CVE-2014-3493

Published: Jun 23, 2014Modified: May 6, 2026

2.7

Vector

AV:A/AC:L/Au:S/C:N/I:N/A:P

Exploitability: 5.1 / Impact: 2.9

Source: NVD

Description

The push_ascii function in smbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) via an attempt to read a Unicode pathname without specifying use of Unicode, leading to a character-set conversion failure that triggers an invalid pointer dereference.

Affected (52)

Products: Samba: Samba

1 product

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Samba Samba	Version 3.6.0
Samba Samba	Version 3.6.10
Samba Samba	Version 3.6.11
Samba Samba	Version 3.6.12
Samba Samba	Version 3.6.13
Samba Samba	Version 3.6.14
Samba Samba	Version 3.6.15
Samba Samba	Version 3.6.16
Samba Samba	Version 3.6.17
Samba Samba	Version 3.6.18
Samba Samba	Version 3.6.19
Samba Samba	Version 3.6.1
Samba Samba	Version 3.6.20
Samba Samba	Version 3.6.21
Samba Samba	Version 3.6.22
Samba Samba	Version 3.6.23
Samba Samba	Version 3.6.2
Samba Samba	Version 3.6.3
Samba Samba	Version 3.6.4
Samba Samba	Version 3.6.5
Samba Samba	Version 3.6.6
Samba Samba	Version 3.6.7
Samba Samba	Version 3.6.8
Samba Samba	Version 3.6.9

Configuration B

9 vulnerable

Vulnerable Software	Affected Versions
Samba Samba	Version 4.1.0
Samba Samba	Version 4.1.1
Samba Samba	Version 4.1.2
Samba Samba	Version 4.1.3
Samba Samba	Version 4.1.4
Samba Samba	Version 4.1.5
Samba Samba	Version 4.1.6
Samba Samba	Version 4.1.7
Samba Samba	Version 4.1.8

Configuration C

19 vulnerable

Vulnerable Software	Affected Versions
Samba Samba	Version 4.0.0
Samba Samba	Version 4.0.10
Samba Samba	Version 4.0.11
Samba Samba	Version 4.0.12
Samba Samba	Version 4.0.13
Samba Samba	Version 4.0.14
Samba Samba	Version 4.0.15
Samba Samba	Version 4.0.16
Samba Samba	Version 4.0.17
Samba Samba	Version 4.0.18
Samba Samba	Version 4.0.1
Samba Samba	Version 4.0.2
Samba Samba	Version 4.0.3
Samba Samba	Version 4.0.4
Samba Samba	Version 4.0.5
Samba Samba	Version 4.0.6
Samba Samba	Version 4.0.7
Samba Samba	Version 4.0.8
Samba Samba	Version 4.0.9

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (46)

http://advisories.mageia.org/MGASA-2014-0279.html

Source: secalert@redhat.com

http://linux.oracle.com/errata/ELSA-2014-0866.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2014-0866.html

Source: secalert@redhat.com

http://secunia.com/advisories/59378

Source: secalert@redhat.com

http://secunia.com/advisories/59407

Source: secalert@redhat.com

http://secunia.com/advisories/59433

Source: secalert@redhat.com

http://secunia.com/advisories/59579

Source: secalert@redhat.com

http://secunia.com/advisories/59834

Source: secalert@redhat.com

http://secunia.com/advisories/59848

Source: secalert@redhat.com

http://secunia.com/advisories/59919

Source: secalert@redhat.com

http://secunia.com/advisories/61218

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-201502-15.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2014:136

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2015:082

Source: secalert@redhat.com

http://www.samba.org/samba/security/CVE-2014-3493

Source: secalert@redhat.com

Vendor Advisory

http://www.securityfocus.com/archive/1/532757/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/68150

Source: secalert@redhat.com

http://www.securitytracker.com/id/1030455

Source: secalert@redhat.com

https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_samba1

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1108748

Source: secalert@redhat.com

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993

Source: secalert@redhat.com

http://advisories.mageia.org/MGASA-2014-0279.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://linux.oracle.com/errata/ELSA-2014-0866.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-0866.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59378

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59407

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59433

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59579

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59834

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59848

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59919

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/61218

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-201502-15.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2014:136

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2015:082

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.samba.org/samba/security/CVE-2014-3493

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/archive/1/532757/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/68150

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1030455

Source: af854a3a-2127-422b-91ae-364da2661108

https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_samba1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=1108748

Source: af854a3a-2127-422b-91ae-364da2661108

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.