Samba RPC Service Heap Buffer Overflow DoS

The vulnerability of the slunpackloop function in the mdssvc RPC service of the Samba networking interaction package is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

CVE-2023-34966: Loop with Unreachable Exit Condition

An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function slunpackloop did not validate a field in the network packet that contains the count of elements in an array-like...