Every CVESearch/Get API key

CVE-2013-4408

Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc...

8.3 HighFix available

CVE-2013-4408 is a high vulnerability (CVSS 8.3) in Samba, published December 9, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.75%, the 86th percentile. Fixed in samba 2:4.0.13+dfsg-1.

What does this mean?
Severity
8.3 HighCVSS 2.0, NVD
Exploit chance
2.75%EPSS, 86th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
2:4.0.13+dfsg-1samba +153 more

Description

Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.

Exploit likelihood

2.75%Unchanged since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
samba
Debian:12
before 2:4.0.13+dfsg-1
2:4.0.13+dfsg-1
samba
Debian:13
before 2:4.0.13+dfsg-1
2:4.0.13+dfsg-1
samba
Debian:14
before 2:4.0.13+dfsg-1
2:4.0.13+dfsg-1
samba
Debian:6.0
From an advisory covering 2 CVEs
before 2:3.5.6~dfsg-3squeeze11, plus listed versions
2:3.5.6~dfsg-32:3.5.6~dfsg-3squeeze12:3.5.6~dfsg-3squeeze102:3.5.6~dfsg-3squeeze22:3.5.6~dfsg-3squeeze3
Show 6 moreShow less
2:3.5.6~dfsg-3squeeze42:3.5.6~dfsg-3squeeze52:3.5.6~dfsg-3squeeze62:3.5.6~dfsg-3squeeze72:3.5.6~dfsg-3squeeze82:3.5.6~dfsg-3squeeze9
2:3.5.6~dfsg-3squeeze11
samba
Debian:7
From an advisory covering 2 CVEs
before 2:3.6.6-6+deb7u2, plus listed versions
2:3.6.6-62:3.6.6-6+deb7u12:3.6.6-6+deb7u1~bpo60+12:3.6.6-6+deb7u2~bpo60+1
2:3.6.6-6+deb7u2
samba
Mageia:3
From an advisory covering 2 CVEs
before 3.6.15-1.3.mga3
3.6.15-1.3.mga3
samba4
Red Hat:enterprise_linux:6::client
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-client
Red Hat:enterprise_linux:6::client
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-common
Red Hat:enterprise_linux:6::client
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-dc
Red Hat:enterprise_linux:6::client
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
Show 144 moreShow less
Affected packages
PackageAffectedFixed
samba4-dc-libs
Red Hat:enterprise_linux:6::client
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-debuginfo
Red Hat:enterprise_linux:6::client
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-devel
Red Hat:enterprise_linux:6::client
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-libs
Red Hat:enterprise_linux:6::client
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-pidl
Red Hat:enterprise_linux:6::client
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-python
Red Hat:enterprise_linux:6::client
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-swat
Red Hat:enterprise_linux:6::client
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-test
Red Hat:enterprise_linux:6::client
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-winbind
Red Hat:enterprise_linux:6::client
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-winbind-clients
Red Hat:enterprise_linux:6::client
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-winbind-krb5-locator
Red Hat:enterprise_linux:6::client
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4
Red Hat:enterprise_linux:6::computenode
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-client
Red Hat:enterprise_linux:6::computenode
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-common
Red Hat:enterprise_linux:6::computenode
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-dc
Red Hat:enterprise_linux:6::computenode
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-dc-libs
Red Hat:enterprise_linux:6::computenode
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-debuginfo
Red Hat:enterprise_linux:6::computenode
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-devel
Red Hat:enterprise_linux:6::computenode
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-libs
Red Hat:enterprise_linux:6::computenode
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-pidl
Red Hat:enterprise_linux:6::computenode
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-python
Red Hat:enterprise_linux:6::computenode
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-swat
Red Hat:enterprise_linux:6::computenode
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-test
Red Hat:enterprise_linux:6::computenode
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-winbind
Red Hat:enterprise_linux:6::computenode
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-winbind-clients
Red Hat:enterprise_linux:6::computenode
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-winbind-krb5-locator
Red Hat:enterprise_linux:6::computenode
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4
Red Hat:enterprise_linux:6::server
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-client
Red Hat:enterprise_linux:6::server
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-common
Red Hat:enterprise_linux:6::server
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-dc
Red Hat:enterprise_linux:6::server
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-dc-libs
Red Hat:enterprise_linux:6::server
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-debuginfo
Red Hat:enterprise_linux:6::server
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-devel
Red Hat:enterprise_linux:6::server
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-libs
Red Hat:enterprise_linux:6::server
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-pidl
Red Hat:enterprise_linux:6::server
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-python
Red Hat:enterprise_linux:6::server
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-swat
Red Hat:enterprise_linux:6::server
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-test
Red Hat:enterprise_linux:6::server
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-winbind
Red Hat:enterprise_linux:6::server
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-winbind-clients
Red Hat:enterprise_linux:6::server
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-winbind-krb5-locator
Red Hat:enterprise_linux:6::server
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4
Red Hat:enterprise_linux:6::workstation
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-client
Red Hat:enterprise_linux:6::workstation
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-common
Red Hat:enterprise_linux:6::workstation
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-dc
Red Hat:enterprise_linux:6::workstation
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-dc-libs
Red Hat:enterprise_linux:6::workstation
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-debuginfo
Red Hat:enterprise_linux:6::workstation
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-devel
Red Hat:enterprise_linux:6::workstation
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-libs
Red Hat:enterprise_linux:6::workstation
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-pidl
Red Hat:enterprise_linux:6::workstation
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-python
Red Hat:enterprise_linux:6::workstation
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-swat
Red Hat:enterprise_linux:6::workstation
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-test
Red Hat:enterprise_linux:6::workstation
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-winbind
Red Hat:enterprise_linux:6::workstation
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-winbind-clients
Red Hat:enterprise_linux:6::workstation
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba4-winbind-krb5-locator
Red Hat:enterprise_linux:6::workstation
before 0:4.0.0-60.el6_5.rc4
0:4.0.0-60.el6_5.rc4
samba3x
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-client
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-common
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-doc
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-domainjoin-gui
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-swat
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-winbind
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-winbind-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-client
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-common
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-doc
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-domainjoin-gui
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-swat
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-winbind
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-winbind-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
libsmbclient
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-client
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-common
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind-clients
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
libsmbclient-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-doc
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-domainjoin-gui
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-swat
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind-krb5-locator
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-client
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-common
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind-clients
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
libsmbclient
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
libsmbclient-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-doc
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-domainjoin-gui
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-swat
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind-krb5-locator
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
libsmbclient
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-client
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-common
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind-clients
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
libsmbclient-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-doc
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-domainjoin-gui
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-swat
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind-krb5-locator
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
libsmbclient
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-client
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-common
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind-clients
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
libsmbclient-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-doc
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-domainjoin-gui
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-swat
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind-krb5-locator
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
libsmbclient
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
libsmbclient-devel
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba-client
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba-common
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba-debuginfo
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba-doc
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba-domainjoin-gui
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba-glusterfs
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba-swat
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba-winbind
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba-winbind-clients
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba-winbind-devel
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba-winbind-krb5-locator
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba
Ubuntu:14.04:LTS
before 2:4.0.13+dfsg-1ubuntu1, plus listed versions
2:3.6.18-1ubuntu32:4.0.10+dfsg-4ubuntu2
2:4.0.13+dfsg-1ubuntu1
samba
openSUSE:Tumbleweed
From an advisory covering 56 CVEs
before 4.5.0-1.1
4.5.0-1.1

What each source reports

NVD Score used8.3

Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.

Record
CVE-2013-4408
CVSS 2.0
8.3 HighAV:A/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE ListNo score

Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.

Record
CVE-2013-4408
Updated
2026-11-02
EUVDEUVD-2013-4287No score

Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.

Record
EUVD-2013-4287
Updated
2026-11-03
GitHub AdvisoriesGHSA-vwx5-5c9r-mmrhNo score

Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc...

Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.

Record
GHSA-vwx5-5c9r-mmrh
Weakness
CWE-119
Updated
2026-11-02
OSVNo score

Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.

Record
CVE-2013-4408
Updated
2026-11-02
OSVDEBIAN-CVE-2013-4408No score

Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.

Record
DEBIAN-CVE-2013-4408
Updated
2026-11-02
Show 4 moreShow less
OSVMGASA-2013-0369No score

Updated samba package fixes multiple vulnerabilities

Updated samba packages fix security vulnerabilities:

Samba before 3.6.22 incorrectly allows login from authenticated users if the require_membership_of parameter of pam_winbind specifies only invalid group names (CVE-2012-6150).

It was discovered that multiple buffer overflows in the processing of DCE-RPC packets may lead to the execution of arbitrary code (CVE-2013-4408).

Record
MGASA-2013-0369
Updated
2026-11-02
OSVopenSUSE-SU-2024:10069-1No score

ctdb-4.5.0-1.1 on GA media

These are all security issues fixed in the ctdb-4.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10069-1
Updated
2026-11-02
OSVSUSE-SU-2015:0386-1No score

Security update for Samba

This update fixes the following security issues with Samba:

* bnc#844720: DCERPC frag_len not checked (CVE-2013-4408)
* bnc#853347: winbind pam security problem (CVE-2012-6150)
* bnc#848101: No access check verification on stream files
  (CVE-2013-4475)

And fixes the following non-security issues:

* bnc#853021: libsmbclient0 package description contains comments
* bnc#817880: rpcclient adddriver and setdrive do not set all needed
  registry entries
* bnc#838472: Client trying to delete print job fails: Samba returns:
  WERR_INVALID_PRINTER_NAME
* bnc#854520 and bnc#849226: various upstream fixes

Security Issue references:

* CVE-2012-6150
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6150>
* CVE-2013-4408
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4408>
* CVE-2013-4475
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4475>
Record
SUSE-SU-2015:0386-1
Updated
2026-11-02
OSVUBUNTU-CVE-2013-4408No score

Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.

Record
UBUNTU-CVE-2013-4408
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 146 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open