CVE-2013-4408
Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc...
CVE-2013-4408 is a high vulnerability (CVSS 8.3) in Samba, published December 9, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.75%, the 86th percentile. Fixed in samba 2:4.0.13+dfsg-1.
Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.
Exploit likelihood
What each source reports
NVD Score used
8.3
Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.
- Record
CVE-2013-4408- CVSS 2.0
- 8.3 High
AV:A/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.
- Record
CVE-2013-4408- Updated
- 2026-11-02
EUVDEUVD-2013-4287 No score
Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.
- Record
EUVD-2013-4287- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vwx5-5c9r-mmrh No score
Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc...
Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.
- Record
GHSA-vwx5-5c9r-mmrh- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.
- Record
CVE-2013-4408- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-4408 No score
Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.
- Record
DEBIAN-CVE-2013-4408- Updated
- 2026-11-02
Show 4 moreShow less
OSVMGASA-2013-0369 No score
Updated samba package fixes multiple vulnerabilities
Updated samba packages fix security vulnerabilities:
Samba before 3.6.22 incorrectly allows login from authenticated users if the require_membership_of parameter of pam_winbind specifies only invalid group names (CVE-2012-6150).
It was discovered that multiple buffer overflows in the processing of DCE-RPC packets may lead to the execution of arbitrary code (CVE-2013-4408).
- Record
MGASA-2013-0369- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10069-1 No score
ctdb-4.5.0-1.1 on GA media
These are all security issues fixed in the ctdb-4.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10069-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0386-1 No score
Security update for Samba
This update fixes the following security issues with Samba:
* bnc#844720: DCERPC frag_len not checked (CVE-2013-4408)
* bnc#853347: winbind pam security problem (CVE-2012-6150)
* bnc#848101: No access check verification on stream files
(CVE-2013-4475)
And fixes the following non-security issues:
* bnc#853021: libsmbclient0 package description contains comments
* bnc#817880: rpcclient adddriver and setdrive do not set all needed
registry entries
* bnc#838472: Client trying to delete print job fails: Samba returns:
WERR_INVALID_PRINTER_NAME
* bnc#854520 and bnc#849226: various upstream fixes
Security Issue references:
* CVE-2012-6150
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6150>
* CVE-2013-4408
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4408>
* CVE-2013-4475
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4475>
- Record
SUSE-SU-2015:0386-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-4408 No score
Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.
- Record
UBUNTU-CVE-2013-4408- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sambaDebian:12 |
before 2:4.0.13+dfsg-1 | 2:4.0.13+dfsg-1 |
sambaDebian:13 |
before 2:4.0.13+dfsg-1 | 2:4.0.13+dfsg-1 |
sambaDebian:14 |
before 2:4.0.13+dfsg-1 | 2:4.0.13+dfsg-1 |
sambaDebian:6.0 |
before 2:3.5.6~dfsg-3squeeze11, plus listed versions 2:3.5.6~dfsg-32:3.5.6~dfsg-3squeeze12:3.5.6~dfsg-3squeeze102:3.5.6~dfsg-3squeeze22:3.5.6~dfsg-3squeeze3 Show 6 moreShow less2:3.5.6~dfsg-3squeeze42:3.5.6~dfsg-3squeeze52:3.5.6~dfsg-3squeeze62:3.5.6~dfsg-3squeeze72:3.5.6~dfsg-3squeeze82:3.5.6~dfsg-3squeeze9 |
2:3.5.6~dfsg-3squeeze11 |
sambaDebian:7 |
before 2:3.6.6-6+deb7u2, plus listed versions 2:3.6.6-62:3.6.6-6+deb7u12:3.6.6-6+deb7u1~bpo60+12:3.6.6-6+deb7u2~bpo60+1 |
2:3.6.6-6+deb7u2 |
sambaMageia:3 |
before 3.6.15-1.3.mga3 | 3.6.15-1.3.mga3 |
samba4Red Hat:enterprise_linux:6::client |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-clientRed Hat:enterprise_linux:6::client |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-commonRed Hat:enterprise_linux:6::client |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-dcRed Hat:enterprise_linux:6::client |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
Show 144 moreShow less
| Package | Affected | Fixed |
|---|---|---|
samba4-dc-libsRed Hat:enterprise_linux:6::client |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-debuginfoRed Hat:enterprise_linux:6::client |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-develRed Hat:enterprise_linux:6::client |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-libsRed Hat:enterprise_linux:6::client |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-pidlRed Hat:enterprise_linux:6::client |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-pythonRed Hat:enterprise_linux:6::client |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-swatRed Hat:enterprise_linux:6::client |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-testRed Hat:enterprise_linux:6::client |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-winbindRed Hat:enterprise_linux:6::client |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-winbind-clientsRed Hat:enterprise_linux:6::client |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-winbind-krb5-locatorRed Hat:enterprise_linux:6::client |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4Red Hat:enterprise_linux:6::computenode |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-clientRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-commonRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-dcRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-dc-libsRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-develRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-libsRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-pidlRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-pythonRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-swatRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-testRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-winbindRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-winbind-clientsRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-winbind-krb5-locatorRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4Red Hat:enterprise_linux:6::server |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-clientRed Hat:enterprise_linux:6::server |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-commonRed Hat:enterprise_linux:6::server |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-dcRed Hat:enterprise_linux:6::server |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-dc-libsRed Hat:enterprise_linux:6::server |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-debuginfoRed Hat:enterprise_linux:6::server |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-develRed Hat:enterprise_linux:6::server |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-libsRed Hat:enterprise_linux:6::server |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-pidlRed Hat:enterprise_linux:6::server |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-pythonRed Hat:enterprise_linux:6::server |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-swatRed Hat:enterprise_linux:6::server |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-testRed Hat:enterprise_linux:6::server |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-winbindRed Hat:enterprise_linux:6::server |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-winbind-clientsRed Hat:enterprise_linux:6::server |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-winbind-krb5-locatorRed Hat:enterprise_linux:6::server |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4Red Hat:enterprise_linux:6::workstation |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-clientRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-commonRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-dcRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-dc-libsRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-develRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-libsRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-pidlRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-pythonRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-swatRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-testRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-winbindRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-winbind-clientsRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba4-winbind-krb5-locatorRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-60.el6_5.rc4 | 0:4.0.0-60.el6_5.rc4 |
samba3xRed Hat:enterprise_linux:5::client |
before 0:3.6.6-0.138.el5_10 | 0:3.6.6-0.138.el5_10 |
samba3x-clientRed Hat:enterprise_linux:5::client |
before 0:3.6.6-0.138.el5_10 | 0:3.6.6-0.138.el5_10 |
samba3x-commonRed Hat:enterprise_linux:5::client |
before 0:3.6.6-0.138.el5_10 | 0:3.6.6-0.138.el5_10 |
samba3x-debuginfoRed Hat:enterprise_linux:5::client |
before 0:3.6.6-0.138.el5_10 | 0:3.6.6-0.138.el5_10 |
samba3x-docRed Hat:enterprise_linux:5::client |
before 0:3.6.6-0.138.el5_10 | 0:3.6.6-0.138.el5_10 |
samba3x-domainjoin-guiRed Hat:enterprise_linux:5::client |
before 0:3.6.6-0.138.el5_10 | 0:3.6.6-0.138.el5_10 |
samba3x-swatRed Hat:enterprise_linux:5::client |
before 0:3.6.6-0.138.el5_10 | 0:3.6.6-0.138.el5_10 |
samba3x-winbindRed Hat:enterprise_linux:5::client |
before 0:3.6.6-0.138.el5_10 | 0:3.6.6-0.138.el5_10 |
samba3xRed Hat:enterprise_linux:5::client_workstation |
before 0:3.6.6-0.138.el5_10 | 0:3.6.6-0.138.el5_10 |
samba3x-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:3.6.6-0.138.el5_10 | 0:3.6.6-0.138.el5_10 |
samba3x-winbind-develRed Hat:enterprise_linux:5::client_workstation |
before 0:3.6.6-0.138.el5_10 | 0:3.6.6-0.138.el5_10 |
samba3xRed Hat:enterprise_linux:5::server |
before 0:3.6.6-0.138.el5_10 | 0:3.6.6-0.138.el5_10 |
samba3x-clientRed Hat:enterprise_linux:5::server |
before 0:3.6.6-0.138.el5_10 | 0:3.6.6-0.138.el5_10 |
samba3x-commonRed Hat:enterprise_linux:5::server |
before 0:3.6.6-0.138.el5_10 | 0:3.6.6-0.138.el5_10 |
samba3x-debuginfoRed Hat:enterprise_linux:5::server |
before 0:3.6.6-0.138.el5_10 | 0:3.6.6-0.138.el5_10 |
samba3x-docRed Hat:enterprise_linux:5::server |
before 0:3.6.6-0.138.el5_10 | 0:3.6.6-0.138.el5_10 |
samba3x-domainjoin-guiRed Hat:enterprise_linux:5::server |
before 0:3.6.6-0.138.el5_10 | 0:3.6.6-0.138.el5_10 |
samba3x-swatRed Hat:enterprise_linux:5::server |
before 0:3.6.6-0.138.el5_10 | 0:3.6.6-0.138.el5_10 |
samba3x-winbindRed Hat:enterprise_linux:5::server |
before 0:3.6.6-0.138.el5_10 | 0:3.6.6-0.138.el5_10 |
samba3x-winbind-develRed Hat:enterprise_linux:5::server |
before 0:3.6.6-0.138.el5_10 | 0:3.6.6-0.138.el5_10 |
libsmbclientRed Hat:enterprise_linux:6::client |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
sambaRed Hat:enterprise_linux:6::client |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-clientRed Hat:enterprise_linux:6::client |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-commonRed Hat:enterprise_linux:6::client |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-debuginfoRed Hat:enterprise_linux:6::client |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-winbindRed Hat:enterprise_linux:6::client |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-winbind-clientsRed Hat:enterprise_linux:6::client |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
libsmbclient-develRed Hat:enterprise_linux:6::client |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-docRed Hat:enterprise_linux:6::client |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-domainjoin-guiRed Hat:enterprise_linux:6::client |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-swatRed Hat:enterprise_linux:6::client |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-winbind-develRed Hat:enterprise_linux:6::client |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-winbind-krb5-locatorRed Hat:enterprise_linux:6::client |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
sambaRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-clientRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-commonRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-winbindRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-winbind-clientsRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
libsmbclientRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
libsmbclient-develRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-docRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-domainjoin-guiRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-swatRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-winbind-develRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-winbind-krb5-locatorRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
libsmbclientRed Hat:enterprise_linux:6::server |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
sambaRed Hat:enterprise_linux:6::server |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-clientRed Hat:enterprise_linux:6::server |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-commonRed Hat:enterprise_linux:6::server |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-debuginfoRed Hat:enterprise_linux:6::server |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-winbindRed Hat:enterprise_linux:6::server |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-winbind-clientsRed Hat:enterprise_linux:6::server |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
libsmbclient-develRed Hat:enterprise_linux:6::server |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-docRed Hat:enterprise_linux:6::server |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-domainjoin-guiRed Hat:enterprise_linux:6::server |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-swatRed Hat:enterprise_linux:6::server |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-winbind-develRed Hat:enterprise_linux:6::server |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-winbind-krb5-locatorRed Hat:enterprise_linux:6::server |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
libsmbclientRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
sambaRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-clientRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-commonRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-winbindRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-winbind-clientsRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
libsmbclient-develRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-docRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-domainjoin-guiRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-swatRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-winbind-develRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
samba-winbind-krb5-locatorRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-167.el6_5 | 0:3.6.9-167.el6_5 |
libsmbclientRed Hat:storage:2.1:server:el6 |
before 0:3.6.9-167.5.1.el6rhs | 0:3.6.9-167.5.1.el6rhs |
libsmbclient-develRed Hat:storage:2.1:server:el6 |
before 0:3.6.9-167.5.1.el6rhs | 0:3.6.9-167.5.1.el6rhs |
sambaRed Hat:storage:2.1:server:el6 |
before 0:3.6.9-167.5.1.el6rhs | 0:3.6.9-167.5.1.el6rhs |
samba-clientRed Hat:storage:2.1:server:el6 |
before 0:3.6.9-167.5.1.el6rhs | 0:3.6.9-167.5.1.el6rhs |
samba-commonRed Hat:storage:2.1:server:el6 |
before 0:3.6.9-167.5.1.el6rhs | 0:3.6.9-167.5.1.el6rhs |
samba-debuginfoRed Hat:storage:2.1:server:el6 |
before 0:3.6.9-167.5.1.el6rhs | 0:3.6.9-167.5.1.el6rhs |
samba-docRed Hat:storage:2.1:server:el6 |
before 0:3.6.9-167.5.1.el6rhs | 0:3.6.9-167.5.1.el6rhs |
samba-domainjoin-guiRed Hat:storage:2.1:server:el6 |
before 0:3.6.9-167.5.1.el6rhs | 0:3.6.9-167.5.1.el6rhs |
samba-glusterfsRed Hat:storage:2.1:server:el6 |
before 0:3.6.9-167.5.1.el6rhs | 0:3.6.9-167.5.1.el6rhs |
samba-swatRed Hat:storage:2.1:server:el6 |
before 0:3.6.9-167.5.1.el6rhs | 0:3.6.9-167.5.1.el6rhs |
samba-winbindRed Hat:storage:2.1:server:el6 |
before 0:3.6.9-167.5.1.el6rhs | 0:3.6.9-167.5.1.el6rhs |
samba-winbind-clientsRed Hat:storage:2.1:server:el6 |
before 0:3.6.9-167.5.1.el6rhs | 0:3.6.9-167.5.1.el6rhs |
samba-winbind-develRed Hat:storage:2.1:server:el6 |
before 0:3.6.9-167.5.1.el6rhs | 0:3.6.9-167.5.1.el6rhs |
samba-winbind-krb5-locatorRed Hat:storage:2.1:server:el6 |
before 0:3.6.9-167.5.1.el6rhs | 0:3.6.9-167.5.1.el6rhs |
sambaUbuntu:14.04:LTS |
before 2:4.0.13+dfsg-1ubuntu1, plus listed versions 2:3.6.18-1ubuntu32:4.0.10+dfsg-4ubuntu2 |
2:4.0.13+dfsg-1ubuntu1 |
sambaopenSUSE:Tumbleweed |
before 4.5.0-1.1 | 4.5.0-1.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
marc.info?l=bugtraq&m=141660010015249&w=2
ubuntu.com/usn/USN-2054-1
rhn.redhat.com/errata/RHSA-2013-1805.html
samba.org/samba/security/CVE-2013-4408
lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html
samba.org/samba/ftp/patches/security/samba-4.1.2-CVE-2013-4408-CVE-2012-6150.patch
Show 146 moreShow less
debian.org/security/2013/dsa-2812
lists.opensuse.org/opensuse-security-announce/2014-01/msg00002.html
lists.opensuse.org/opensuse-updates/2014-03/msg00063.html
security.gentoo.org/glsa/glsa-201502-15.xml
lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.html
lists.opensuse.org/opensuse-updates/2013-12/msg00088.html
lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html
rhn.redhat.com/errata/RHSA-2013-1806.html
lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html
securityfocus.com/bid/64191
rhn.redhat.com/errata/RHSA-2014-0009.html
mandriva.com/security/advisories?name=MDVSA-2013:299
nvd.nist.gov/vuln/detail/CVE-2013-4408
access.redhat.com/errata/RHSA-2013:1805
access.redhat.com/errata/RHSA-2013:1806
access.redhat.com/errata/RHSA-2014:0009
access.redhat.com/security/cve/CVE-2013-4408
bugzilla.redhat.com/show_bug.cgi?id=1018032
github.com/advisories/GHSA-vwx5-5c9r-mmrh
security-tracker.debian.org/tracker/CVE-2013-4408
advisories.mageia.org/MGASA-2013-0369.html
samba.org/samba/security/CVE-2012-6150
bugs.mageia.org/show_bug.cgi?id=11871
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1805.json
cve.org/CVERecord?id=CVE-2013-4408
bugzilla.redhat.com/show_bug.cgi?id=1024542
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1806.json
access.redhat.com/security/cve/CVE-2013-4475
cve.org/CVERecord?id=CVE-2013-4475
nvd.nist.gov/vuln/detail/CVE-2013-4475
samba.org/samba/security/CVE-2013-4475
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0009.json
suse.com/support/update/announcement/2015/suse-su-20150386-1
bugzilla.suse.com/437293
bugzilla.suse.com/726937
bugzilla.suse.com/765270
bugzilla.suse.com/769957
bugzilla.suse.com/770056
bugzilla.suse.com/770262
bugzilla.suse.com/771516
bugzilla.suse.com/779269
bugzilla.suse.com/783384
bugzilla.suse.com/783719
bugzilla.suse.com/786350
bugzilla.suse.com/786677
bugzilla.suse.com/787983
bugzilla.suse.com/788159
bugzilla.suse.com/790741
bugzilla.suse.com/791183
bugzilla.suse.com/792294
bugzilla.suse.com/792340
bugzilla.suse.com/798856
bugzilla.suse.com/799641
bugzilla.suse.com/800782
bugzilla.suse.com/800982
bugzilla.suse.com/802031
bugzilla.suse.com/806501
bugzilla.suse.com/807334
bugzilla.suse.com/812929
bugzilla.suse.com/815994
bugzilla.suse.com/817880
bugzilla.suse.com/820531
bugzilla.suse.com/824833
bugzilla.suse.com/829969
bugzilla.suse.com/838472
bugzilla.suse.com/844307
bugzilla.suse.com/844720
bugzilla.suse.com/848101
bugzilla.suse.com/849224
bugzilla.suse.com/849226
bugzilla.suse.com/853021
bugzilla.suse.com/853347
bugzilla.suse.com/854520
bugzilla.suse.com/863748
bugzilla.suse.com/865561
bugzilla.suse.com/872396
bugzilla.suse.com/872912
bugzilla.suse.com/879390
bugzilla.suse.com/880962
bugzilla.suse.com/882356
bugzilla.suse.com/883758
bugzilla.suse.com/883870
bugzilla.suse.com/886193
bugzilla.suse.com/898031
bugzilla.suse.com/899558
bugzilla.suse.com/913001
bugzilla.suse.com/917376
suse.com/security/cve/CVE-2012-6150
suse.com/security/cve/CVE-2013-0213
suse.com/security/cve/CVE-2013-0214
suse.com/security/cve/CVE-2013-4124
suse.com/security/cve/CVE-2013-4408
suse.com/security/cve/CVE-2013-4475
suse.com/security/cve/CVE-2013-4496
suse.com/security/cve/CVE-2014-0178
suse.com/security/cve/CVE-2014-0244
suse.com/security/cve/CVE-2014-3493
suse.com/security/cve/CVE-2015-0240
ubuntu.com/security/CVE-2013-4408
ubuntu.com/security/notices/USN-2054-1
suse.com/security/cve/CVE-2009-1886
suse.com/security/cve/CVE-2009-1888
suse.com/security/cve/CVE-2009-2813
suse.com/security/cve/CVE-2009-2906
suse.com/security/cve/CVE-2009-2948
suse.com/security/cve/CVE-2010-0547
suse.com/security/cve/CVE-2010-0728
suse.com/security/cve/CVE-2010-0787
suse.com/security/cve/CVE-2010-0926
suse.com/security/cve/CVE-2010-1635
suse.com/security/cve/CVE-2010-1642
suse.com/security/cve/CVE-2010-2063
suse.com/security/cve/CVE-2010-3069
suse.com/security/cve/CVE-2011-0719
suse.com/security/cve/CVE-2011-2522
suse.com/security/cve/CVE-2011-2694
suse.com/security/cve/CVE-2012-0817
suse.com/security/cve/CVE-2012-0870
suse.com/security/cve/CVE-2012-1182
suse.com/security/cve/CVE-2012-2111
suse.com/security/cve/CVE-2013-0172
suse.com/security/cve/CVE-2013-0454
suse.com/security/cve/CVE-2013-1863
suse.com/security/cve/CVE-2013-4476
suse.com/security/cve/CVE-2013-6442
suse.com/security/cve/CVE-2014-0239
suse.com/security/cve/CVE-2014-3560
suse.com/security/cve/CVE-2014-8143
suse.com/security/cve/CVE-2015-3223
suse.com/security/cve/CVE-2015-5252
suse.com/security/cve/CVE-2015-5296
suse.com/security/cve/CVE-2015-5299
suse.com/security/cve/CVE-2015-5330
suse.com/security/cve/CVE-2015-5370
suse.com/security/cve/CVE-2015-7560
suse.com/security/cve/CVE-2015-8467
suse.com/security/cve/CVE-2015-8543
suse.com/security/cve/CVE-2016-0771
suse.com/security/cve/CVE-2016-2110
suse.com/security/cve/CVE-2016-2111
suse.com/security/cve/CVE-2016-2112
suse.com/security/cve/CVE-2016-2113
suse.com/security/cve/CVE-2016-2115
suse.com/security/cve/CVE-2016-2118
suse.com/security/cve/CVE-2016-2119