Lucene search
RootSSV:12453HistoryOct 12, 2009 - 12:00 a.m.
Samba Oplock暂停通知远程拒绝服务漏洞
2009-10-1200:00:00
Root
www.seebug.org
9
0.005 Low
EPSS
Percentile
72.5%
BUGTRAQ ID: 36573
CVE ID: CVE-2009-2906
Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。
如果客户端向Samba服务器发送了非预期的oplock暂停通知回复的话，smbd就会反复对CPU进行旋转（spin），尝试处理该报文，但无法完成处理。这是一种拒绝服务的情况。
Samba Samba 3.4
Samba Samba 3.2
Samba Samba 3.0
厂商补丁：
Samba
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
http://www.samba.org/samba/ftp/stable/samba-3.0.37.tar.gz
http://www.samba.org/samba/ftp/stable/samba-3.2.15.tar.gz
http://www.samba.org/samba/ftp/stable/samba-3.4.2.tar.gz
Related
openvas
openvas
CentOS Update for samba CESA-2009:1528 centos3 i386
2011-08-09 00:00:00
RedHat Security Advisory RHSA-2009:1528
2009-11-11 00:00:00
RedHat Security Advisory RHSA-2009:1528
2009-11-11 00:00:00
redhat
redhat
(RHSA-2009:1528) Moderate: samba security and bug fix update
2009-10-27 00:00:00
(RHSA-2009:1529) Moderate: samba security update
2009-10-27 00:00:00
(RHSA-2009:1585) Moderate: samba3x security and bug fix update
2009-11-16 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:39:57
nessus
nessus
CentOS 3 : samba (CESA-2009:1528)
2009-10-28 00:00:00
RHEL 3 : samba (RHSA-2009:1528)
2009-10-28 00:00:00
Oracle Linux 3 : samba (ELSA-2009-1528)
2013-07-12 00:00:00
debiancve
debiancve
CVE-2009-2906
2009-10-07 18:30:00
centos
centos
samba security update
2009-10-27 18:28:07
samba security update
2009-10-27 19:23:21
ubuntucve
ubuntucve
CVE-2009-2906
2009-10-07 00:00:00
cve
cve
CVE-2009-2906
2009-10-07 18:30:00
prion
prion
Design/Logic Flaw
2009-10-07 18:30:00
samba
samba
Remote DoS against smbd on authenticated
2009-10-01 00:00:00
oraclelinux
oraclelinux
samba security and bug fix update
2009-10-27 00:00:00
samba security update
2009-10-27 00:00:00
osv
osv
samba - several vulnerabilities
2009-10-14 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: samba-3.4.2-0.42.fc11
2009-10-03 18:59:38
[SECURITY] Fedora 11 Update: samba-3.4.5-0.47.fc11
2010-01-29 03:24:41
[SECURITY] Fedora 11 Update: samba-3.4.7-0.50.fc11
2010-03-10 06:46:46
altlinux
altlinux
Security fix for the ALT Linux 5 package samba version 3.0.37-alt1
2009-10-01 00:00:00
Security fix for the ALT Linux 6 package samba version 3.0.37-alt1
2009-10-01 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 1908-1] New samba packages fix several vulnerabilities
2009-10-14 00:00:00
Samba multiple security vulnerabilities
2009-10-14 00:00:00
slackware
slackware
samba
2009-10-04 00:01:26
debian
debian
[SECURITY] [DSA 1908-1] New samba packages fix several vulnerabilities
2009-10-14 02:05:13
vmware
vmware
ESX Service Console updates for samba and acpid
2010-04-01 00:00:00
ESX Service Console updates for samba and acpid
2010-04-01 00:00:00
ubuntu
ubuntu
Samba vulnerabilities
2009-10-01 00:00:00
gentoo
gentoo
Samba: Multiple vulnerabilities
2012-06-24 00:00:00
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44