CVE-2015-0240
Fixed in a distro release EPSS 88%
The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.
Products: redhat enterprise_linux, samba, novell suse_linux_enterprise_desktop, novell suse_linux_enterprise_server, novell suse_linux_enterprise_software_development_kit, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | samba | 2:4.1.17+dfsg-1 |
| Debian 13 | samba | 2:4.1.17+dfsg-1 |
| Debian 14 | samba | 2:4.1.17+dfsg-1 |
| Debian 6.0 | samba | 2:3.5.6~dfsg-3squeeze12 |
| Debian 7 | samba | 2:3.6.6-6+deb7u5 |
| Red Hat Enterprise Linux 5 | samba3x | 0:3.6.23-9.el5_11 |
| Red Hat Enterprise Linux 5 | samba3x-client | 0:3.6.23-9.el5_11 |
| Red Hat Enterprise Linux 5 | samba3x-common | 0:3.6.23-9.el5_11 |
| Red Hat Enterprise Linux 5 | samba3x-debuginfo | 0:3.6.23-9.el5_11 |
| Red Hat Enterprise Linux 5 | samba3x-doc | 0:3.6.23-9.el5_11 |
| Red Hat Enterprise Linux 5 | samba3x-domainjoin-gui | 0:3.6.23-9.el5_11 |
| Red Hat Enterprise Linux 5 | samba3x-swat | 0:3.6.23-9.el5_11 |
| Red Hat Enterprise Linux 5 | samba3x-winbind | 0:3.6.23-9.el5_11 |
| Red Hat Enterprise Linux 5 | samba3x-winbind-devel | 0:3.6.23-9.el5_11 |
| Red Hat Enterprise Linux 6 | libsmbclient | 0:3.6.23-14.el6_6 |
| Red Hat Enterprise Linux 6 | libsmbclient-devel | 0:3.6.23-14.el6_6 |
| Red Hat Enterprise Linux 6 | samba | 0:3.6.23-14.el6_6 |
| Red Hat Enterprise Linux 6 | samba-client | 0:3.6.23-14.el6_6 |
| Red Hat Enterprise Linux 6 | samba-common | 0:3.6.23-14.el6_6 |
| Red Hat Enterprise Linux 6 | samba-debuginfo | 0:3.6.23-14.el6_6 |
| Red Hat Enterprise Linux 6 | samba-doc | 0:3.6.23-14.el6_6 |
| Red Hat Enterprise Linux 6 | samba-domainjoin-gui | 0:3.6.23-14.el6_6 |
| Red Hat Enterprise Linux 6 | samba-glusterfs | 0:3.6.23-14.el6_6 |
| Red Hat Enterprise Linux 6 | samba-swat | 0:3.6.23-14.el6_6 |
| Red Hat Enterprise Linux 6 | samba-winbind | 0:3.6.23-14.el6_6 |
| Red Hat Enterprise Linux 6 | samba-winbind-clients | 0:3.6.23-14.el6_6 |
| Red Hat Enterprise Linux 6 | samba-winbind-devel | 0:3.6.23-14.el6_6 |
| Red Hat Enterprise Linux 6 | samba-winbind-krb5-locator | 0:3.6.23-14.el6_6 |
| Red Hat Enterprise Linux 6 | samba4 | 0:4.0.0-66.el6_6.rc4 |
| Red Hat Enterprise Linux 6 | samba4-client | 0:4.0.0-66.el6_6.rc4 |
| Red Hat Enterprise Linux 6 | samba4-common | 0:4.0.0-66.el6_6.rc4 |
| Red Hat Enterprise Linux 6 | samba4-dc | 0:4.0.0-66.el6_6.rc4 |
| Red Hat Enterprise Linux 6 | samba4-dc-libs | 0:4.0.0-66.el6_6.rc4 |
| Red Hat Enterprise Linux 6 | samba4-debuginfo | 0:4.0.0-66.el6_6.rc4 |
| Red Hat Enterprise Linux 6 | samba4-devel | 0:4.0.0-66.el6_6.rc4 |
| Red Hat Enterprise Linux 6 | samba4-libs | 0:4.0.0-66.el6_6.rc4 |
| Red Hat Enterprise Linux 6 | samba4-pidl | 0:4.0.0-66.el6_6.rc4 |
| Red Hat Enterprise Linux 6 | samba4-python | 0:4.0.0-66.el6_6.rc4 |
| Red Hat Enterprise Linux 6 | samba4-swat | 0:4.0.0-66.el6_6.rc4 |
| Red Hat Enterprise Linux 6 | samba4-test | 0:4.0.0-66.el6_6.rc4 |
| Red Hat Enterprise Linux 6 | samba4-winbind | 0:4.0.0-66.el6_6.rc4 |
| Red Hat Enterprise Linux 6 | samba4-winbind-clients | 0:4.0.0-66.el6_6.rc4 |
| Red Hat Enterprise Linux 6 | samba4-winbind-krb5-locator | 0:4.0.0-66.el6_6.rc4 |
| Red Hat Enterprise Linux 7 | libsmbclient | 0:4.1.1-38.el7_0 |
| Red Hat Enterprise Linux 7 | libsmbclient-devel | 0:4.1.1-38.el7_0 |
| Red Hat Enterprise Linux 7 | libwbclient | 0:4.1.1-38.el7_0 |
| Red Hat Enterprise Linux 7 | libwbclient-devel | 0:4.1.1-38.el7_0 |
| Red Hat Enterprise Linux 7 | samba | 0:4.1.1-38.el7_0 |
| Red Hat Enterprise Linux 7 | samba-client | 0:4.1.1-38.el7_0 |
| Red Hat Enterprise Linux 7 | samba-common | 0:4.1.1-38.el7_0 |
| Red Hat Enterprise Linux 7 | samba-dc | 0:4.1.1-38.el7_0 |
| Red Hat Enterprise Linux 7 | samba-dc-libs | 0:4.1.1-38.el7_0 |
| Red Hat Enterprise Linux 7 | samba-debuginfo | 0:4.1.1-38.el7_0 |
| Red Hat Enterprise Linux 7 | samba-devel | 0:4.1.1-38.el7_0 |
| Red Hat Enterprise Linux 7 | samba-libs | 0:4.1.1-38.el7_0 |
| Red Hat Enterprise Linux 7 | samba-pidl | 0:4.1.1-38.el7_0 |
| Red Hat Enterprise Linux 7 | samba-python | 0:4.1.1-38.el7_0 |
| Red Hat Enterprise Linux 7 | samba-test | 0:4.1.1-38.el7_0 |
| Red Hat Enterprise Linux 7 | samba-test-devel | 0:4.1.1-38.el7_0 |
| Red Hat Enterprise Linux 7 | samba-vfs-glusterfs | 0:4.1.1-38.el7_0 |
| Red Hat Enterprise Linux 7 | samba-winbind | 0:4.1.1-38.el7_0 |
| Red Hat Enterprise Linux 7 | samba-winbind-clients | 0:4.1.1-38.el7_0 |
| Red Hat Enterprise Linux 7 | samba-winbind-krb5-locator | 0:4.1.1-38.el7_0 |
| Red Hat Enterprise Linux 7 | samba-winbind-modules | 0:4.1.1-38.el7_0 |
| Red Hat rhel eus 5.9 | samba3x | 0:3.6.6-0.131.el5_9 |
| Red Hat rhel eus 5.9 | samba3x-client | 0:3.6.6-0.131.el5_9 |
| Red Hat rhel eus 5.9 | samba3x-common | 0:3.6.6-0.131.el5_9 |
| Red Hat rhel eus 5.9 | samba3x-debuginfo | 0:3.6.6-0.131.el5_9 |
| Red Hat rhel eus 5.9 | samba3x-doc | 0:3.6.6-0.131.el5_9 |
| Red Hat rhel eus 5.9 | samba3x-domainjoin-gui | 0:3.6.6-0.131.el5_9 |
| Red Hat rhel eus 5.9 | samba3x-swat | 0:3.6.6-0.131.el5_9 |
| Red Hat rhel eus 5.9 | samba3x-winbind | 0:3.6.6-0.131.el5_9 |
| Red Hat rhel eus 5.9 | samba3x-winbind-devel | 0:3.6.6-0.131.el5_9 |
| Red Hat rhel eus 6.4 | libsmbclient | 0:3.6.9-151.el6_4.3 |
| Red Hat rhel eus 6.4 | libsmbclient-devel | 0:3.6.9-151.el6_4.3 |
| Red Hat rhel eus 6.4 | samba | 0:3.6.9-151.el6_4.3 |
| Red Hat rhel eus 6.4 | samba-client | 0:3.6.9-151.el6_4.3 |
| Red Hat rhel eus 6.4 | samba-common | 0:3.6.9-151.el6_4.3 |
| Red Hat rhel eus 6.4 | samba-debuginfo | 0:3.6.9-151.el6_4.3 |
| Red Hat rhel eus 6.4 | samba-doc | 0:3.6.9-151.el6_4.3 |
| Red Hat rhel eus 6.4 | samba-domainjoin-gui | 0:3.6.9-151.el6_4.3 |
| Red Hat rhel eus 6.4 | samba-swat | 0:3.6.9-151.el6_4.3 |
| Red Hat rhel eus 6.4 | samba-winbind | 0:3.6.9-151.el6_4.3 |
| Red Hat rhel eus 6.4 | samba-winbind-clients | 0:3.6.9-151.el6_4.3 |
| Red Hat rhel eus 6.4 | samba-winbind-devel | 0:3.6.9-151.el6_4.3 |
| Red Hat rhel eus 6.4 | samba-winbind-krb5-locator | 0:3.6.9-151.el6_4.3 |
| Red Hat rhel eus 6.4 | samba4 | 0:4.0.0-57.el6_4.rc4 |
| Red Hat rhel eus 6.4 | samba4-client | 0:4.0.0-57.el6_4.rc4 |
| Red Hat rhel eus 6.4 | samba4-common | 0:4.0.0-57.el6_4.rc4 |
| Red Hat rhel eus 6.4 | samba4-dc | 0:4.0.0-57.el6_4.rc4 |
| Red Hat rhel eus 6.4 | samba4-dc-libs | 0:4.0.0-57.el6_4.rc4 |
| Red Hat rhel eus 6.4 | samba4-debuginfo | 0:4.0.0-57.el6_4.rc4 |
| Red Hat rhel eus 6.4 | samba4-devel | 0:4.0.0-57.el6_4.rc4 |
| Red Hat rhel eus 6.4 | samba4-libs | 0:4.0.0-57.el6_4.rc4 |
| Red Hat rhel eus 6.4 | samba4-pidl | 0:4.0.0-57.el6_4.rc4 |
| Red Hat rhel eus 6.4 | samba4-python | 0:4.0.0-57.el6_4.rc4 |
| Red Hat rhel eus 6.4 | samba4-swat | 0:4.0.0-57.el6_4.rc4 |
| Red Hat rhel eus 6.4 | samba4-test | 0:4.0.0-57.el6_4.rc4 |
| Red Hat rhel eus 6.4 | samba4-winbind | 0:4.0.0-57.el6_4.rc4 |
| Red Hat rhel eus 6.4 | samba4-winbind-clients | 0:4.0.0-57.el6_4.rc4 |
| Red Hat rhel eus 6.4 | samba4-winbind-krb5-locator | 0:4.0.0-57.el6_4.rc4 |
| Red Hat rhel eus 6.5 | libsmbclient | 0:3.6.9-171.el6_5 |
| Red Hat rhel eus 6.5 | libsmbclient-devel | 0:3.6.9-171.el6_5 |
| Red Hat rhel eus 6.5 | samba | 0:3.6.9-171.el6_5 |
| Red Hat rhel eus 6.5 | samba-client | 0:3.6.9-171.el6_5 |
| Red Hat rhel eus 6.5 | samba-common | 0:3.6.9-171.el6_5 |
| Red Hat rhel eus 6.5 | samba-debuginfo | 0:3.6.9-171.el6_5 |
| Red Hat rhel eus 6.5 | samba-doc | 0:3.6.9-171.el6_5 |
| Red Hat rhel eus 6.5 | samba-domainjoin-gui | 0:3.6.9-171.el6_5 |
| Red Hat rhel eus 6.5 | samba-swat | 0:3.6.9-171.el6_5 |
| Red Hat rhel eus 6.5 | samba-winbind | 0:3.6.9-171.el6_5 |
| Red Hat rhel eus 6.5 | samba-winbind-clients | 0:3.6.9-171.el6_5 |
| Red Hat rhel eus 6.5 | samba-winbind-devel | 0:3.6.9-171.el6_5 |
| Red Hat rhel eus 6.5 | samba-winbind-krb5-locator | 0:3.6.9-171.el6_5 |
| Red Hat rhel eus 6.5 | samba4 | 0:4.0.0-65.el6_5.rc4 |
| Red Hat rhel eus 6.5 | samba4-client | 0:4.0.0-65.el6_5.rc4 |
| Red Hat rhel eus 6.5 | samba4-common | 0:4.0.0-65.el6_5.rc4 |
| Red Hat rhel eus 6.5 | samba4-dc | 0:4.0.0-65.el6_5.rc4 |
| Red Hat rhel eus 6.5 | samba4-dc-libs | 0:4.0.0-65.el6_5.rc4 |
| Red Hat rhel eus 6.5 | samba4-debuginfo | 0:4.0.0-65.el6_5.rc4 |
| Red Hat rhel eus 6.5 | samba4-devel | 0:4.0.0-65.el6_5.rc4 |
| Red Hat rhel eus 6.5 | samba4-libs | 0:4.0.0-65.el6_5.rc4 |
| Red Hat rhel eus 6.5 | samba4-pidl | 0:4.0.0-65.el6_5.rc4 |
| Red Hat rhel eus 6.5 | samba4-python | 0:4.0.0-65.el6_5.rc4 |
| Red Hat rhel eus 6.5 | samba4-swat | 0:4.0.0-65.el6_5.rc4 |
| Red Hat rhel eus 6.5 | samba4-test | 0:4.0.0-65.el6_5.rc4 |
| Red Hat rhel eus 6.5 | samba4-winbind | 0:4.0.0-65.el6_5.rc4 |
| Red Hat rhel eus 6.5 | samba4-winbind-clients | 0:4.0.0-65.el6_5.rc4 |
| Red Hat rhel eus 6.5 | samba4-winbind-krb5-locator | 0:4.0.0-65.el6_5.rc4 |
| Red Hat rhel mission critical 5.6 | samba3x | 0:3.5.4-0.70.el5_6.4 |
| Red Hat rhel mission critical 5.6 | samba3x-client | 0:3.5.4-0.70.el5_6.4 |
| Red Hat rhel mission critical 5.6 | samba3x-common | 0:3.5.4-0.70.el5_6.4 |
| Red Hat rhel mission critical 5.6 | samba3x-debuginfo | 0:3.5.4-0.70.el5_6.4 |
| Red Hat rhel mission critical 5.6 | samba3x-doc | 0:3.5.4-0.70.el5_6.4 |
| Red Hat rhel mission critical 5.6 | samba3x-domainjoin-gui | 0:3.5.4-0.70.el5_6.4 |
| Red Hat rhel mission critical 5.6 | samba3x-swat | 0:3.5.4-0.70.el5_6.4 |
| Red Hat rhel mission critical 5.6 | samba3x-winbind | 0:3.5.4-0.70.el5_6.4 |
| Red Hat rhel mission critical 5.6 | samba3x-winbind-devel | 0:3.5.4-0.70.el5_6.4 |
| Red Hat rhel mission critical 6.2 | libsmbclient | 0:3.5.10-119.el6_2 |
| Red Hat rhel mission critical 6.2 | libsmbclient-devel | 0:3.5.10-119.el6_2 |
| Red Hat rhel mission critical 6.2 | samba | 0:3.5.10-119.el6_2 |
| Red Hat rhel mission critical 6.2 | samba-client | 0:3.5.10-119.el6_2 |
| Red Hat rhel mission critical 6.2 | samba-common | 0:3.5.10-119.el6_2 |
| Red Hat rhel mission critical 6.2 | samba-debuginfo | 0:3.5.10-119.el6_2 |
| Red Hat rhel mission critical 6.2 | samba-doc | 0:3.5.10-119.el6_2 |
| Red Hat rhel mission critical 6.2 | samba-domainjoin-gui | 0:3.5.10-119.el6_2 |
| Red Hat rhel mission critical 6.2 | samba-swat | 0:3.5.10-119.el6_2 |
| Red Hat rhel mission critical 6.2 | samba-winbind | 0:3.5.10-119.el6_2 |
| Red Hat rhel mission critical 6.2 | samba-winbind-clients | 0:3.5.10-119.el6_2 |
| Red Hat rhel mission critical 6.2 | samba-winbind-devel | 0:3.5.10-119.el6_2 |
| Red Hat rhel mission critical 6.2 | samba-winbind-krb5-locator | 0:3.5.10-119.el6_2 |
| Red Hat storage 2.1 server el6 | libsmbclient | 0:3.6.9-167.10.3.el6rhs |
| Red Hat storage 2.1 server el6 | libsmbclient-devel | 0:3.6.9-167.10.3.el6rhs |
| Red Hat storage 2.1 server el6 | samba | 0:3.6.9-167.10.3.el6rhs |
| Red Hat storage 2.1 server el6 | samba-client | 0:3.6.9-167.10.3.el6rhs |
| Red Hat storage 2.1 server el6 | samba-common | 0:3.6.9-167.10.3.el6rhs |
| Red Hat storage 2.1 server el6 | samba-debuginfo | 0:3.6.9-167.10.3.el6rhs |
| Red Hat storage 2.1 server el6 | samba-doc | 0:3.6.9-167.10.3.el6rhs |
| Red Hat storage 2.1 server el6 | samba-domainjoin-gui | 0:3.6.9-167.10.3.el6rhs |
| Red Hat storage 2.1 server el6 | samba-glusterfs | 0:3.6.9-167.10.3.el6rhs |
| Red Hat storage 2.1 server el6 | samba-swat | 0:3.6.9-167.10.3.el6rhs |
| Red Hat storage 2.1 server el6 | samba-winbind | 0:3.6.9-167.10.3.el6rhs |
| Red Hat storage 2.1 server el6 | samba-winbind-clients | 0:3.6.9-167.10.3.el6rhs |
| Red Hat storage 2.1 server el6 | samba-winbind-devel | 0:3.6.9-167.10.3.el6rhs |
| Red Hat storage 2.1 server el6 | samba-winbind-krb5-locator | 0:3.6.9-167.10.3.el6rhs |
| Red Hat storage 3 server el6 | libsmbclient | 0:3.6.509-169.6.el6rhs |
| Red Hat storage 3 server el6 | libsmbclient-devel | 0:3.6.509-169.6.el6rhs |
| Red Hat storage 3 server el6 | samba | 0:3.6.509-169.6.el6rhs |
| Red Hat storage 3 server el6 | samba-client | 0:3.6.509-169.6.el6rhs |
| Red Hat storage 3 server el6 | samba-common | 0:3.6.509-169.6.el6rhs |
| Red Hat storage 3 server el6 | samba-debuginfo | 0:3.6.509-169.6.el6rhs |
| Red Hat storage 3 server el6 | samba-doc | 0:3.6.509-169.6.el6rhs |
| Red Hat storage 3 server el6 | samba-domainjoin-gui | 0:3.6.509-169.6.el6rhs |
| Red Hat storage 3 server el6 | samba-glusterfs | 0:3.6.509-169.6.el6rhs |
| Red Hat storage 3 server el6 | samba-swat | 0:3.6.509-169.6.el6rhs |
| Red Hat storage 3 server el6 | samba-winbind | 0:3.6.509-169.6.el6rhs |
| Red Hat storage 3 server el6 | samba-winbind-clients | 0:3.6.509-169.6.el6rhs |
| Red Hat storage 3 server el6 | samba-winbind-devel | 0:3.6.509-169.6.el6rhs |
| Red Hat storage 3 server el6 | samba-winbind-krb5-locator | 0:3.6.509-169.6.el6rhs |
| SUSE Linux Enterprise Desktop 12 | samba | 4.1.12-16.1 |
| SUSE Linux Enterprise Server 12 | samba | 4.1.12-16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | samba | 4.1.12-16.1 |
| SUSE Linux Enterprise Software Development Kit 12 | samba | 4.1.12-16.1 |
| Ubuntu 14.04 LTS | samba | 2:4.1.6+dfsg-1ubuntu2.14.04.7 |
| openSUSE Tumbleweed | samba | 4.5.0-1.1 |