CVE-2015-5370

Published: Apr 25, 2016Modified: May 6, 2026

5.9

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remote attackers to perform protocol-downgrade attacks, cause a denial of service (application crash or CPU consumption), or possibly execute arbitrary code on a client system via unspecified vectors.

Affected (101)

Products: Samba: Samba · Canonical: Ubuntu Linux

1 product

1 product

Configuration A

98 vulnerable

Vulnerable Software	Affected Versions
Samba Samba	Version 3.6.0
Samba Samba	Version 3.6.10
Samba Samba	Version 3.6.11
Samba Samba	Version 3.6.12
Samba Samba	Version 3.6.13
Samba Samba	Version 3.6.14
Samba Samba	Version 3.6.15
Samba Samba	Version 3.6.16
Samba Samba	Version 3.6.17
Samba Samba	Version 3.6.18
Samba Samba	Version 3.6.19
Samba Samba	Version 3.6.1
Samba Samba	Version 3.6.20
Samba Samba	Version 3.6.21
Samba Samba	Version 3.6.22
Samba Samba	Version 3.6.23
Samba Samba	Version 3.6.24
Samba Samba	Version 3.6.25
Samba Samba	Version 3.6.2
Samba Samba	Version 3.6.3
Samba Samba	Version 3.6.4
Samba Samba	Version 3.6.5
Samba Samba	Version 3.6.6
Samba Samba	Version 3.6.7
Samba Samba	Version 3.6.8
Samba Samba	Version 3.6.9
Samba Samba	Version 4.0.0
Samba Samba	Version 4.0.10
Samba Samba	Version 4.0.11
Samba Samba	Version 4.0.12
Samba Samba	Version 4.0.13
Samba Samba	Version 4.0.14
Samba Samba	Version 4.0.15
Samba Samba	Version 4.0.16
Samba Samba	Version 4.0.17
Samba Samba	Version 4.0.18
Samba Samba	Version 4.0.19
Samba Samba	Version 4.0.1
Samba Samba	Version 4.0.20
Samba Samba	Version 4.0.21
Samba Samba	Version 4.0.22
Samba Samba	Version 4.0.23
Samba Samba	Version 4.0.24
Samba Samba	Version 4.0.25
Samba Samba	Version 4.0.26
Samba Samba	Version 4.0.2
Samba Samba	Version 4.0.3
Samba Samba	Version 4.0.4
Samba Samba	Version 4.0.5
Samba Samba	Version 4.0.6
Samba Samba	Version 4.0.7
Samba Samba	Version 4.0.8
Samba Samba	Version 4.0.9
Samba Samba	Version 4.1.0
Samba Samba	Version 4.1.10
Samba Samba	Version 4.1.11
Samba Samba	Version 4.1.12
Samba Samba	Version 4.1.13
Samba Samba	Version 4.1.14
Samba Samba	Version 4.1.15
Samba Samba	Version 4.1.16
Samba Samba	Version 4.1.17
Samba Samba	Version 4.1.18
Samba Samba	Version 4.1.19
Samba Samba	Version 4.1.1
Samba Samba	Version 4.1.20
Samba Samba	Version 4.1.21
Samba Samba	Version 4.1.22
Samba Samba	Version 4.1.23
Samba Samba	Version 4.1.2
Samba Samba	Version 4.1.3
Samba Samba	Version 4.1.4
Samba Samba	Version 4.1.5
Samba Samba	Version 4.1.6
Samba Samba	Version 4.1.7
Samba Samba	Version 4.1.8
Samba Samba	Version 4.1.9
Samba Samba	Version 4.2.0 rc1
Samba Samba	Version 4.2.0 rc2
Samba Samba	Version 4.2.0 rc3
Samba Samba	Version 4.2.0 rc4
Samba Samba	Version 4.2.1
Samba Samba	Version 4.2.2
Samba Samba	Version 4.2.3
Samba Samba	Version 4.2.4
Samba Samba	Version 4.2.5
Samba Samba	Version 4.2.6
Samba Samba	Version 4.2.7
Samba Samba	Version 4.2.8
Samba Samba	Version 4.2.9
Samba Samba	Version 4.3.0
Samba Samba	Version 4.3.1
Samba Samba	Version 4.3.2
Samba Samba	Version 4.3.3
Samba Samba	Version 4.3.4
Samba Samba	Version 4.3.5
Samba Samba	Version 4.3.6
Samba Samba	Version 4.4.0

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 15.10
Canonical Ubuntu Linux	Version 16.04

References (68)

http://badlock.org/

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-0611.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-0612.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-0613.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-0614.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-0618.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-0619.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-0620.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-0624.html

Source: cve@mitre.org

http://www.debian.org/security/2016/dsa-3548

Source: cve@mitre.org

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

Source: cve@mitre.org

http://www.securitytracker.com/id/1035533

Source: cve@mitre.org

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2950-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2950-2

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2950-3

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2950-4

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2950-5

Source: cve@mitre.org

https://bto.bluecoat.com/security-advisory/sa122

Source: cve@mitre.org

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399

Source: cve@mitre.org

https://www.samba.org/samba/history/samba-4.2.10.html

Source: cve@mitre.org

https://www.samba.org/samba/latest_news.html#4.4.2

Source: cve@mitre.org

https://www.samba.org/samba/security/CVE-2015-5370.html

Source: cve@mitre.org

PatchVendor Advisory

http://badlock.org/