NetSight
IP …
medium5.0Public exploit code

CVE-2013-4124

Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.

Affected products

VendorProductAffected versions
CanonicalUbuntu Linux
Versions 10.04, 12.04, 12.10, 13.04
RedhatEnterprise Linux
Version 5
FedoraprojectFedora
Versions 18, 19
SambaSamba
Versions 3.0.0, 3.0.1, 3.0.2, 3.0.2a, 3.0.3, 3.0.4
OpensuseOpensuse
Versions 12.2, 12.3

Weakness classification

CWE-189

References