CVE-2008-4314
CVE-2008-4314
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a denial of service via crafted (1) trans, (2) trans2, and (3) nttrans requests, related to a "cut&paste error" that causes an improper bounds check to be performed.
EPSS 4,3% · Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system
Betroffene Produkte und Versionen
n/a
- Softwareversionen
- n/a: Betroffen
Keine Korrektur veröffentlicht
samba Debian:12
- Betroffene Versionsbereiche
- ECOSYSTEM: < 2:3.2.5-1
Auf 2:3.2.5-1 aktualisieren
samba Debian:13
- Betroffene Versionsbereiche
- ECOSYSTEM: < 2:3.2.5-1
Auf 2:3.2.5-1 aktualisieren
samba Debian:14
- Betroffene Versionsbereiche
- ECOSYSTEM: < 2:3.2.5-1
Auf 2:3.2.5-1 aktualisieren
Originalquellen
- http://www.securityfocus.com/bid/32494
- http://secunia.com/advisories/32951
- http://secunia.com/advisories/32919
- http://secunia.com/advisories/36281
- http://osvdb.org/50230
- http://marc.info/?l=bugtraq&m=125003356619515&w=2
- http://www.ubuntu.com/usn/USN-680-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-249087-1
- http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html
- http://www.securitytracker.com/id?1021287
- http://www.redhat.com/archives/fedora-package-announce/2008-December/msg00141.html
- http://www.vupen.com/english/advisories/2008/3277
- http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.453684
- http://us1.samba.org/samba/security/CVE-2008-4314.html
- http://www.vupen.com/english/advisories/2009/2245
- http://secunia.com/advisories/32968
- http://www.vupen.com/english/advisories/2009/0067
- http://www.redhat.com/archives/fedora-package-announce/2008-December/msg00021.html
- http://us1.samba.org/samba/ftp/patches/security/samba-3.0.32-CVE-2008-4314.patch
- http://secunia.com/advisories/32813
- https://nvd.nist.gov/vuln/detail/CVE-2008-4314