CVE-2013-4496
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the...
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 (1) SAMR or (2) RAP attempts.
Exploit likelihood
What each source reports
NVD Score used
5.0
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 (1) SAMR or (2) RAP attempts.
- Record
CVE-2013-4496- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-255
- Updated
- 2026-11-02
CVE List No score
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 (1) SAMR or (2) RAP attempts.
- Record
CVE-2013-4496- Updated
- 2026-11-02
EUVDEUVD-2013-4358 No score
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 (1) SAMR or (2) RAP attempts.
- Record
EUVD-2013-4358- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jfh4-9458-8w9g No score
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the...
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 (1) SAMR or (2) RAP attempts.
- Record
GHSA-jfh4-9458-8w9g- Updated
- 2026-11-02
OSV No score
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 (1) SAMR or (2) RAP attempts.
- Record
CVE-2013-4496- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-4496 No score
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 (1) SAMR or (2) RAP attempts.
- Record
DEBIAN-CVE-2013-4496- Updated
- 2026-11-02
Show 4 moreShow less
OSVMGASA-2014-0138 No score
Updated samba packages fix security vulnerability
In Samba before 3.6.23, the SAMR server neglects to ensure that attempted password changes will update the bad password count, and does not set the lockout flags. This would allow a user unlimited attempts against the password by simply calling ChangePasswordUser2 repeatedly. This is available without any other authentication (CVE-2013-4496)
- Record
MGASA-2014-0138- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10069-1 No score
ctdb-4.5.0-1.1 on GA media
These are all security issues fixed in the ctdb-4.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10069-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0386-1 No score
Security update for Samba
This update fixes the following security issues with Samba:
* bnc#844720: DCERPC frag_len not checked (CVE-2013-4408)
* bnc#853347: winbind pam security problem (CVE-2012-6150)
* bnc#848101: No access check verification on stream files
(CVE-2013-4475)
And fixes the following non-security issues:
* bnc#853021: libsmbclient0 package description contains comments
* bnc#817880: rpcclient adddriver and setdrive do not set all needed
registry entries
* bnc#838472: Client trying to delete print job fails: Samba returns:
WERR_INVALID_PRINTER_NAME
* bnc#854520 and bnc#849226: various upstream fixes
Security Issue references:
* CVE-2012-6150
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6150>
* CVE-2013-4408
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4408>
* CVE-2013-4475
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4475>
- Record
SUSE-SU-2015:0386-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-4496 No score
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 (1) SAMR or (2) RAP attempts.
- Record
UBUNTU-CVE-2013-4496- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sambaDebian:12 |
before 2:4.1.6+dfsg-1 | 2:4.1.6+dfsg-1 |
sambaDebian:13 |
before 2:4.1.6+dfsg-1 | 2:4.1.6+dfsg-1 |
sambaDebian:14 |
before 2:4.1.6+dfsg-1 | 2:4.1.6+dfsg-1 |
sambaMageia:3 |
before 3.6.15-1.4.mga3 | 3.6.15-1.4.mga3 |
sambaMageia:4 |
before 3.6.23-1.mga4 | 3.6.23-1.mga4 |
samba3xRed Hat:enterprise_linux:5::client |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-clientRed Hat:enterprise_linux:5::client |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-commonRed Hat:enterprise_linux:5::client |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-debuginfoRed Hat:enterprise_linux:5::client |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-docRed Hat:enterprise_linux:5::client |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
Show 129 moreShow less
| Package | Affected | Fixed |
|---|---|---|
samba3x-domainjoin-guiRed Hat:enterprise_linux:5::client |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-swatRed Hat:enterprise_linux:5::client |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-winbindRed Hat:enterprise_linux:5::client |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3xRed Hat:enterprise_linux:5::client_workstation |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-winbind-develRed Hat:enterprise_linux:5::client_workstation |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3xRed Hat:enterprise_linux:5::server |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-clientRed Hat:enterprise_linux:5::server |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-commonRed Hat:enterprise_linux:5::server |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-debuginfoRed Hat:enterprise_linux:5::server |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-docRed Hat:enterprise_linux:5::server |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-domainjoin-guiRed Hat:enterprise_linux:5::server |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-swatRed Hat:enterprise_linux:5::server |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-winbindRed Hat:enterprise_linux:5::server |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-winbind-develRed Hat:enterprise_linux:5::server |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
libsmbclientRed Hat:enterprise_linux:6::client |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
sambaRed Hat:enterprise_linux:6::client |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-clientRed Hat:enterprise_linux:6::client |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-commonRed Hat:enterprise_linux:6::client |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-debuginfoRed Hat:enterprise_linux:6::client |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbindRed Hat:enterprise_linux:6::client |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbind-clientsRed Hat:enterprise_linux:6::client |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
libsmbclient-develRed Hat:enterprise_linux:6::client |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-docRed Hat:enterprise_linux:6::client |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-domainjoin-guiRed Hat:enterprise_linux:6::client |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-swatRed Hat:enterprise_linux:6::client |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbind-develRed Hat:enterprise_linux:6::client |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbind-krb5-locatorRed Hat:enterprise_linux:6::client |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
sambaRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-clientRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-commonRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbindRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbind-clientsRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
libsmbclientRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
libsmbclient-develRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-docRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-domainjoin-guiRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-swatRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbind-develRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbind-krb5-locatorRed Hat:enterprise_linux:6::computenode |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
libsmbclientRed Hat:enterprise_linux:6::server |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
sambaRed Hat:enterprise_linux:6::server |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-clientRed Hat:enterprise_linux:6::server |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-commonRed Hat:enterprise_linux:6::server |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-debuginfoRed Hat:enterprise_linux:6::server |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbindRed Hat:enterprise_linux:6::server |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbind-clientsRed Hat:enterprise_linux:6::server |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
libsmbclient-develRed Hat:enterprise_linux:6::server |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-docRed Hat:enterprise_linux:6::server |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-domainjoin-guiRed Hat:enterprise_linux:6::server |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-swatRed Hat:enterprise_linux:6::server |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbind-develRed Hat:enterprise_linux:6::server |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbind-krb5-locatorRed Hat:enterprise_linux:6::server |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
libsmbclientRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
sambaRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-clientRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-commonRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbindRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbind-clientsRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
libsmbclient-develRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-docRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-domainjoin-guiRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-swatRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbind-develRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbind-krb5-locatorRed Hat:enterprise_linux:6::workstation |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba4Red Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-clientRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-commonRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-dcRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-dc-libsRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-debuginfoRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-develRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-libsRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-pidlRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-pythonRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-swatRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-testRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbindRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbind-clientsRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbind-krb5-locatorRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4Red Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-clientRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-commonRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-dcRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-dc-libsRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-develRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-libsRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-pidlRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-pythonRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-swatRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-testRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbindRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbind-clientsRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbind-krb5-locatorRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4Red Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-clientRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-commonRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-dcRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-dc-libsRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-debuginfoRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-develRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-libsRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-pidlRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-pythonRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-swatRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-testRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbindRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbind-clientsRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbind-krb5-locatorRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4Red Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-clientRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-commonRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-dcRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-dc-libsRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-develRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-libsRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-pidlRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-pythonRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-swatRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-testRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbindRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbind-clientsRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbind-krb5-locatorRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
sambaUbuntu:14.04:LTS |
before 2:4.1.3+dfsg-2ubuntu4, plus listed versions 2:3.6.18-1ubuntu32:4.0.10+dfsg-4ubuntu22:4.0.13+dfsg-1ubuntu12:4.1.3+dfsg-2ubuntu22:4.1.3+dfsg-2ubuntu3 |
2:4.1.3+dfsg-2ubuntu4 |
sambaopenSUSE:Tumbleweed |
before 4.5.0-1.1 | 4.5.0-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-4496 is a medium vulnerability (CVSS 5.0) in Samba, published December 13, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 9.76%, the 95th percentile. Fixed in samba 2:4.1.6+dfsg-1.
References
samba.org/samba/history/samba-4.1.6.html
lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html
bugzilla.samba.org/show_bug.cgi?id=10245
samba.org/samba/security/CVE-2013-4496
advisories.mageia.org/MGASA-2014-0138.html
samba.org/samba/history/samba-4.0.16.html
Show 147 moreShow less
lists.opensuse.org/opensuse-updates/2014-03/msg00063.html
security.gentoo.org/glsa/glsa-201502-15.xml
lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.html
mandriva.com/security/advisories?name=MDVSA-2015:082
lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html
lists.opensuse.org/opensuse-updates/2014-03/msg00062.html
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993
lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html
securityfocus.com/bid/66336
rhn.redhat.com/errata/RHSA-2014-0330.html
ubuntu.com/usn/USN-2156-1
samba.org/samba/history/samba-3.6.23.html
nvd.nist.gov/vuln/detail/CVE-2013-4496
github.com/advisories/GHSA-jfh4-9458-8w9g
security-tracker.debian.org/tracker/CVE-2013-4496
bugs.mageia.org/show_bug.cgi?id=12999
access.redhat.com/errata/RHSA-2014:0330
access.redhat.com/security/updates/classification
samba.org/samba/security/CVE-2012-6150
bugzilla.redhat.com/show_bug.cgi?id=1036897
bugzilla.redhat.com/show_bug.cgi?id=1072792
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0330.json
access.redhat.com/security/cve/CVE-2012-6150
cve.org/CVERecord?id=CVE-2012-6150
nvd.nist.gov/vuln/detail/CVE-2012-6150
access.redhat.com/security/cve/CVE-2013-4496
cve.org/CVERecord?id=CVE-2013-4496
access.redhat.com/errata/RHSA-2014:0383
samba.org/samba/security/CVE-2013-6442
bugzilla.redhat.com/show_bug.cgi?id=1044099
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0383.json
access.redhat.com/security/cve/CVE-2013-6442
cve.org/CVERecord?id=CVE-2013-6442
nvd.nist.gov/vuln/detail/CVE-2013-6442
suse.com/support/update/announcement/2015/suse-su-20150386-1
bugzilla.suse.com/437293
bugzilla.suse.com/726937
bugzilla.suse.com/765270
bugzilla.suse.com/769957
bugzilla.suse.com/770056
bugzilla.suse.com/770262
bugzilla.suse.com/771516
bugzilla.suse.com/779269
bugzilla.suse.com/783384
bugzilla.suse.com/783719
bugzilla.suse.com/786350
bugzilla.suse.com/786677
bugzilla.suse.com/787983
bugzilla.suse.com/788159
bugzilla.suse.com/790741
bugzilla.suse.com/791183
bugzilla.suse.com/792294
bugzilla.suse.com/792340
bugzilla.suse.com/798856
bugzilla.suse.com/799641
bugzilla.suse.com/800782
bugzilla.suse.com/800982
bugzilla.suse.com/802031
bugzilla.suse.com/806501
bugzilla.suse.com/807334
bugzilla.suse.com/812929
bugzilla.suse.com/815994
bugzilla.suse.com/817880
bugzilla.suse.com/820531
bugzilla.suse.com/824833
bugzilla.suse.com/829969
bugzilla.suse.com/838472
bugzilla.suse.com/844307
bugzilla.suse.com/844720
bugzilla.suse.com/848101
bugzilla.suse.com/849224
bugzilla.suse.com/849226
bugzilla.suse.com/853021
bugzilla.suse.com/853347
bugzilla.suse.com/854520
bugzilla.suse.com/863748
bugzilla.suse.com/865561
bugzilla.suse.com/872396
bugzilla.suse.com/872912
bugzilla.suse.com/879390
bugzilla.suse.com/880962
bugzilla.suse.com/882356
bugzilla.suse.com/883758
bugzilla.suse.com/883870
bugzilla.suse.com/886193
bugzilla.suse.com/898031
bugzilla.suse.com/899558
bugzilla.suse.com/913001
bugzilla.suse.com/917376
suse.com/security/cve/CVE-2012-6150
suse.com/security/cve/CVE-2013-0213
suse.com/security/cve/CVE-2013-0214
suse.com/security/cve/CVE-2013-4124
suse.com/security/cve/CVE-2013-4408
suse.com/security/cve/CVE-2013-4475
suse.com/security/cve/CVE-2013-4496
suse.com/security/cve/CVE-2014-0178
suse.com/security/cve/CVE-2014-0244
suse.com/security/cve/CVE-2014-3493
suse.com/security/cve/CVE-2015-0240
ubuntu.com/security/CVE-2013-4496
ubuntu.com/security/notices/USN-2156-1
suse.com/security/cve/CVE-2009-1886
suse.com/security/cve/CVE-2009-1888
suse.com/security/cve/CVE-2009-2813
suse.com/security/cve/CVE-2009-2906
suse.com/security/cve/CVE-2009-2948
suse.com/security/cve/CVE-2010-0547
suse.com/security/cve/CVE-2010-0728
suse.com/security/cve/CVE-2010-0787
suse.com/security/cve/CVE-2010-0926
suse.com/security/cve/CVE-2010-1635
suse.com/security/cve/CVE-2010-1642
suse.com/security/cve/CVE-2010-2063
suse.com/security/cve/CVE-2010-3069
suse.com/security/cve/CVE-2011-0719
suse.com/security/cve/CVE-2011-2522
suse.com/security/cve/CVE-2011-2694
suse.com/security/cve/CVE-2012-0817
suse.com/security/cve/CVE-2012-0870
suse.com/security/cve/CVE-2012-1182
suse.com/security/cve/CVE-2012-2111
suse.com/security/cve/CVE-2013-0172
suse.com/security/cve/CVE-2013-0454
suse.com/security/cve/CVE-2013-1863
suse.com/security/cve/CVE-2013-4476
suse.com/security/cve/CVE-2013-6442
suse.com/security/cve/CVE-2014-0239
suse.com/security/cve/CVE-2014-3560
suse.com/security/cve/CVE-2014-8143
suse.com/security/cve/CVE-2015-3223
suse.com/security/cve/CVE-2015-5252
suse.com/security/cve/CVE-2015-5296
suse.com/security/cve/CVE-2015-5299
suse.com/security/cve/CVE-2015-5330
suse.com/security/cve/CVE-2015-5370
suse.com/security/cve/CVE-2015-7560
suse.com/security/cve/CVE-2015-8467
suse.com/security/cve/CVE-2015-8543
suse.com/security/cve/CVE-2016-0771
suse.com/security/cve/CVE-2016-2110
suse.com/security/cve/CVE-2016-2111
suse.com/security/cve/CVE-2016-2112
suse.com/security/cve/CVE-2016-2113
suse.com/security/cve/CVE-2016-2115
suse.com/security/cve/CVE-2016-2118
suse.com/security/cve/CVE-2016-2119