CVE-2012-0817

Samba 3.6.x - Denial of Service via Connection Request Memory Leak

Title source: llm

Description

Memory leak in smbd in Samba 3.6.x before 3.6.3 allows remote attackers to cause a denial of service (memory and CPU consumption) by making many connection requests.

References (7)

Core 7

Core References

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/47763

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00014.html

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00008.html

Various Sources x_refsource_confirm

http://www.samba.org/samba/history/samba-3.6.3.html

Patch, Vendor Advisory x_refsource_confirm

http://www.samba.org/samba/security/CVE-2012-0817

Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora

http://lists.fedoraproject.org/pipermail/package-announce/2012-February/072930.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/48879

Scores

EPSS 0.0750

EPSS Percentile 91.9%

Details

CWE

CWE-200

Status published

Products (3)

samba/samba 3.6.0

samba/samba 3.6.1

samba/samba 3.6.2

Published Jan 30, 2012

Tracked Since Feb 18, 2026