CVE-2013-4124

Description

Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.

How to fix CVE-2013-4124

To remediate CVE-2013-4124, upgrade the affected package to a fixed version below.

• Debian/samba—upgrade to 2:3.6.17-1 or later

Is CVE-2013-4124 being exploited?

Likely — EPSS is 83.5%, placing CVE-2013-4124 in the top tier of vulnerabilities by exploitation probability. Prioritise patching.

Affected packages (1)

• from 0, < 2:3.6.17-1

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2013-4124