CVE-2015-0240

2015-02-2300:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.974

Percentile

99.9%

JSON

The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before
3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5
performs a free operation on an uninitialized stack pointer, which allows
remote attackers to execute arbitrary code via crafted Netlogon packets
that use the ServerPasswordSet RPC API, as demonstrated by packets reaching
the _netr_ServerPasswordSet function in
rpc_server/netlogon/srv_netlog_nt.c.

Bugs

<https://bugzilla.samba.org/show_bug.cgi?id=11077 (private)>

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchsamba< 2:3.6.3-2ubuntu2.12UNKNOWN
ubuntu14.04noarchsamba< 2:4.1.6+dfsg-1ubuntu2.14.04.7UNKNOWN
ubuntu14.10noarchsamba< 2:4.1.11+dfsg-1ubuntu2.2UNKNOWN
ubuntu15.04noarchsamba< 2:4.1.13+dfsg-4ubuntu2UNKNOWN
ubuntu15.10noarchsamba< 2:4.1.13+dfsg-4ubuntu2UNKNOWN
ubuntu16.04noarchsamba< 2:4.1.13+dfsg-4ubuntu2UNKNOWN
ubuntu16.10noarchsamba< 2:4.1.13+dfsg-4ubuntu2UNKNOWN
ubuntu17.04noarchsamba< 2:4.1.13+dfsg-4ubuntu2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	samba	< 2:3.6.3-2ubuntu2.12	UNKNOWN
ubuntu	14.04	noarch	samba	< 2:4.1.6+dfsg-1ubuntu2.14.04.7	UNKNOWN
ubuntu	14.10	noarch	samba	< 2:4.1.11+dfsg-1ubuntu2.2	UNKNOWN
ubuntu	15.04	noarch	samba	< 2:4.1.13+dfsg-4ubuntu2	UNKNOWN
ubuntu	15.10	noarch	samba	< 2:4.1.13+dfsg-4ubuntu2	UNKNOWN
ubuntu	16.04	noarch	samba	< 2:4.1.13+dfsg-4ubuntu2	UNKNOWN
ubuntu	16.10	noarch	samba	< 2:4.1.13+dfsg-4ubuntu2	UNKNOWN
ubuntu	17.04	noarch	samba	< 2:4.1.13+dfsg-4ubuntu2	UNKNOWN