CVE-2014-3560: Code Injection
First published: Fri Aug 01 2014(Updated: )
As reported in the upstream advisory and bugzilla [1]: All current versions of Samba 4.x.x are vulnerable to a remote code execution vulnerability in the nmbd NetBIOS name services daemon. A malicious browser can send packets that may overwrite the heap of the target nmbd NetBIOS name services daemon. It may be possible to use this to generate a remote code execution vulnerability as the superuser (root). Patches are available for 4.1.x [2] and 4.0.x [3]. [1] <a href="https://bugzilla.samba.org/show_bug.cgi?id=10735">https://bugzilla.samba.org/show_bug.cgi?id=10735</a> [2] <a href="https://git.samba.org/?p=samba.git;a=commitdiff;h=e6a848630da3ba958c442438ea131c99fa088605">https://git.samba.org/?p=samba.git;a=commitdiff;h=e6a848630da3ba958c442438ea131c99fa088605</a> [3] <a href="https://git.samba.org/?p=samba.git;a=commitdiff;h=fb1d325d96dfe9bc2e9c4ec46ad4c55e8f18f4a2">https://git.samba.org/?p=samba.git;a=commitdiff;h=fb1d325d96dfe9bc2e9c4ec46ad4c55e8f18f4a2</a> External References: <a href="https://www.samba.org/samba/security/CVE-2014-3560">https://www.samba.org/samba/security/CVE-2014-3560</a> Statement: This issue did not affect the versions of samba or samba3x as shipped with Red Hat Enterprise Linux 5, and the versions of samba as shipped with Red Hat Enterprise Linux 6, as it only affected Samba 4.0.0 and higher.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Canonical Ubuntu Linux | =14.04 | |
| Redhat Enterprise Linux | =6.0 | |
| Redhat Enterprise Linux | =7.0 | |
| Samba Samba | =4.1.0 | |
| Samba Samba | =4.1.1 | |
| Samba Samba | =4.1.2 | |
| Samba Samba | =4.1.3 | |
| Samba Samba | =4.1.4 | |
| Samba Samba | =4.1.5 | |
| Samba Samba | =4.1.6 | |
| Samba Samba | =4.1.7 | |
| Samba Samba | =4.1.8 | |
| Samba Samba | =4.1.9 | |
| Samba Samba | =4.1.10 | |
| Samba Samba | =4.0.0 | |
| Samba Samba | =4.0.1 | |
| Samba Samba | =4.0.2 | |
| Samba Samba | =4.0.3 | |
| Samba Samba | =4.0.4 | |
| Samba Samba | =4.0.5 | |
| Samba Samba | =4.0.6 | |
| Samba Samba | =4.0.7 | |
| Samba Samba | =4.0.8 | |
| Samba Samba | =4.0.9 | |
| Samba Samba | =4.0.10 | |
| Samba Samba | =4.0.11 | |
| Samba Samba | =4.0.12 | |
| Samba Samba | =4.0.13 | |
| Samba Samba | =4.0.14 | |
| Samba Samba | =4.0.15 | |
| Samba Samba | =4.0.16 | |
| Samba Samba | =4.0.17 | |
| Samba Samba | =4.0.18 | |
| Samba Samba | =4.0.19 | |
| Samba Samba | =4.0.20 | |
| redhat/samba | <4.1.11 | 4.1.11 |
| redhat/samba | <4.0.21 | 4.0.21 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136280.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html
- http://lists.opensuse.org/opensuse-updates/2014-08/msg00027.html
- http://secunia.com/advisories/59583
- http://secunia.com/advisories/59610
- http://secunia.com/advisories/59976
- http://www.samba.org/samba/security/CVE-2014-3560
- http://www.securityfocus.com/bid/69021
- http://www.securitytracker.com/id/1030663
- http://www.ubuntu.com/usn/USN-2305-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1126010
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95081
- https://git.samba.org/?p=samba.git;a=commitdiff;h=e6a848630da3ba958c442438ea131c99fa088605
- https://git.samba.org/?p=samba.git;a=commitdiff;h=fb1d325d96dfe9bc2e9c4ec46ad4c55e8f18f4a2
- https://git.samba.org/?p=samba.git%3Ba=commitdiff%3Bh=e6a848630da3ba958c442438ea131c99fa088605
- https://git.samba.org/?p=samba.git%3Ba=commitdiff%3Bh=fb1d325d96dfe9bc2e9c4ec46ad4c55e8f18f4a2
- https://bugzilla.samba.org/show_bug.cgi?id=10735
- https://www.samba.org/samba/security/CVE-2014-3560
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1126015
- https://git.samba.org/?p=samba.git;a=commitdiff;h=d25370fb477dd733fae6c1ee1a67e32a78236779
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1126010#c6
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1126010#c0
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1126010#c7
- https://git.samba.org/?p=samba.git;a=commitdiff;h=fb9d8c402614556d7a36f9e9efb72b3f4afe838a
- https://rhn.redhat.com/errata/RHSA-2014-1009.html
- https://rhn.redhat.com/errata/RHSA-2014-1008.html
- collector/nvd-index
- agent/softwarecombine
- agent/first-publish-date
- agent/type
- agent/remedy
- collector/mitre-cve
- source/MITRE
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2014-3560
- agent/software-canonical-lookup
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/tags
- agent/event
- agent/trending
- vendor/canonical
- canonical/canonical ubuntu linux
- version/canonical ubuntu linux/14.04
- vendor/redhat
- canonical/redhat enterprise linux
- version/redhat enterprise linux/6.0
- version/redhat enterprise linux/7.0
- vendor/samba
- canonical/samba samba
- version/samba samba/4.1.0
- version/samba samba/4.1.1
- version/samba samba/4.1.2
- version/samba samba/4.1.3
- version/samba samba/4.1.4
- version/samba samba/4.1.5
- version/samba samba/4.1.6
- version/samba samba/4.1.7
- version/samba samba/4.1.8
- version/samba samba/4.1.9
- version/samba samba/4.1.10
- version/samba samba/4.0.0
- version/samba samba/4.0.1
- version/samba samba/4.0.2
- version/samba samba/4.0.3
- version/samba samba/4.0.4
- version/samba samba/4.0.5
- version/samba samba/4.0.6
- version/samba samba/4.0.7
- version/samba samba/4.0.8
- version/samba samba/4.0.9
- version/samba samba/4.0.10
- version/samba samba/4.0.11
- version/samba samba/4.0.12
- version/samba samba/4.0.13
- version/samba samba/4.0.14
- version/samba samba/4.0.15
- version/samba samba/4.0.16
- version/samba samba/4.0.17
- version/samba samba/4.0.18
- version/samba samba/4.0.19
- version/samba samba/4.0.20
- package-manager/redhat