CVE-2013-4124: Integer Overflow
An integer overflow flaw was found in the way samba read an EA list provided by the client. A malicious client could send a specially crafted EA list that wraps perfectly on a 32-bit boundary, causing the server to loop and re-process the list. This can cause Denial of Service via memory exhaustion.
Reference:
https://bugzilla.samba.org/showbug.cgi?id=10010 (curently private)
Other sources
Integer overflow in the readnttransealist function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4124?
CVE-2013-4124 is classified as a moderate severity vulnerability due to its potential to cause Denial of Service through memory exhaustion.
How do I fix CVE-2013-4124?
To fix CVE-2013-4124, upgrade Samba to version 3.5.22, 3.6.17, or 4.0.8 or later.
Which versions of Samba are affected by CVE-2013-4124?
CVE-2013-4124 affects Samba versions prior to 3.5.22, 3.6.17, and 4.0.8.
What type of attack can be performed using CVE-2013-4124?
The vulnerability can be exploited by a malicious client sending a specially crafted EA list, leading to a Denial of Service.
Is CVE-2013-4124 related to memory management issues?
Yes, CVE-2013-4124 is an integer overflow flaw that can lead to memory exhaustion.