Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-102736. PoCs published by laurent gaffie.
AI-analyzed exploit summary The exploit demonstrates two denial-of-service vulnerabilities in Samba's SMB protocol handling. The first triggers a null pointer dereference by manipulating Unicode flags in 'Negotiate Protocol' and 'Session Setup AndX' requests, while the second causes an uninitialized variable read by setting the 'security blob length' to an invalid value.
Description
Samba 3.4.7/3.5.1 - Denial of Service
Exploits (1)
The exploit demonstrates two denial-of-service vulnerabilities in Samba's SMB protocol handling. The first triggers a null pointer dereference by manipulating Unicode flags in 'Negotiate Protocol' and 'Session Setup AndX' requests, while the second causes an uninitialized variable read by setting the 'security blob length' to an invalid value.