CVE-2013-4124: Integer Overflow
First published: Mon Jul 15 2013(Updated: )
An integer overflow flaw was found in the way samba read an EA list provided by the client. A malicious client could send a specially crafted EA list that wraps perfectly on a 32-bit boundary, causing the server to loop and re-process the list. This can cause Denial of Service via memory exhaustion. Reference: <a href="https://bugzilla.samba.org/show_bug.cgi?id=10010">https://bugzilla.samba.org/show_bug.cgi?id=10010</a> (curently private)
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/samba | <3.5.22 | 3.5.22 |
| redhat/samba | <3.6.17 | 3.6.17 |
| redhat/samba | <4.0.8 | 4.0.8 |
| Ubuntu | =10.04 | |
| Ubuntu | =12.04 | |
| Ubuntu | =12.10 | |
| Ubuntu | =13.04 | |
| Red Hat Enterprise Linux | =5 | |
| Fedora | =18 | |
| Fedora | =19 | |
| Samba | =3.0.0 | |
| Samba | =3.0.1 | |
| Samba | =3.0.2 | |
| Samba | =3.0.2-a | |
| Samba | =3.0.2a | |
| Samba | =3.0.3 | |
| Samba | =3.0.4 | |
| Samba | =3.0.4-rc1 | |
| Samba | =3.0.5 | |
| Samba | =3.0.6 | |
| Samba | =3.0.7 | |
| Samba | =3.0.8 | |
| Samba | =3.0.9 | |
| Samba | =3.0.10 | |
| Samba | =3.0.11 | |
| Samba | =3.0.12 | |
| Samba | =3.0.13 | |
| Samba | =3.0.14 | |
| Samba | =3.0.14-a | |
| Samba | =3.0.14a | |
| Samba | =3.0.15 | |
| Samba | =3.0.16 | |
| Samba | =3.0.17 | |
| Samba | =3.0.18 | |
| Samba | =3.0.19 | |
| Samba | =3.0.20 | |
| Samba | =3.0.20-a | |
| Samba | =3.0.20-b | |
| Samba | =3.0.20a | |
| Samba | =3.0.20b | |
| Samba | =3.0.21 | |
| Samba | =3.0.21-a | |
| Samba | =3.0.21-b | |
| Samba | =3.0.21-c | |
| Samba | =3.0.21a | |
| Samba | =3.0.21b | |
| Samba | =3.0.21c | |
| Samba | =3.0.22 | |
| Samba | =3.0.23 | |
| Samba | =3.0.23-a | |
| Samba | =3.0.23-b | |
| Samba | =3.0.23-c | |
| Samba | =3.0.23-d | |
| Samba | =3.0.23a | |
| Samba | =3.0.23b | |
| Samba | =3.0.23c | |
| Samba | =3.0.23d | |
| Samba | =3.0.24 | |
| Samba | =3.0.25 | |
| Samba | =3.0.25-a | |
| Samba | =3.0.25-b | |
| Samba | =3.0.25-c | |
| Samba | =3.0.25-pre1 | |
| Samba | =3.0.25-pre2 | |
| Samba | =3.0.25-rc1 | |
| Samba | =3.0.25-rc2 | |
| Samba | =3.0.25-rc3 | |
| Samba | =3.0.25a | |
| Samba | =3.0.25b | |
| Samba | =3.0.25c | |
| Samba | =3.0.26 | |
| Samba | =3.0.26-a | |
| Samba | =3.0.26a | |
| Samba | =3.0.27 | |
| Samba | =3.0.27-a | |
| Samba | =3.0.28 | |
| Samba | =3.0.28-a | |
| Samba | =3.0.29 | |
| Samba | =3.0.30 | |
| Samba | =3.0.31 | |
| Samba | =3.0.32 | |
| Samba | =3.0.33 | |
| Samba | =3.0.34 | |
| Samba | =3.0.35 | |
| Samba | =3.0.36 | |
| Samba | =3.0.37 | |
| Samba | =3.1.0 | |
| Samba | =3.2.0 | |
| Samba | =3.2.1 | |
| Samba | =3.2.2 | |
| Samba | =3.2.3 | |
| Samba | =3.2.4 | |
| Samba | =3.2.5 | |
| Samba | =3.2.6 | |
| Samba | =3.2.7 | |
| Samba | =3.2.8 | |
| Samba | =3.2.9 | |
| Samba | =3.2.10 | |
| Samba | =3.2.11 | |
| Samba | =3.2.12 | |
| Samba | =3.2.13 | |
| Samba | =3.2.14 | |
| Samba | =3.2.15 | |
| Samba | =3.3.0 | |
| Samba | =3.3.1 | |
| Samba | =3.3.2 | |
| Samba | =3.3.3 | |
| Samba | =3.3.4 | |
| Samba | =3.3.5 | |
| Samba | =3.3.6 | |
| Samba | =3.3.7 | |
| Samba | =3.3.8 | |
| Samba | =3.3.9 | |
| Samba | =3.3.10 | |
| Samba | =3.3.11 | |
| Samba | =3.3.12 | |
| Samba | =3.3.13 | |
| Samba | =3.3.14 | |
| Samba | =3.3.15 | |
| Samba | =3.3.16 | |
| Samba | =3.4.0 | |
| Samba | =3.4.1 | |
| Samba | =3.4.2 | |
| Samba | =3.4.3 | |
| Samba | =3.4.4 | |
| Samba | =3.4.5 | |
| Samba | =3.4.6 | |
| Samba | =3.4.7 | |
| Samba | =3.4.8 | |
| Samba | =3.4.9 | |
| Samba | =3.4.10 | |
| Samba | =3.4.11 | |
| Samba | =3.4.12 | |
| Samba | =3.4.13 | |
| Samba | =3.4.14 | |
| Samba | =3.4.15 | |
| Samba | =3.4.16 | |
| Samba | =3.4.17 | |
| Samba | =3.5.0 | |
| Samba | =3.5.1 | |
| Samba | =3.5.2 | |
| Samba | =3.5.10 | |
| Samba | =3.5.11 | |
| Samba | =3.5.12 | |
| Samba | =3.5.13 | |
| Samba | =3.5.14 | |
| Samba | =3.5.15 | |
| Samba | =3.5.16 | |
| Samba | =3.5.17 | |
| Samba | =3.5.18 | |
| Samba | =3.5.19 | |
| Samba | =3.5.20 | |
| Samba | =3.5.21 | |
| Samba | =3.6.0 | |
| Samba | =3.6.1 | |
| Samba | =3.6.2 | |
| Samba | =3.6.3 | |
| Samba | =3.6.4 | |
| Samba | =3.6.5 | |
| Samba | =3.6.6 | |
| Samba | =3.6.7 | |
| Samba | =3.6.8 | |
| Samba | =3.6.9 | |
| Samba | =3.6.10 | |
| Samba | =3.6.11 | |
| Samba | =3.6.12 | |
| Samba | =3.6.13 | |
| Samba | =3.6.14 | |
| Samba | =3.6.15 | |
| Samba | =3.6.16 | |
| Samba | =4.0.0 | |
| Samba | =4.0.1 | |
| Samba | =4.0.2 | |
| Samba | =4.0.3 | |
| Samba | =4.0.4 | |
| Samba | =4.0.5 | |
| Samba | =4.0.6 | |
| Samba | =4.0.7 | |
| SUSE Linux | =12.2 | |
| SUSE Linux | =12.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://archives.neohapsis.com/archives/bugtraq/2013-08/0028.html
- http://ftp.samba.org/pub/samba/patches/security/samba-4.0.7-CVE-2013-4124.patch
- http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113591.html
- http://lists.fedoraproject.org/pipermail/package-announce/2013-August/114011.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html
- http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00015.html
- http://marc.info/?l=bugtraq&m=141660010015249&w=2
- http://osvdb.org/95969
- http://rhn.redhat.com/errata/RHSA-2013-1310.html
- http://rhn.redhat.com/errata/RHSA-2013-1542.html
- http://rhn.redhat.com/errata/RHSA-2013-1543.html
- http://rhn.redhat.com/errata/RHSA-2014-0305.html
- http://secunia.com/advisories/54519
- http://security.gentoo.org/glsa/glsa-201502-15.xml
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:207
- http://www.samba.org/samba/history/samba-3.5.22.html
- http://www.samba.org/samba/history/samba-3.6.17.html
- http://www.samba.org/samba/history/samba-4.0.8.html
- http://www.samba.org/samba/security/CVE-2013-4124
- http://www.securitytracker.com/id/1028882
- http://www.ubuntu.com/usn/USN-1966-1
- https://bugzilla.redhat.com/show_bug.cgi?id=984401
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86185
- https://bugzilla.samba.org/show_bug.cgi?id=10010
- http://www.samba.org/samba/security/
- http://gitweb.samba.org/?p=samba.git;a=commitdiff;h=b4bfcdf921aeee05c4608d7b48618fdfb1f134dc
- http://gitweb.samba.org/?p=samba.git;a=commitdiff;h=efdbcabbe97a594572d71d714d258a5854c5d8ce
- http://gitweb.samba.org/?p=samba.git;a=commitdiff;h=6ef0e33fe8afa0ebb81652b9d42b42d20efadf04
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=993043
- https://rhn.redhat.com/errata/RHSA-2013-1310.html
- https://rhn.redhat.com/errata/RHSA-2013-1542.html
- https://rhn.redhat.com/errata/RHSA-2013-1543.html
- https://rhn.redhat.com/errata/RHSA-2014-0305.html
Frequently Asked Questions
What is the severity of CVE-2013-4124?
CVE-2013-4124 is classified as a moderate severity vulnerability due to its potential to cause Denial of Service through memory exhaustion.
How do I fix CVE-2013-4124?
To fix CVE-2013-4124, upgrade Samba to version 3.5.22, 3.6.17, or 4.0.8 or later.
Which versions of Samba are affected by CVE-2013-4124?
CVE-2013-4124 affects Samba versions prior to 3.5.22, 3.6.17, and 4.0.8.
What type of attack can be performed using CVE-2013-4124?
The vulnerability can be exploited by a malicious client sending a specially crafted EA list, leading to a Denial of Service.
Is CVE-2013-4124 related to memory management issues?
Yes, CVE-2013-4124 is an integer overflow flaw that can lead to memory exhaustion.
- collector/redhat-bugzilla
- alias/CVE-2013-4124
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/author
- agent/severity
- agent/weakness
- agent/remedy
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- package-manager/redhat
- vendor/canonical
- canonical/ubuntu
- version/ubuntu/10.04
- version/ubuntu/12.04
- version/ubuntu/12.10
- version/ubuntu/13.04
- vendor/redhat
- canonical/red hat enterprise linux
- version/red hat enterprise linux/5
- vendor/fedoraproject
- canonical/fedora
- version/fedora/18
- version/fedora/19
- vendor/samba
- canonical/samba
- version/samba/3.0.0
- version/samba/3.0.1
- version/samba/3.0.2
- version/samba/3.0.2-a
- version/samba/3.0.2a
- version/samba/3.0.3
- version/samba/3.0.4
- version/samba/3.0.4-rc1
- version/samba/3.0.5
- version/samba/3.0.6
- version/samba/3.0.7
- version/samba/3.0.8
- version/samba/3.0.9
- version/samba/3.0.10
- version/samba/3.0.11
- version/samba/3.0.12
- version/samba/3.0.13
- version/samba/3.0.14
- version/samba/3.0.14-a
- version/samba/3.0.14a
- version/samba/3.0.15
- version/samba/3.0.16
- version/samba/3.0.17
- version/samba/3.0.18
- version/samba/3.0.19
- version/samba/3.0.20
- version/samba/3.0.20-a
- version/samba/3.0.20-b
- version/samba/3.0.20a
- version/samba/3.0.20b
- version/samba/3.0.21
- version/samba/3.0.21-a
- version/samba/3.0.21-b
- version/samba/3.0.21-c
- version/samba/3.0.21a
- version/samba/3.0.21b
- version/samba/3.0.21c
- version/samba/3.0.22
- version/samba/3.0.23
- version/samba/3.0.23-a
- version/samba/3.0.23-b
- version/samba/3.0.23-c
- version/samba/3.0.23-d
- version/samba/3.0.23a
- version/samba/3.0.23b
- version/samba/3.0.23c
- version/samba/3.0.23d
- version/samba/3.0.24
- version/samba/3.0.25
- version/samba/3.0.25-a
- version/samba/3.0.25-b
- version/samba/3.0.25-c
- version/samba/3.0.25-pre1
- version/samba/3.0.25-pre2
- version/samba/3.0.25-rc1
- version/samba/3.0.25-rc2
- version/samba/3.0.25-rc3
- version/samba/3.0.25a
- version/samba/3.0.25b
- version/samba/3.0.25c
- version/samba/3.0.26
- version/samba/3.0.26-a
- version/samba/3.0.26a
- version/samba/3.0.27
- version/samba/3.0.27-a
- version/samba/3.0.28
- version/samba/3.0.28-a
- version/samba/3.0.29
- version/samba/3.0.30
- version/samba/3.0.31
- version/samba/3.0.32
- version/samba/3.0.33
- version/samba/3.0.34
- version/samba/3.0.35
- version/samba/3.0.36
- version/samba/3.0.37
- version/samba/3.1.0
- version/samba/3.2.0
- version/samba/3.2.1
- version/samba/3.2.2
- version/samba/3.2.3
- version/samba/3.2.4
- version/samba/3.2.5
- version/samba/3.2.6
- version/samba/3.2.7
- version/samba/3.2.8
- version/samba/3.2.9
- version/samba/3.2.10
- version/samba/3.2.11
- version/samba/3.2.12
- version/samba/3.2.13
- version/samba/3.2.14
- version/samba/3.2.15
- version/samba/3.3.0
- version/samba/3.3.1
- version/samba/3.3.2
- version/samba/3.3.3
- version/samba/3.3.4
- version/samba/3.3.5
- version/samba/3.3.6
- version/samba/3.3.7
- version/samba/3.3.8
- version/samba/3.3.9
- version/samba/3.3.10
- version/samba/3.3.11
- version/samba/3.3.12
- version/samba/3.3.13
- version/samba/3.3.14
- version/samba/3.3.15
- version/samba/3.3.16
- version/samba/3.4.0
- version/samba/3.4.1
- version/samba/3.4.2
- version/samba/3.4.3
- version/samba/3.4.4
- version/samba/3.4.5
- version/samba/3.4.6
- version/samba/3.4.7
- version/samba/3.4.8
- version/samba/3.4.9
- version/samba/3.4.10
- version/samba/3.4.11
- version/samba/3.4.12
- version/samba/3.4.13
- version/samba/3.4.14
- version/samba/3.4.15
- version/samba/3.4.16
- version/samba/3.4.17
- version/samba/3.5.0
- version/samba/3.5.1
- version/samba/3.5.2
- version/samba/3.5.10
- version/samba/3.5.11
- version/samba/3.5.12
- version/samba/3.5.13
- version/samba/3.5.14
- version/samba/3.5.15
- version/samba/3.5.16
- version/samba/3.5.17
- version/samba/3.5.18
- version/samba/3.5.19
- version/samba/3.5.20
- version/samba/3.5.21
- version/samba/3.6.0
- version/samba/3.6.1
- version/samba/3.6.2
- version/samba/3.6.3
- version/samba/3.6.4
- version/samba/3.6.5
- version/samba/3.6.6
- version/samba/3.6.7
- version/samba/3.6.8
- version/samba/3.6.9
- version/samba/3.6.10
- version/samba/3.6.11
- version/samba/3.6.12
- version/samba/3.6.13
- version/samba/3.6.14
- version/samba/3.6.15
- version/samba/3.6.16
- version/samba/4.0.0
- version/samba/4.0.1
- version/samba/4.0.2
- version/samba/4.0.3
- version/samba/4.0.4
- version/samba/4.0.5
- version/samba/4.0.6
- version/samba/4.0.7
- vendor/opensuse
- canonical/suse linux
- version/suse linux/12.2
- version/suse linux/12.3