CVE-2014-3560: Code Injection
As reported in the upstream advisory and bugzilla [1]:
All current versions of Samba 4.x.x are vulnerable to a remote code execution vulnerability in the nmbd NetBIOS name services daemon.
A malicious browser can send packets that may overwrite the heap of the target nmbd NetBIOS name services daemon. It may be possible to use this to generate a remote code execution vulnerability as the superuser (root).
Patches are available for 4.1.x [2] and 4.0.x [3].
[1] https://bugzilla.samba.org/showbug.cgi?id=10735 [2] https://git.samba.org/?p=samba.git;a=commitdiff;h=e6a848630da3ba958c442438ea131c99fa088605 [3] https://git.samba.org/?p=samba.git;a=commitdiff;h=fb1d325d96dfe9bc2e9c4ec46ad4c55e8f18f4a2
External References:
https://www.samba.org/samba/security/CVE-2014-3560
Statement:
This issue did not affect the versions of samba or samba3x as shipped with Red Hat Enterprise Linux 5, and the versions of samba as shipped with Red Hat Enterprise Linux 6, as it only affected Samba 4.0.0 and higher.
Other sources
NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in stringwrappers.h.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3560?
CVE-2014-3560 has a critical severity level due to its potential for remote code execution.
How do I fix CVE-2014-3560?
To fix CVE-2014-3560, update Samba to version 4.1.11 or later or apply the official security patches.
Which versions are affected by CVE-2014-3560?
CVE-2014-3560 affects all versions of Samba 4.x.x prior to 4.1.11.
Can CVE-2014-3560 be exploited remotely?
Yes, CVE-2014-3560 can be exploited remotely by sending specially crafted packets to the nmbd daemon.
What components are impacted by CVE-2014-3560?
CVE-2014-3560 specifically impacts the nmbd NetBIOS name services daemon of the Samba software.