CVE-2011-3585
CVE-2011-3585
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a denial of service (mounting outage) via a SIGKILL signal during a time window when the /etc/mtab~ file exists.
CVSS 4.7 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
samba
- Versions
- 3.6: Affected
No fix published
cifs-utils Debian:12
- Affected ranges
- ECOSYSTEM: < 2:4.5-1
Update to 2:4.5-1
cifs-utils Debian:13
- Affected ranges
- ECOSYSTEM: < 2:4.5-1
Update to 2:4.5-1
cifs-utils Debian:14
- Affected ranges
- ECOSYSTEM: < 2:4.5-1
Update to 2:4.5-1
samba Debian:12
- Affected ranges
- ECOSYSTEM: < 2:3.4.7~dfsg-2
Update to 2:3.4.7~dfsg-2
samba Debian:13
- Affected ranges
- ECOSYSTEM: < 2:3.4.7~dfsg-2
Update to 2:3.4.7~dfsg-2
samba Debian:14
- Affected ranges
- ECOSYSTEM: < 2:3.4.7~dfsg-2
Update to 2:3.4.7~dfsg-2
Original sources
- https://bugzilla.samba.org/show_bug.cgi?id=7179
- https://bugzilla.redhat.com/show_bug.cgi?id=742907
- https://www.openwall.com/lists/oss-security/2011/09/27/1
- https://www.openwall.com/lists/oss-security/2011/09/30/5
- https://git.samba.org/?p=cifs-utils.git%3Ba=commitdiff%3Bh=810f7e4e0f2dbcbee0294d9b371071cb08268200
- https://nvd.nist.gov/vuln/detail/CVE-2011-3585