CVE-2013-4124

Samba - Numeric Error

Title source: rule

Description

Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.

Exploits (2)

exploitdb WORKING POC
by x90c · textdoslinux
https://www.exploit-db.com/exploits/27778
metasploit WORKING POC
by Jeremy Allison, dz_lnly · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/samba/read_nttrans_ea_list.rb

References (24)

... and 4 more

Scores

EPSS 0.8353
EPSS Percentile 99.3%

Details

CWE
CWE-189
Status published
Products (40)
canonical/ubuntu_linux 10.04
canonical/ubuntu_linux 12.04
canonical/ubuntu_linux 12.10
canonical/ubuntu_linux 13.04
fedoraproject/fedora 18
fedoraproject/fedora 19
opensuse/opensuse 12.2
opensuse/opensuse 12.3
redhat/enterprise_linux 5
samba/samba 3.0.0
... and 30 more
Published Aug 06, 2013
Tracked Since Feb 18, 2026