CVE-2013-4496
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the...
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 (1) SAMR or (2) RAP attempts.
Exploit likelihood
What each source reports
NVD Score used
5.0
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 (1) SAMR or (2) RAP attempts.
- Record
CVE-2013-4496- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-255
- Updated
- 2026-11-02
CVE List No score
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 (1) SAMR or (2) RAP attempts.
- Record
CVE-2013-4496- Updated
- 2026-11-02
EUVDEUVD-2013-4358 No score
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 (1) SAMR or (2) RAP attempts.
- Record
EUVD-2013-4358- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jfh4-9458-8w9g No score
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the...
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 (1) SAMR or (2) RAP attempts.
- Record
GHSA-jfh4-9458-8w9g- Updated
- 2026-11-02
OSV No score
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 (1) SAMR or (2) RAP attempts.
- Record
CVE-2013-4496- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-4496 No score
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 (1) SAMR or (2) RAP attempts.
- Record
DEBIAN-CVE-2013-4496- Updated
- 2026-11-02
Show 4 moreShow less
OSVMGASA-2014-0138 No score
Updated samba packages fix security vulnerability
In Samba before 3.6.23, the SAMR server neglects to ensure that attempted password changes will update the bad password count, and does not set the lockout flags. This would allow a user unlimited attempts against the password by simply calling ChangePasswordUser2 repeatedly. This is available without any other authentication (CVE-2013-4496)
- Record
MGASA-2014-0138- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10069-1 No score
ctdb-4.5.0-1.1 on GA media
These are all security issues fixed in the ctdb-4.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10069-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0386-1 No score
Security update for Samba
This update fixes the following security issues with Samba:
* bnc#844720: DCERPC frag_len not checked (CVE-2013-4408)
* bnc#853347: winbind pam security problem (CVE-2012-6150)
* bnc#848101: No access check verification on stream files
(CVE-2013-4475)
And fixes the following non-security issues:
* bnc#853021: libsmbclient0 package description contains comments
* bnc#817880: rpcclient adddriver and setdrive do not set all needed
registry entries
* bnc#838472: Client trying to delete print job fails: Samba returns:
WERR_INVALID_PRINTER_NAME
* bnc#854520 and bnc#849226: various upstream fixes
Security Issue references:
* CVE-2012-6150
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6150>
* CVE-2013-4408
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4408>
* CVE-2013-4475
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4475>
- Record
SUSE-SU-2015:0386-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-4496 No score
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 (1) SAMR or (2) RAP attempts.
- Record
UBUNTU-CVE-2013-4496- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sambaDebian:12 |
before 2:4.1.6+dfsg-1 | 2:4.1.6+dfsg-1 |
sambaDebian:13 |
before 2:4.1.6+dfsg-1 | 2:4.1.6+dfsg-1 |
sambaDebian:14 |
before 2:4.1.6+dfsg-1 | 2:4.1.6+dfsg-1 |
sambaMageia:3 |
before 3.6.15-1.4.mga3 | 3.6.15-1.4.mga3 |
sambaMageia:4 |
before 3.6.23-1.mga4 | 3.6.23-1.mga4 |
samba3xRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-clientRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-commonRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-docRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
Show 129 moreShow less
| Package | Affected | Fixed |
|---|---|---|
samba3x-domainjoin-guiRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-swatRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-winbindRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3xRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-winbind-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3xRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-clientRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-commonRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-docRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-domainjoin-guiRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-swatRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-winbindRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
samba3x-winbind-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:3.6.6-0.139.el5_10 | 0:3.6.6-0.139.el5_10 |
libsmbclientRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
sambaRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-clientRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-commonRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbindRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbind-clientsRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
libsmbclient-develRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-docRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-domainjoin-guiRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-swatRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbind-develRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbind-krb5-locatorRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
sambaRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-clientRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-commonRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbindRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbind-clientsRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
libsmbclientRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
libsmbclient-develRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-docRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-domainjoin-guiRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-swatRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbind-develRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbind-krb5-locatorRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
libsmbclientRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
sambaRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-clientRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-commonRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbindRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbind-clientsRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
libsmbclient-develRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-docRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-domainjoin-guiRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-swatRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbind-develRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbind-krb5-locatorRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
libsmbclientRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
sambaRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-clientRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-commonRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbindRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbind-clientsRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
libsmbclient-develRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-docRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-domainjoin-guiRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-swatRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbind-develRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba-winbind-krb5-locatorRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:3.6.9-168.el6_5 | 0:3.6.9-168.el6_5 |
samba4Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-clientRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-commonRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-dcRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-dc-libsRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-develRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-libsRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-pidlRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-pythonRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-swatRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-testRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbindRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbind-clientsRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbind-krb5-locatorRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-clientRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-commonRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-dcRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-dc-libsRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-develRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-libsRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-pidlRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-pythonRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-swatRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-testRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbindRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbind-clientsRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbind-krb5-locatorRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-clientRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-commonRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-dcRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-dc-libsRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-develRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-libsRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-pidlRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-pythonRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-swatRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-testRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbindRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbind-clientsRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbind-krb5-locatorRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-clientRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-commonRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-dcRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-dc-libsRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-develRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-libsRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-pidlRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-pythonRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-swatRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-testRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbindRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbind-clientsRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbind-krb5-locatorRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
sambaUbuntu:14.04:LTS |
before 2:4.1.3+dfsg-2ubuntu4, plus listed versions 2:3.6.18-1ubuntu32:4.0.10+dfsg-4ubuntu22:4.0.13+dfsg-1ubuntu12:4.1.3+dfsg-2ubuntu22:4.1.3+dfsg-2ubuntu3 |
2:4.1.3+dfsg-2ubuntu4 |
sambaopenSUSE:Tumbleweed From an advisory covering 56 CVEs |
before 4.5.0-1.1 | 4.5.0-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-4496 is a medium vulnerability (CVSS 5.0) in Samba, published December 13, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 9.76%, the 95th percentile. Fixed in samba 2:4.1.6+dfsg-1.
References
samba.org/samba/history/samba-4.1.6.html
lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html
bugzilla.samba.org/show_bug.cgi?id=10245
samba.org/samba/security/CVE-2013-4496
advisories.mageia.org/MGASA-2014-0138.html
samba.org/samba/history/samba-4.0.16.html
Show 147 moreShow less
lists.opensuse.org/opensuse-updates/2014-03/msg00063.html
security.gentoo.org/glsa/glsa-201502-15.xml
lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.html
mandriva.com/security/advisories?name=MDVSA-2015:082
lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html
lists.opensuse.org/opensuse-updates/2014-03/msg00062.html
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993
lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html
securityfocus.com/bid/66336
rhn.redhat.com/errata/RHSA-2014-0330.html
ubuntu.com/usn/USN-2156-1
samba.org/samba/history/samba-3.6.23.html
nvd.nist.gov/vuln/detail/CVE-2013-4496
github.com/advisories/GHSA-jfh4-9458-8w9g
security-tracker.debian.org/tracker/CVE-2013-4496
bugs.mageia.org/show_bug.cgi?id=12999
access.redhat.com/errata/RHSA-2014:0330
access.redhat.com/security/updates/classification
samba.org/samba/security/CVE-2012-6150
bugzilla.redhat.com/show_bug.cgi?id=1036897
bugzilla.redhat.com/show_bug.cgi?id=1072792
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0330.json
access.redhat.com/security/cve/CVE-2012-6150
cve.org/CVERecord?id=CVE-2012-6150
nvd.nist.gov/vuln/detail/CVE-2012-6150
access.redhat.com/security/cve/CVE-2013-4496
cve.org/CVERecord?id=CVE-2013-4496
access.redhat.com/errata/RHSA-2014:0383
samba.org/samba/security/CVE-2013-6442
bugzilla.redhat.com/show_bug.cgi?id=1044099
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0383.json
access.redhat.com/security/cve/CVE-2013-6442
cve.org/CVERecord?id=CVE-2013-6442
nvd.nist.gov/vuln/detail/CVE-2013-6442
suse.com/support/update/announcement/2015/suse-su-20150386-1
bugzilla.suse.com/437293
bugzilla.suse.com/726937
bugzilla.suse.com/765270
bugzilla.suse.com/769957
bugzilla.suse.com/770056
bugzilla.suse.com/770262
bugzilla.suse.com/771516
bugzilla.suse.com/779269
bugzilla.suse.com/783384
bugzilla.suse.com/783719
bugzilla.suse.com/786350
bugzilla.suse.com/786677
bugzilla.suse.com/787983
bugzilla.suse.com/788159
bugzilla.suse.com/790741
bugzilla.suse.com/791183
bugzilla.suse.com/792294
bugzilla.suse.com/792340
bugzilla.suse.com/798856
bugzilla.suse.com/799641
bugzilla.suse.com/800782
bugzilla.suse.com/800982
bugzilla.suse.com/802031
bugzilla.suse.com/806501
bugzilla.suse.com/807334
bugzilla.suse.com/812929
bugzilla.suse.com/815994
bugzilla.suse.com/817880
bugzilla.suse.com/820531
bugzilla.suse.com/824833
bugzilla.suse.com/829969
bugzilla.suse.com/838472
bugzilla.suse.com/844307
bugzilla.suse.com/844720
bugzilla.suse.com/848101
bugzilla.suse.com/849224
bugzilla.suse.com/849226
bugzilla.suse.com/853021
bugzilla.suse.com/853347
bugzilla.suse.com/854520
bugzilla.suse.com/863748
bugzilla.suse.com/865561
bugzilla.suse.com/872396
bugzilla.suse.com/872912
bugzilla.suse.com/879390
bugzilla.suse.com/880962
bugzilla.suse.com/882356
bugzilla.suse.com/883758
bugzilla.suse.com/883870
bugzilla.suse.com/886193
bugzilla.suse.com/898031
bugzilla.suse.com/899558
bugzilla.suse.com/913001
bugzilla.suse.com/917376
suse.com/security/cve/CVE-2012-6150
suse.com/security/cve/CVE-2013-0213
suse.com/security/cve/CVE-2013-0214
suse.com/security/cve/CVE-2013-4124
suse.com/security/cve/CVE-2013-4408
suse.com/security/cve/CVE-2013-4475
suse.com/security/cve/CVE-2013-4496
suse.com/security/cve/CVE-2014-0178
suse.com/security/cve/CVE-2014-0244
suse.com/security/cve/CVE-2014-3493
suse.com/security/cve/CVE-2015-0240
ubuntu.com/security/CVE-2013-4496
ubuntu.com/security/notices/USN-2156-1
suse.com/security/cve/CVE-2009-1886
suse.com/security/cve/CVE-2009-1888
suse.com/security/cve/CVE-2009-2813
suse.com/security/cve/CVE-2009-2906
suse.com/security/cve/CVE-2009-2948
suse.com/security/cve/CVE-2010-0547
suse.com/security/cve/CVE-2010-0728
suse.com/security/cve/CVE-2010-0787
suse.com/security/cve/CVE-2010-0926
suse.com/security/cve/CVE-2010-1635
suse.com/security/cve/CVE-2010-1642
suse.com/security/cve/CVE-2010-2063
suse.com/security/cve/CVE-2010-3069
suse.com/security/cve/CVE-2011-0719
suse.com/security/cve/CVE-2011-2522
suse.com/security/cve/CVE-2011-2694
suse.com/security/cve/CVE-2012-0817
suse.com/security/cve/CVE-2012-0870
suse.com/security/cve/CVE-2012-1182
suse.com/security/cve/CVE-2012-2111
suse.com/security/cve/CVE-2013-0172
suse.com/security/cve/CVE-2013-0454
suse.com/security/cve/CVE-2013-1863
suse.com/security/cve/CVE-2013-4476
suse.com/security/cve/CVE-2013-6442
suse.com/security/cve/CVE-2014-0239
suse.com/security/cve/CVE-2014-3560
suse.com/security/cve/CVE-2014-8143
suse.com/security/cve/CVE-2015-3223
suse.com/security/cve/CVE-2015-5252
suse.com/security/cve/CVE-2015-5296
suse.com/security/cve/CVE-2015-5299
suse.com/security/cve/CVE-2015-5330
suse.com/security/cve/CVE-2015-5370
suse.com/security/cve/CVE-2015-7560
suse.com/security/cve/CVE-2015-8467
suse.com/security/cve/CVE-2015-8543
suse.com/security/cve/CVE-2016-0771
suse.com/security/cve/CVE-2016-2110
suse.com/security/cve/CVE-2016-2111
suse.com/security/cve/CVE-2016-2112
suse.com/security/cve/CVE-2016-2113
suse.com/security/cve/CVE-2016-2115
suse.com/security/cve/CVE-2016-2118
suse.com/security/cve/CVE-2016-2119