2.7

CVE-2014-3493

The push_ascii function in smbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) via an attempt to read a Unicode pathname without specifying use of Unicode, leading to a character-set conversion failure that triggers an invalid pointer dereference.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Samba ≫ Samba Version3.6.0
Samba ≫ Samba Version3.6.1
Samba ≫ Samba Version3.6.2
Samba ≫ Samba Version3.6.3
Samba ≫ Samba Version3.6.4
Samba ≫ Samba Version3.6.5
Samba ≫ Samba Version3.6.6
Samba ≫ Samba Version3.6.7
Samba ≫ Samba Version3.6.8
Samba ≫ Samba Version3.6.9
Samba ≫ Samba Version3.6.10
Samba ≫ Samba Version3.6.11
Samba ≫ Samba Version3.6.12
Samba ≫ Samba Version3.6.13
Samba ≫ Samba Version3.6.14
Samba ≫ Samba Version3.6.15
Samba ≫ Samba Version3.6.16
Samba ≫ Samba Version3.6.17
Samba ≫ Samba Version3.6.18
Samba ≫ Samba Version3.6.19
Samba ≫ Samba Version3.6.20
Samba ≫ Samba Version3.6.21
Samba ≫ Samba Version3.6.22
Samba ≫ Samba Version3.6.23
Samba ≫ Samba Version4.1.0
Samba ≫ Samba Version4.1.1
Samba ≫ Samba Version4.1.2
Samba ≫ Samba Version4.1.3
Samba ≫ Samba Version4.1.4
Samba ≫ Samba Version4.1.5
Samba ≫ Samba Version4.1.6
Samba ≫ Samba Version4.1.7
Samba ≫ Samba Version4.1.8
Samba ≫ Samba Version4.0.0
Samba ≫ Samba Version4.0.1
Samba ≫ Samba Version4.0.2
Samba ≫ Samba Version4.0.3
Samba ≫ Samba Version4.0.4
Samba ≫ Samba Version4.0.5
Samba ≫ Samba Version4.0.6
Samba ≫ Samba Version4.0.7
Samba ≫ Samba Version4.0.8
Samba ≫ Samba Version4.0.9
Samba ≫ Samba Version4.0.10
Samba ≫ Samba Version4.0.11
Samba ≫ Samba Version4.0.12
Samba ≫ Samba Version4.0.13
Samba ≫ Samba Version4.0.14
Samba ≫ Samba Version4.0.15
Samba ≫ Samba Version4.0.16
Samba ≫ Samba Version4.0.17
Samba ≫ Samba Version4.0.18
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.27% 0.936
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.7 5.1 2.9
AV:A/AC:L/Au:S/C:N/I:N/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html
http://security.gentoo.org/glsa/glsa-201502-15.xml
http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.html
http://www.mandriva.com/security/advisories?name=MDVSA-2015:082
http://advisories.mageia.org/MGASA-2014-0279.html
http://secunia.com/advisories/59378
http://secunia.com/advisories/59407
http://secunia.com/advisories/59579
http://www.mandriva.com/security/advisories?name=MDVSA-2014:136
http://www.securityfocus.com/archive/1/532757/100/0/threaded
http://linux.oracle.com/errata/ELSA-2014-0866.html
http://rhn.redhat.com/errata/RHSA-2014-0866.html
http://secunia.com/advisories/59433
http://secunia.com/advisories/59834
http://secunia.com/advisories/59848
http://secunia.com/advisories/59919
http://secunia.com/advisories/61218
http://www.securitytracker.com/id/1030455
https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_samba1
http://www.samba.org/samba/security/CVE-2014-3493
Vendor Advisory
http://www.securityfocus.com/bid/68150
https://bugzilla.redhat.com/show_bug.cgi?id=1108748