Lucene search

K
mageiaGentoo FoundationMGASA-2013-0246
HistoryAug 11, 2013 - 4:37 p.m.

Updated samba package fixes security vulnerability

2013-08-1116:37:00
Gentoo Foundation
advisories.mageia.org
20

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.969 High

EPSS

Percentile

99.7%

Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet (CVE-2013-4124).

OSVersionArchitecturePackageVersionFilename
Mageia2noarchsamba< 3.6.5-2.3samba-3.6.5-2.3.mga2
Mageia3noarchsamba< 3.6.15-1.1samba-3.6.15-1.1.mga3

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.969 High

EPSS

Percentile

99.7%