CVE-2013-4124
NoneCVSS
—
EPSS
69.0%
Published
Aug 6, 2013
CISA due date
—
The record
Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | samba | 0 | 2:3.6.17-1 |
| Debian:11 | samba | 0 | 2:3.6.17-1 |
| Debian:12 | samba | 0 | 2:3.6.17-1 |
| Debian:13 | samba | 0 | 2:3.6.17-1 |
| Mageia:2 | samba | 0 | 3.6.5-2.3.mga2 |
| Mageia:3 | samba | 0 | 3.6.15-1.1.mga3 |
| Red Hat:enterprise_linux:5::client | libsmbclient | 0 | 0:3.0.33-3.40.el5_10 |
| Red Hat:enterprise_linux:5::client | libsmbclient-devel | 0 | 0:3.0.33-3.40.el5_10 |
| Red Hat:enterprise_linux:5::client | samba | 0 | 0:3.0.33-3.40.el5_10 |
| Red Hat:enterprise_linux:5::client | samba-client | 0 | 0:3.0.33-3.40.el5_10 |
| Red Hat:enterprise_linux:5::client | samba-common | 0 | 0:3.0.33-3.40.el5_10 |
| Red Hat:enterprise_linux:5::client | samba-debuginfo | 0 | 0:3.0.33-3.40.el5_10 |
| Red Hat:enterprise_linux:5::client | samba-swat | 0 | 0:3.0.33-3.40.el5_10 |
| Red Hat:enterprise_linux:5::client | samba3x | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::client | samba3x-client | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::client | samba3x-common | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::client | samba3x-debuginfo | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::client | samba3x-doc | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::client | samba3x-domainjoin-gui | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::client | samba3x-swat | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::client | samba3x-winbind | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::client | samba3x-winbind-devel | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::client_workstation | libsmbclient | 0 | 0:3.0.33-3.40.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | libsmbclient-devel | 0 | 0:3.0.33-3.40.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | samba | 0 | 0:3.0.33-3.40.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | samba-client | 0 | 0:3.0.33-3.40.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | samba-common | 0 | 0:3.0.33-3.40.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | samba-debuginfo | 0 | 0:3.0.33-3.40.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | samba-swat | 0 | 0:3.0.33-3.40.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x-client | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x-common | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x-debuginfo | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x-doc | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x-domainjoin-gui | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x-swat | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x-winbind | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x-winbind-devel | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::server | libsmbclient | 0 | 0:3.0.33-3.40.el5_10 |
| Red Hat:enterprise_linux:5::server | libsmbclient-devel | 0 | 0:3.0.33-3.40.el5_10 |
| Red Hat:enterprise_linux:5::server | samba | 0 | 0:3.0.33-3.40.el5_10 |
| Red Hat:enterprise_linux:5::server | samba-client | 0 | 0:3.0.33-3.40.el5_10 |
| Red Hat:enterprise_linux:5::server | samba-common | 0 | 0:3.0.33-3.40.el5_10 |
| Red Hat:enterprise_linux:5::server | samba-debuginfo | 0 | 0:3.0.33-3.40.el5_10 |
| Red Hat:enterprise_linux:5::server | samba-swat | 0 | 0:3.0.33-3.40.el5_10 |
| Red Hat:enterprise_linux:5::server | samba3x | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::server | samba3x-client | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::server | samba3x-common | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::server | samba3x-debuginfo | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::server | samba3x-doc | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::server | samba3x-domainjoin-gui | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::server | samba3x-swat | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::server | samba3x-winbind | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:5::server | samba3x-winbind-devel | 0 | 0:3.6.6-0.136.el5 |
| Red Hat:enterprise_linux:6::client | libsmbclient | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::client | libsmbclient-devel | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::client | samba | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::client | samba-client | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::client | samba-common | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::client | samba-debuginfo | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::client | samba-doc | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::client | samba-domainjoin-gui | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::client | samba-swat | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::client | samba-winbind | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::client | samba-winbind-clients | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::client | samba-winbind-devel | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::client | samba-winbind-krb5-locator | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::client | samba4 | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::client | samba4-client | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::client | samba4-common | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::client | samba4-dc | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::client | samba4-dc-libs | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::client | samba4-debuginfo | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::client | samba4-devel | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::client | samba4-libs | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::client | samba4-pidl | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::client | samba4-python | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::client | samba4-swat | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::client | samba4-test | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::client | samba4-winbind | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::client | samba4-winbind-clients | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::client | samba4-winbind-krb5-locator | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::computenode | libsmbclient | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::computenode | libsmbclient-devel | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::computenode | samba | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::computenode | samba-client | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::computenode | samba-common | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::computenode | samba-debuginfo | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::computenode | samba-doc | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::computenode | samba-domainjoin-gui | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::computenode | samba-swat | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::computenode | samba-winbind | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::computenode | samba-winbind-clients | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::computenode | samba-winbind-devel | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::computenode | samba-winbind-krb5-locator | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::computenode | samba4 | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::computenode | samba4-client | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::computenode | samba4-common | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::computenode | samba4-dc | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::computenode | samba4-dc-libs | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::computenode | samba4-debuginfo | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::computenode | samba4-devel | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::computenode | samba4-libs | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::computenode | samba4-pidl | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::computenode | samba4-python | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::computenode | samba4-swat | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::computenode | samba4-test | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::computenode | samba4-winbind | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::computenode | samba4-winbind-clients | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::computenode | samba4-winbind-krb5-locator | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::server | libsmbclient | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::server | libsmbclient-devel | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::server | samba | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::server | samba-client | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::server | samba-common | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::server | samba-debuginfo | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::server | samba-doc | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::server | samba-domainjoin-gui | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::server | samba-swat | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::server | samba-winbind | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::server | samba-winbind-clients | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::server | samba-winbind-devel | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::server | samba-winbind-krb5-locator | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::server | samba4 | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::server | samba4-client | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::server | samba4-common | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::server | samba4-dc | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::server | samba4-dc-libs | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::server | samba4-debuginfo | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::server | samba4-devel | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::server | samba4-libs | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::server | samba4-pidl | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::server | samba4-python | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::server | samba4-swat | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::server | samba4-test | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::server | samba4-winbind | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::server | samba4-winbind-clients | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::server | samba4-winbind-krb5-locator | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::workstation | libsmbclient | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::workstation | libsmbclient-devel | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::workstation | samba | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::workstation | samba-client | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::workstation | samba-common | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::workstation | samba-debuginfo | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::workstation | samba-doc | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::workstation | samba-domainjoin-gui | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::workstation | samba-swat | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::workstation | samba-winbind | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::workstation | samba-winbind-clients | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::workstation | samba-winbind-devel | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::workstation | samba-winbind-krb5-locator | 0 | 0:3.6.9-164.el6 |
| Red Hat:enterprise_linux:6::workstation | samba4 | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::workstation | samba4-client | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::workstation | samba4-common | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::workstation | samba4-dc | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::workstation | samba4-dc-libs | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::workstation | samba4-debuginfo | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::workstation | samba4-devel | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::workstation | samba4-libs | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::workstation | samba4-pidl | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::workstation | samba4-python | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::workstation | samba4-swat | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::workstation | samba4-test | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::workstation | samba4-winbind | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::workstation | samba4-winbind-clients | 0 | 0:4.0.0-58.el6.rc4 |
| Red Hat:enterprise_linux:6::workstation | samba4-winbind-krb5-locator | 0 | 0:4.0.0-58.el6.rc4 |
| openSUSE:Tumbleweed | samba | 0 | 4.5.0-1.1 |
Related vulnerabilities
- CVE-2014-0178 Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain… Also affects samba
- CVE-2011-2522 Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web… Also affects samba
- CVE-2010-2063 Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in… Also affects samba
- CVE-2010-0926 The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x… Also affects samba
- CVE-2008-1105 Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0… Also affects samba
- CVE-2007-6015 Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through… Also affects samba
- CVE-2007-5398 Stack-based buffer overflow in the reply_netbios_packet function in nmbd/nmbd_packets.c… Also affects samba
- CVE-2007-2446 Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through… Also affects samba