CVE-2013-4124
Samba - Numeric Error
Title source: ruleDescription
Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.
Exploits (2)
metasploit
WORKING POC
by Jeremy Allison, dz_lnly · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/samba/read_nttrans_ea_list.rb
References (24)
... and 4 more
Scores
EPSS
0.8353
EPSS Percentile
99.3%
Details
CWE
CWE-189
Status
published
Products (40)
canonical/ubuntu_linux
10.04
canonical/ubuntu_linux
12.04
canonical/ubuntu_linux
12.10
canonical/ubuntu_linux
13.04
fedoraproject/fedora
18
fedoraproject/fedora
19
opensuse/opensuse
12.2
opensuse/opensuse
12.3
redhat/enterprise_linux
5
samba/samba
3.0.0
... and 30 more
Published
Aug 06, 2013
Tracked Since
Feb 18, 2026