7.9

CVE-2014-3560

NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in string_wrappers.h.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts
Redhat ≫ Enterprise Linux Version 6.0
Redhat ≫ Enterprise Linux Version 7.0
Samba ≫ Samba Version 4.1.0
Samba ≫ Samba Version 4.1.1
Samba ≫ Samba Version 4.1.2
Samba ≫ Samba Version 4.1.3
Samba ≫ Samba Version 4.1.4
Samba ≫ Samba Version 4.1.5
Samba ≫ Samba Version 4.1.6
Samba ≫ Samba Version 4.1.7
Samba ≫ Samba Version 4.1.8
Samba ≫ Samba Version 4.1.9
Samba ≫ Samba Version 4.1.10
Samba ≫ Samba Version 4.0.0
Samba ≫ Samba Version 4.0.1
Samba ≫ Samba Version 4.0.2
Samba ≫ Samba Version 4.0.3
Samba ≫ Samba Version 4.0.4
Samba ≫ Samba Version 4.0.5
Samba ≫ Samba Version 4.0.6
Samba ≫ Samba Version 4.0.7
Samba ≫ Samba Version 4.0.8
Samba ≫ Samba Version 4.0.9
Samba ≫ Samba Version 4.0.10
Samba ≫ Samba Version 4.0.11
Samba ≫ Samba Version 4.0.12
Samba ≫ Samba Version 4.0.13
Samba ≫ Samba Version 4.0.14
Samba ≫ Samba Version 4.0.15
Samba ≫ Samba Version 4.0.16
Samba ≫ Samba Version 4.0.17
Samba ≫ Samba Version 4.0.18
Samba ≫ Samba Version 4.0.19
Samba ≫ Samba Version 4.0.20
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 56.38% 0.989
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.9 5.5 10
AV:A/AC:M/Au:N/C:C/I:C/A:C
CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136280.html
http://lists.opensuse.org/opensuse-updates/2014-08/msg00027.html
http://secunia.com/advisories/59583
http://secunia.com/advisories/59610
http://secunia.com/advisories/59976
http://www.samba.org/samba/security/CVE-2014-3560
Vendor Advisory
http://www.securityfocus.com/bid/69021
http://www.securitytracker.com/id/1030663
http://www.ubuntu.com/usn/USN-2305-1
https://bugzilla.redhat.com/show_bug.cgi?id=1126010
https://exchange.xforce.ibmcloud.com/vulnerabilities/95081
https://git.samba.org/?p=samba.git%3Ba=commitdiff%3Bh=e6a848630da3ba958c442438ea131c99fa088605
https://git.samba.org/?p=samba.git%3Ba=commitdiff%3Bh=fb1d325d96dfe9bc2e9c4ec46ad4c55e8f18f4a2