CVE-2017-15275
High · 7.5CVSS
7.5
EPSS
21.4%
Published
Nov 27, 2017
CISA due date
—
The record
Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Alpine:v3.10 | samba | 0 | 4.7.3-r0 |
| Alpine:v3.11 | samba | 0 | 4.7.3-r0 |
| Alpine:v3.12 | samba | 0 | 4.7.3-r0 |
| Alpine:v3.13 | samba | 0 | 4.7.3-r0 |
| Alpine:v3.14 | samba | 0 | 4.7.3-r0 |
| Alpine:v3.15 | samba | 0 | 4.7.3-r0 |
| Alpine:v3.16 | samba | 0 | 4.7.3-r0 |
| Alpine:v3.17 | samba | 0 | 4.7.3-r0 |
| Alpine:v3.18 | samba | 0 | 4.7.3-r0 |
| Alpine:v3.19 | samba | 0 | 4.7.3-r0 |
| Alpine:v3.20 | samba | 0 | 4.7.3-r0 |
| Alpine:v3.21 | samba | 0 | 4.7.3-r0 |
| Alpine:v3.22 | samba | 0 | 4.7.3-r0 |
| Alpine:v3.4 | samba | 0 | 4.4.16-r1 |
| Alpine:v3.7 | samba | 0 | 4.7.3-r0 |
| Alpine:v3.8 | samba | 0 | 4.7.3-r0 |
| Alpine:v3.9 | samba | 0 | 4.7.3-r0 |
| Debian:11 | samba | 0 | 2:4.7.1+dfsg-2 |
| Debian:12 | samba | 0 | 2:4.7.1+dfsg-2 |
| Debian:13 | samba | 0 | 2:4.7.1+dfsg-2 |
| Debian:7 | samba | 0 | 2:3.6.6-6+deb7u15 |
| Debian:8 | samba | 0 | 2:4.2.14+dfsg-0+deb8u9 |
| Debian:9 | samba | 0 | 2:4.5.12+dfsg-2+deb9u1 |
| Mageia:5 | samba | 0 | 3.6.25-2.8.mga5 |
| Mageia:6 | samba | 0 | 4.6.12-1.mga6 |
| Mageia:6 | talloc | 0 | 2.1.10-1.1.mga6 |
| Mageia:6 | tevent | 0 | 0.9.34-1.1.mga6 |
| Red Hat:enterprise_linux:6::client | samba4 | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::client | samba4-client | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::client | samba4-common | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::client | samba4-dc | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::client | samba4-dc-libs | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::client | samba4-debuginfo | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::client | samba4-devel | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::client | samba4-libs | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::client | samba4-pidl | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::client | samba4-python | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::client | samba4-test | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::client | samba4-winbind | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::client | samba4-winbind-clients | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::client | samba4-winbind-krb5-locator | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | samba4 | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | samba4-client | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | samba4-common | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | samba4-dc | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | samba4-dc-libs | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | samba4-debuginfo | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | samba4-devel | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | samba4-libs | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | samba4-pidl | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | samba4-python | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | samba4-test | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | samba4-winbind | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | samba4-winbind-clients | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | samba4-winbind-krb5-locator | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::server | samba4 | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::server | samba4-client | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::server | samba4-common | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::server | samba4-dc | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::server | samba4-dc-libs | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::server | samba4-debuginfo | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::server | samba4-devel | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::server | samba4-libs | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::server | samba4-pidl | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::server | samba4-python | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::server | samba4-test | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::server | samba4-winbind | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::server | samba4-winbind-clients | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::server | samba4-winbind-krb5-locator | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | samba4 | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | samba4-client | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | samba4-common | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | samba4-dc | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | samba4-dc-libs | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | samba4-debuginfo | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | samba4-devel | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | samba4-libs | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | samba4-pidl | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | samba4-python | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | samba4-test | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | samba4-winbind | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | samba4-winbind-clients | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | samba4-winbind-krb5-locator | 0 | 0:4.2.10-12.el6_9 |
| Red Hat:enterprise_linux:7::client | ctdb | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | ctdb-tests | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | libsmbclient | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | libsmbclient-devel | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | libwbclient | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | libwbclient-devel | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | samba | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | samba-client | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | samba-client-libs | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | samba-common | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | samba-common-libs | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | samba-common-tools | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | samba-dc | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | samba-dc-libs | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | samba-debuginfo | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | samba-devel | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | samba-krb5-printing | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | samba-libs | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | samba-pidl | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | samba-python | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | samba-test | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | samba-test-libs | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | samba-vfs-glusterfs | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | samba-winbind | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | samba-winbind-clients | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | samba-winbind-krb5-locator | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::client | samba-winbind-modules | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | ctdb | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | ctdb-tests | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | libsmbclient | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | libsmbclient-devel | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | libwbclient | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | libwbclient-devel | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | samba | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | samba-client | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | samba-client-libs | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | samba-common | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | samba-common-libs | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | samba-common-tools | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | samba-dc | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | samba-dc-libs | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | samba-debuginfo | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | samba-devel | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | samba-krb5-printing | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | samba-libs | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | samba-pidl | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | samba-python | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | samba-test | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | samba-test-libs | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | samba-vfs-glusterfs | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | samba-winbind | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | samba-winbind-clients | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | samba-winbind-krb5-locator | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | samba-winbind-modules | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | ctdb | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | ctdb-tests | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | libsmbclient | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | libsmbclient-devel | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | libwbclient | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | libwbclient-devel | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | samba | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | samba-client | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | samba-client-libs | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | samba-common | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | samba-common-libs | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | samba-common-tools | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | samba-dc | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | samba-dc-libs | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | samba-debuginfo | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | samba-devel | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | samba-krb5-printing | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | samba-libs | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | samba-pidl | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | samba-python | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | samba-test | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | samba-test-libs | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | samba-vfs-glusterfs | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | samba-winbind | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | samba-winbind-clients | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | samba-winbind-krb5-locator | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::server | samba-winbind-modules | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | ctdb | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | ctdb-tests | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | libsmbclient | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | libsmbclient-devel | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | libwbclient | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | libwbclient-devel | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | samba | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | samba-client | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | samba-client-libs | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | samba-common | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | samba-common-libs | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | samba-common-tools | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | samba-dc | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | samba-dc-libs | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | samba-debuginfo | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | samba-devel | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | samba-krb5-printing | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | samba-libs | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | samba-pidl | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | samba-python | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | samba-test | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | samba-test-libs | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | samba-vfs-glusterfs | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | samba-winbind | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | samba-winbind-clients | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | samba-winbind-krb5-locator | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | samba-winbind-modules | 0 | 0:4.6.2-12.el7_4 |
| Red Hat:storage:3.3:samba:el6 | ctdb | 0 | 0:4.6.3-9.el6rhs |
| Red Hat:storage:3.3:samba:el6 | ctdb-tests | 0 | 0:4.6.3-9.el6rhs |
| Red Hat:storage:3.3:samba:el6 | libsmbclient | 0 | 0:4.6.3-9.el6rhs |
| Red Hat:storage:3.3:samba:el6 | libsmbclient-devel | 0 | 0:4.6.3-9.el6rhs |
| Red Hat:storage:3.3:samba:el6 | libwbclient | 0 | 0:4.6.3-9.el6rhs |
| Red Hat:storage:3.3:samba:el6 | libwbclient-devel | 0 | 0:4.6.3-9.el6rhs |
| Red Hat:storage:3.3:samba:el6 | samba | 0 | 0:4.6.3-9.el6rhs |
| Red Hat:storage:3.3:samba:el6 | samba-client | 0 | 0:4.6.3-9.el6rhs |
| Red Hat:storage:3.3:samba:el6 | samba-client-libs | 0 | 0:4.6.3-9.el6rhs |
Related vulnerabilities
- CVE-2020-1472 An elevation of privilege vulnerability exists when an attacker establishes a vulnerable… Also affects samba
- CVE-2017-14746 Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute… Also affects samba
- CVE-2017-11103 Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre… Also affects samba
- CVE-2017-7494 Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote… Also affects samba
- CVE-2017-9461 smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability… Also affects samba
- CVE-2016-2119 libcli/smb/smbXcli_base.c in Samba 4.x before 4.2.14, 4.3.x before 4.3.11, and 4.4.x… Also affects samba
- CVE-2016-2115 Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not… Also affects samba
- CVE-2015-5370 Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not… Also affects samba