb1-32bitUpgrade libregistry-develUpgrade libndr-krb5pac0-32bitUpgrade libsmbconf-develUpgrade libsmbsharemodes-develUpgrade libsamba-passdb0Upgrade ctdbUpgrade libdcerpc-binding0-32bitUpgrade libndr-nbt0-32bitUpgrade libndr-standard-develUpgrade libsamba-credentials0-32bitUpgrade libtalloc1Upgrade libsmbclient-raw0Upgrade libtalloc2-32bitUpgrade samba-client-32bitUpgrade libtdb1Upgrade libsamba-credentials-develUpgrade ldapsmbUpgrade libdcerpc0Upgrade libsamba-errors-develUpgrade libsmbclient0Upgrade pam_cifscredsUpgrade samba-krb-printingUpgrade libsamba-errors0Upgrade libsmbldap0Upgrade ctdb-pcp-pmdaUpgrade samba-toolUpgrade libtevent-util0Upgrade libgensec0Upgrade libndr-nbt-develUpgrade libsamba-hostconfig0Upgrade libtevent-util-develUpgrade libndr0-32bitUpgrade samba-kdcUpgrade libsmbclient0-x86Upgrade libregistry0Upgrade libndr-standard0Upgrade libsamba-policy-develUpgrade libdcerpc-samr-develUpgrade samba-client-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 19, 2024 | Feb 4, 2010 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267Upgrade VMware ESX 4.0 to build number 660575 | Feb 3, 2012 | Feb 4, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub