CVE-2014-0244

Published: Jun 23, 2014Modified: May 6, 2026

3.3

Vector

AV:A/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 6.5 / Impact: 2.9

Source: NVD

Description

The sys_recvfrom function in nmbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed UDP packet.

Affected (52)

Products: Samba: Samba

1 product

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Samba Samba	Version 4.1.0
Samba Samba	Version 4.1.1
Samba Samba	Version 4.1.2
Samba Samba	Version 4.1.3
Samba Samba	Version 4.1.4
Samba Samba	Version 4.1.5
Samba Samba	Version 4.1.6
Samba Samba	Version 4.1.7
Samba Samba	Version 4.1.8

Configuration B

19 vulnerable

Vulnerable Software	Affected Versions
Samba Samba	Version 4.0.0
Samba Samba	Version 4.0.10
Samba Samba	Version 4.0.11
Samba Samba	Version 4.0.12
Samba Samba	Version 4.0.13
Samba Samba	Version 4.0.14
Samba Samba	Version 4.0.15
Samba Samba	Version 4.0.16
Samba Samba	Version 4.0.17
Samba Samba	Version 4.0.18
Samba Samba	Version 4.0.1
Samba Samba	Version 4.0.2
Samba Samba	Version 4.0.3
Samba Samba	Version 4.0.4
Samba Samba	Version 4.0.5
Samba Samba	Version 4.0.6
Samba Samba	Version 4.0.7
Samba Samba	Version 4.0.8
Samba Samba	Version 4.0.9

Configuration C

24 vulnerable

Vulnerable Software	Affected Versions
Samba Samba	Version 3.6.0
Samba Samba	Version 3.6.10
Samba Samba	Version 3.6.11
Samba Samba	Version 3.6.12
Samba Samba	Version 3.6.13
Samba Samba	Version 3.6.14
Samba Samba	Version 3.6.15
Samba Samba	Version 3.6.16
Samba Samba	Version 3.6.17
Samba Samba	Version 3.6.18
Samba Samba	Version 3.6.19
Samba Samba	Version 3.6.1
Samba Samba	Version 3.6.20
Samba Samba	Version 3.6.21
Samba Samba	Version 3.6.22
Samba Samba	Version 3.6.23
Samba Samba	Version 3.6.2
Samba Samba	Version 3.6.3
Samba Samba	Version 3.6.4
Samba Samba	Version 3.6.5
Samba Samba	Version 3.6.6
Samba Samba	Version 3.6.7
Samba Samba	Version 3.6.8
Samba Samba	Version 3.6.9

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (46)

http://advisories.mageia.org/MGASA-2014-0279.html

Source: secalert@redhat.com

http://linux.oracle.com/errata/ELSA-2014-0866.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2014-0866.html

Source: secalert@redhat.com

http://secunia.com/advisories/59378

Source: secalert@redhat.com

http://secunia.com/advisories/59407

Source: secalert@redhat.com

http://secunia.com/advisories/59433

Source: secalert@redhat.com

http://secunia.com/advisories/59579

Source: secalert@redhat.com

http://secunia.com/advisories/59834

Source: secalert@redhat.com

http://secunia.com/advisories/59848

Source: secalert@redhat.com

http://secunia.com/advisories/59919

Source: secalert@redhat.com

http://secunia.com/advisories/61218

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-201502-15.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2014:136

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2015:082

Source: secalert@redhat.com

http://www.samba.org/samba/security/CVE-2014-0244

Source: secalert@redhat.com

Vendor Advisory

http://www.securityfocus.com/archive/1/532757/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/68148

Source: secalert@redhat.com

http://www.securitytracker.com/id/1030455

Source: secalert@redhat.com

https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_samba1

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1097815

Source: secalert@redhat.com

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993

Source: secalert@redhat.com

http://advisories.mageia.org/MGASA-2014-0279.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://linux.oracle.com/errata/ELSA-2014-0866.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-0866.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59378

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59407

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59433

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59579

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59834

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59848

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59919

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/61218

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-201502-15.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2014:136

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2015:082

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.samba.org/samba/security/CVE-2014-0244

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/archive/1/532757/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/68148

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1030455

Source: af854a3a-2127-422b-91ae-364da2661108

https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_samba1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=1097815

Source: af854a3a-2127-422b-91ae-364da2661108

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.