Lucene search

K
freebsdFreeBSDE21C7C7A-0116-11E3-9E83-3C970E169BC2
HistoryAug 05, 2013 - 12:00 a.m.

samba -- denial of service vulnerability

2013-08-0500:00:00
vuxml.freebsd.org
13

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.969 High

EPSS

Percentile

99.7%

The Samba project reports:

All current released versions of Samba are vulnerable to
a denial of service on an authenticated or guest connection.
A malformed packet can cause the smbd server to loop the CPU
performing memory allocations and preventing any further service.
A connection to a file share, or a local account is needed
to exploit this problem, either authenticated or unauthenticated
if guest connections are allowed.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchsamba36< 3.6.17UNKNOWN
FreeBSDanynoarchsamba4< 4.0.8UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.969 High

EPSS

Percentile

99.7%