CVE-2014-3560

Impact

NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in string_wrappers.h.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136280.html
• http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html
• http://lists.opensuse.org/opensuse-updates/2014-08/msg00027.html
• http://secunia.com/advisories/59583
• http://secunia.com/advisories/59610
• http://secunia.com/advisories/59976
• http://www.samba.org/samba/security/CVE-2014-3560
• http://www.securityfocus.com/bid/69021
• http://www.securitytracker.com/id/1030663
• http://www.ubuntu.com/usn/USN-2305-1
• https://bugzilla.redhat.com/show_bug.cgi?id=1126010
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95081
• https://git.samba.org/?p=samba.git%3Ba=commitdiff%3Bh=e6a848630da3ba958c442438ea131c99fa088605
• https://git.samba.org/?p=samba.git%3Ba=commitdiff%3Bh=fb1d325d96dfe9bc2e9c4ec46ad4c55e8f18f4a2
• http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136280.html
• http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html
• http://lists.opensuse.org/opensuse-updates/2014-08/msg00027.html
• http://secunia.com/advisories/59583
• http://secunia.com/advisories/59610
• http://secunia.com/advisories/59976
• http://www.samba.org/samba/security/CVE-2014-3560
• http://www.securityfocus.com/bid/69021
• http://www.securitytracker.com/id/1030663
• http://www.ubuntu.com/usn/USN-2305-1
• https://bugzilla.redhat.com/show_bug.cgi?id=1126010