CVE-2013-4408: Buffer Overflow

Published Dec 10, 2013

Updated

Heap-based buffer overflow in the dcerpcreadncacnpacketdone function in librpc/rpc/dcerpcutil.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.

Affected Software

188 affected components

Samba Samba=4.1.0

Samba Samba=4.1.1

Samba Samba=4.1.2

Samba Samba=4.0.0

Samba Samba=4.0.1

Samba Samba=4.0.2

Samba Samba=4.0.3

Samba Samba=4.0.4

Samba Samba=4.0.5

Samba Samba=4.0.6

Samba Samba=4.0.7

Samba Samba=4.0.8

Samba Samba=4.0.9

Samba Samba=4.0.10

Samba Samba=4.0.11

Samba Samba=4.0.12

Samba Samba=3.0.0

Samba Samba=3.0.1

Samba Samba=3.0.2

Samba Samba=3.0.2-a

Samba Samba=3.0.2a

Samba Samba=3.0.3

Samba Samba=3.0.4

Samba Samba=3.0.4-rc1

Samba Samba=3.0.5

Samba Samba=3.0.6

Samba Samba=3.0.7

Samba Samba=3.0.8

Samba Samba=3.0.9

Samba Samba=3.0.10

Samba Samba=3.0.11

Samba Samba=3.0.12

Samba Samba=3.0.13

Samba Samba=3.0.14

Samba Samba=3.0.14-a

Samba Samba=3.0.14a

Samba Samba=3.0.15

Samba Samba=3.0.16

Samba Samba=3.0.17

Samba Samba=3.0.18

Samba Samba=3.0.19

Samba Samba=3.0.20

Samba Samba=3.0.20-a

Samba Samba=3.0.20-b

Samba Samba=3.0.20a

Samba Samba=3.0.20b

Samba Samba=3.0.21

Samba Samba=3.0.21-a

Samba Samba=3.0.21-b

Samba Samba=3.0.21-c

Samba Samba=3.0.21a

Samba Samba=3.0.21b

Samba Samba=3.0.21c

Samba Samba=3.0.22

Samba Samba=3.0.23

Samba Samba=3.0.23-a

Samba Samba=3.0.23-b

Samba Samba=3.0.23-c

Samba Samba=3.0.23-d

Samba Samba=3.0.23a

Samba Samba=3.0.23b

Samba Samba=3.0.23c

Samba Samba=3.0.23d

Samba Samba=3.0.24

Samba Samba=3.0.25

Samba Samba=3.0.25-a

Samba Samba=3.0.25-b

Samba Samba=3.0.25-c

Samba Samba=3.0.25-pre1

Samba Samba=3.0.25-pre2

Samba Samba=3.0.25-rc1

Samba Samba=3.0.25-rc2

Samba Samba=3.0.25-rc3

Samba Samba=3.0.25a

Samba Samba=3.0.25b

Samba Samba=3.0.25c

Samba Samba=3.0.26

Samba Samba=3.0.26-a

Samba Samba=3.0.26a

Samba Samba=3.0.27

Samba Samba=3.0.27-a

Samba Samba=3.0.28

Samba Samba=3.0.28-a

Samba Samba=3.0.29

Samba Samba=3.0.30

Samba Samba=3.0.31

Samba Samba=3.0.32

Samba Samba=3.0.33

Samba Samba=3.0.34

Samba Samba=3.0.35

Samba Samba=3.0.36

Samba Samba=3.0.37

Samba Samba=3.1.0

Samba Samba=3.2.0

Samba Samba=3.2.1

Samba Samba=3.2.2

Samba Samba=3.2.3

Samba Samba=3.2.4

Samba Samba=3.2.5

Samba Samba=3.2.6

Samba Samba=3.2.7

Samba Samba=3.2.8

Samba Samba=3.2.9

Samba Samba=3.2.10

Samba Samba=3.2.11

Samba Samba=3.2.12

Samba Samba=3.2.13

Samba Samba=3.2.14

Samba Samba=3.2.15

Samba Samba=3.3.0

Samba Samba=3.3.1

Samba Samba=3.3.2

Samba Samba=3.3.3

Samba Samba=3.3.4

Samba Samba=3.3.5

Samba Samba=3.3.6

Samba Samba=3.3.7

Samba Samba=3.3.8

Samba Samba=3.3.9

Samba Samba=3.3.10

Samba Samba=3.3.11

Samba Samba=3.3.12

Samba Samba=3.3.13

Samba Samba=3.3.14

Samba Samba=3.3.15

Samba Samba=3.3.16

Samba Samba=3.4.0

Samba Samba=3.4.1

Samba Samba=3.4.2

Samba Samba=3.4.3

Samba Samba=3.4.4

Samba Samba=3.4.5

Samba Samba=3.4.6

Samba Samba=3.4.7

Samba Samba=3.4.8

Samba Samba=3.4.9

Samba Samba=3.4.10

Samba Samba=3.4.11

Samba Samba=3.4.12

Samba Samba=3.4.13

Samba Samba=3.4.14

Samba Samba=3.4.15

Samba Samba=3.4.16

Samba Samba=3.4.17

Samba Samba=3.5.0

Samba Samba=3.5.1

Samba Samba=3.5.2

Samba Samba=3.5.3

Samba Samba=3.5.4

Samba Samba=3.5.5

Samba Samba=3.5.6

Samba Samba=3.5.7

Samba Samba=3.5.8

Samba Samba=3.5.9

Samba Samba=3.5.10

Samba Samba=3.5.11

Samba Samba=3.5.12

Samba Samba=3.5.13

Samba Samba=3.5.14

Samba Samba=3.5.15

Samba Samba=3.5.16

Samba Samba=3.5.17

Samba Samba=3.5.18

Samba Samba=3.5.19

Samba Samba=3.5.20

Samba Samba=3.5.21

Samba Samba=3.6.0

Samba Samba=3.6.1

Samba Samba=3.6.2

Samba Samba=3.6.3

Samba Samba=3.6.4

Samba Samba=3.6.5

Samba Samba=3.6.6

Samba Samba=3.6.7

Samba Samba=3.6.8

Samba Samba=3.6.9

Samba Samba=3.6.10

Samba Samba=3.6.11

Samba Samba=3.6.12

Samba Samba=3.6.13

Samba Samba=3.6.14

Samba Samba=3.6.15

Samba Samba=3.6.16

Samba Samba=3.6.17

Samba Samba=3.6.18

Samba Samba=3.6.19

Samba Samba=3.6.20

Samba Samba=3.6.21

Event History

Dec 10, 2013

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-4408?

CVE-2013-4408 has been classified as a critical vulnerability due to its potential to allow remote code execution.

How do I fix CVE-2013-4408?

To fix CVE-2013-4408, upgrade Samba to version 3.6.22 or later, 4.0.13 or later, or 4.1.3 or later.

What types of systems are affected by CVE-2013-4408?

CVE-2013-4408 affects Samba versions 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3.

What could happen if CVE-2013-4408 is exploited?

If exploited, CVE-2013-4408 could allow remote Active Directory domain controllers to execute arbitrary code on the affected systems.

Is there any workaround for CVE-2013-4408 if I cannot upgrade immediately?

There are no known workarounds for CVE-2013-4408; the best mitigation is to upgrade to a secure version of Samba.