CVE-2013-4124 Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (m...
MediumCVSS 5.0
EPSS 69.0%
Framework module
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/samba(Debian:12) | < 2:3.6.17-1 | 2:3.6.17-1 |
| debian/samba(Debian:13) | < 2:3.6.17-1 | 2:3.6.17-1 |
| debian/samba(Debian:14) | < 2:3.6.17-1 | 2:3.6.17-1 |
| Canonical Ubuntu Linux | = 10.04 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 12.10 | No fix listed |
| Canonical Ubuntu Linux | = 13.04 | No fix listed |
| redhat enterprise linux | = 5 | No fix listed |
| fedoraproject fedora | = 18 | No fix listed |
| fedoraproject fedora | = 19 | No fix listed |
| samba | = 3.0.0 | No fix listed |
| samba | = 3.0.1 | No fix listed |
| samba | = 3.0.2 | No fix listed |
| samba | = 3.0.2-a | No fix listed |
| samba | = 3.0.2a | No fix listed |
| samba | = 3.0.3 | No fix listed |
| samba | = 3.0.4 | No fix listed |
| samba | = 3.0.4-rc1 | No fix listed |
| samba | = 3.0.5 | No fix listed |
| samba | = 3.0.6 | No fix listed |
| samba | = 3.0.7 | No fix listed |
| samba | = 3.0.8 | No fix listed |
| samba | = 3.0.9 | No fix listed |
| samba | = 3.0.10 | No fix listed |
| samba | = 3.0.11 | No fix listed |
Show 155 more
| Product | Affected versions | Fixed in |
|---|---|---|
| samba | = 3.0.12 | No fix listed |
| samba | = 3.0.13 | No fix listed |
| samba | = 3.0.14 | No fix listed |
| samba | = 3.0.14-a | No fix listed |
| samba | = 3.0.14a | No fix listed |
| samba | = 3.0.15 | No fix listed |
| samba | = 3.0.16 | No fix listed |
| samba | = 3.0.17 | No fix listed |
| samba | = 3.0.18 | No fix listed |
| samba | = 3.0.19 | No fix listed |
| samba | = 3.0.20 | No fix listed |
| samba | = 3.0.20-a | No fix listed |
| samba | = 3.0.20-b | No fix listed |
| samba | = 3.0.20a | No fix listed |
| samba | = 3.0.20b | No fix listed |
| samba | = 3.0.21 | No fix listed |
| samba | = 3.0.21-a | No fix listed |
| samba | = 3.0.21-b | No fix listed |
| samba | = 3.0.21-c | No fix listed |
| samba | = 3.0.21a | No fix listed |
| samba | = 3.0.21b | No fix listed |
| samba | = 3.0.21c | No fix listed |
| samba | = 3.0.22 | No fix listed |
| samba | = 3.0.23 | No fix listed |
| samba | = 3.0.23-a | No fix listed |
| samba | = 3.0.23-b | No fix listed |
| samba | = 3.0.23-c | No fix listed |
| samba | = 3.0.23-d | No fix listed |
| samba | = 3.0.23a | No fix listed |
| samba | = 3.0.23b | No fix listed |
| samba | = 3.0.23c | No fix listed |
| samba | = 3.0.23d | No fix listed |
| samba | = 3.0.24 | No fix listed |
| samba | = 3.0.25 | No fix listed |
| samba | = 3.0.25-a | No fix listed |
| samba | = 3.0.25-b | No fix listed |
| samba | = 3.0.25-c | No fix listed |
| samba | = 3.0.25-pre1 | No fix listed |
| samba | = 3.0.25-pre2 | No fix listed |
| samba | = 3.0.25-rc1 | No fix listed |
| samba | = 3.0.25-rc2 | No fix listed |
| samba | = 3.0.25-rc3 | No fix listed |
| samba | = 3.0.25a | No fix listed |
| samba | = 3.0.25b | No fix listed |
| samba | = 3.0.25c | No fix listed |
| samba | = 3.0.26 | No fix listed |
| samba | = 3.0.26-a | No fix listed |
| samba | = 3.0.26a | No fix listed |
| samba | = 3.0.27 | No fix listed |
| samba | = 3.0.27-a | No fix listed |
| samba | = 3.0.28 | No fix listed |
| samba | = 3.0.28-a | No fix listed |
| samba | = 3.0.29 | No fix listed |
| samba | = 3.0.30 | No fix listed |
| samba | = 3.0.31 | No fix listed |
| samba | = 3.0.32 | No fix listed |
| samba | = 3.0.33 | No fix listed |
| samba | = 3.0.34 | No fix listed |
| samba | = 3.0.35 | No fix listed |
| samba | = 3.0.36 | No fix listed |
| samba | = 3.0.37 | No fix listed |
| samba | = 3.1.0 | No fix listed |
| samba | = 3.2.0 | No fix listed |
| samba | = 3.2.1 | No fix listed |
| samba | = 3.2.2 | No fix listed |
| samba | = 3.2.3 | No fix listed |
| samba | = 3.2.4 | No fix listed |
| samba | = 3.2.5 | No fix listed |
| samba | = 3.2.6 | No fix listed |
| samba | = 3.2.7 | No fix listed |
| samba | = 3.2.8 | No fix listed |
| samba | = 3.2.9 | No fix listed |
| samba | = 3.2.10 | No fix listed |
| samba | = 3.2.11 | No fix listed |
| samba | = 3.2.12 | No fix listed |
| samba | = 3.2.13 | No fix listed |
| samba | = 3.2.14 | No fix listed |
| samba | = 3.2.15 | No fix listed |
| samba | = 3.3.0 | No fix listed |
| samba | = 3.3.1 | No fix listed |
| samba | = 3.3.2 | No fix listed |
| samba | = 3.3.3 | No fix listed |
| samba | = 3.3.4 | No fix listed |
| samba | = 3.3.5 | No fix listed |
| samba | = 3.3.6 | No fix listed |
| samba | = 3.3.7 | No fix listed |
| samba | = 3.3.8 | No fix listed |
| samba | = 3.3.9 | No fix listed |
| samba | = 3.3.10 | No fix listed |
| samba | = 3.3.11 | No fix listed |
| samba | = 3.3.12 | No fix listed |
| samba | = 3.3.13 | No fix listed |
| samba | = 3.3.14 | No fix listed |
| samba | = 3.3.15 | No fix listed |
| samba | = 3.3.16 | No fix listed |
| samba | = 3.4.0 | No fix listed |
| samba | = 3.4.1 | No fix listed |
| samba | = 3.4.2 | No fix listed |
| samba | = 3.4.3 | No fix listed |
| samba | = 3.4.4 | No fix listed |
| samba | = 3.4.5 | No fix listed |
| samba | = 3.4.6 | No fix listed |
| samba | = 3.4.7 | No fix listed |
| samba | = 3.4.8 | No fix listed |
| samba | = 3.4.9 | No fix listed |
| samba | = 3.4.10 | No fix listed |
| samba | = 3.4.11 | No fix listed |
| samba | = 3.4.12 | No fix listed |
| samba | = 3.4.13 | No fix listed |
| samba | = 3.4.14 | No fix listed |
| samba | = 3.4.15 | No fix listed |
| samba | = 3.4.16 | No fix listed |
| samba | = 3.4.17 | No fix listed |
| samba | = 3.5.0 | No fix listed |
| samba | = 3.5.1 | No fix listed |
| samba | = 3.5.2 | No fix listed |
| samba | = 3.5.10 | No fix listed |
| samba | = 3.5.11 | No fix listed |
| samba | = 3.5.12 | No fix listed |
| samba | = 3.5.13 | No fix listed |
| samba | = 3.5.14 | No fix listed |
| samba | = 3.5.15 | No fix listed |
| samba | = 3.5.16 | No fix listed |
| samba | = 3.5.17 | No fix listed |
| samba | = 3.5.18 | No fix listed |
| samba | = 3.5.19 | No fix listed |
| samba | = 3.5.20 | No fix listed |
| samba | = 3.5.21 | No fix listed |
| samba | = 3.6.0 | No fix listed |
| samba | = 3.6.1 | No fix listed |
| samba | = 3.6.2 | No fix listed |
| samba | = 3.6.3 | No fix listed |
| samba | = 3.6.4 | No fix listed |
| samba | = 3.6.5 | No fix listed |
| samba | = 3.6.6 | No fix listed |
| samba | = 3.6.7 | No fix listed |
| samba | = 3.6.8 | No fix listed |
| samba | = 3.6.9 | No fix listed |
| samba | = 3.6.10 | No fix listed |
| samba | = 3.6.11 | No fix listed |
| samba | = 3.6.12 | No fix listed |
| samba | = 3.6.13 | No fix listed |
| samba | = 3.6.14 | No fix listed |
| samba | = 3.6.15 | No fix listed |
| samba | = 3.6.16 | No fix listed |
| samba | = 4.0.0 | No fix listed |
| samba | = 4.0.1 | No fix listed |
| samba | = 4.0.2 | No fix listed |
| samba | = 4.0.3 | No fix listed |
| samba | = 4.0.4 | No fix listed |
| samba | = 4.0.5 | No fix listed |
| samba | = 4.0.6 | No fix listed |
| samba | = 4.0.7 | No fix listed |
| opensuse | = 12.2 | No fix listed |
| opensuse | = 12.3 | No fix listed |
References
- Debian Security Tracker CVE-2013-4124 vendor-advisory
- 20130806 [slackware-security] samba (SSA:2013-218-03) mailing-list
- ftp.samba.org patch
- FEDORA-2013-14312 vendor-advisory
- FEDORA-2013-14355 vendor-advisory
- FEDORA-2014-9132 vendor-advisory
- openSUSE-SU-2013:1339 vendor-advisory
- openSUSE-SU-2013:1349 vendor-advisory
- HPSBUX03087 vendor-advisory
- 95969 vdb-entry
- RHSA-2013:1310 vendor-advisory
- RHSA-2013:1542 vendor-advisory
- RHSA-2013:1543 vendor-advisory
- RHSA-2014:0305 vendor-advisory
- 54519 third-party-advisory vendor-advisory
- GLSA-201502-15 vendor-advisory
- MDVSA-2013:207 vendor-advisory
- www.samba.org vendor-advisory
- www.samba.org vendor-advisory
- www.samba.org vendor-advisory
- www.samba.org vendor-advisory
- 1028882 vdb-entry
- USN-1966-1 vendor-advisory
- bugzilla.redhat.com
- samba-cve20134121-dos(86185) vdb-entry