Description The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.
Metrics CVSS Version 4.0 CVSS Version 3.x CVSS Version 2.0 SSVC
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration Affected Products Product Versions redhat enterprise linux 5
6.0
7.0
CPE cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Remediation No remediation found in references. samba samba 3.5.0
3.5.1
3.5.2
3.5.3
3.5.4
3.5.5
3.5.6
3.5.7
3.5.8
3.5.9
3.5.10
3.5.11
3.5.12
3.5.13
3.5.14
3.5.15
3.5.16
3.5.17
3.5.18
3.5.19
3.5.20
3.5.21
3.5.22
3.6.0
3.6.1
3.6.2
3.6.10
3.6.11
3.6.12
3.6.13
3.6.14
3.6.15
3.6.16
3.6.17
3.6.18
3.6.19
3.6.20
3.6.21
3.6.22
3.6.23
3.6.24
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.0.7
4.0.8
4.0.9
4.0.10
4.0.11
4.0.12
4.0.13
4.0.14
4.0.15
4.0.16
4.0.17
4.0.18
4.0.19
4.0.20
4.0.21
4.0.22
4.0.23
4.0.24
4.1.0
4.1.1
4.1.2
4.1.3
4.1.4
4.1.5
4.1.6
4.1.7
4.1.8
4.1.9
4.1.10
4.1.11
4.1.12
4.1.13
4.1.14
4.1.15
4.1.16
4.2.0 rc1
4.2.0 rc2
4.2.0 rc3
4.2.0 rc4
Viewing 5 of 87 versions. View all CPE cpe:2.3:a:samba:samba:3.5.0:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.5.1:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.5.2:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.5.3:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.5.4:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.5.5:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.5.6:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.5.7:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.5.8:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.5.9:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.5.10:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.5.11:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.5.12:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.5.13:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.5.14:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.5.15:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.5.16:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.5.17:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.5.18:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.5.19:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.5.20:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.5.21:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.5.22:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.6.0:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.6.1:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.6.2:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.6.10:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.6.11:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.6.12:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.6.13:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.6.14:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.6.15:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.6.16:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.6.17:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.6.18:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.6.19:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.6.20:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.6.21:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.6.22:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.6.23:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:3.6.24:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.0.0:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.0.1:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.0.2:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.0.3:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.0.4:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.0.5:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.0.6:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.0.7:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.0.8:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.0.9:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.0.10:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.0.11:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.0.12:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.0.13:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.0.14:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.0.15:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.0.16:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.0.17:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.0.18:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.0.19:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.0.20:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.0.21:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.0.22:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.0.23:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.0.24:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.1.0:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.1.1:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.1.2:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.1.3:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.1.4:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.1.5:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.1.6:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.1.7:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.1.8:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.1.9:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.1.10:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.1.11:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.1.12:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.1.13:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.1.14:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.1.15:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.1.16:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.2.0:rc1:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.2.0:rc2:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.2.0:rc3:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.2.0:rc4:*:*:*:*:*:* Remediation No remediation found in references. novell suse linux enterprise desktop 12
CPE cpe:2.3:o:novell:suse_linux_enterprise_desktop:12:*:*:*:*:*:*:* Remediation No remediation found in references. novell suse linux enterprise server 12
CPE cpe:2.3:o:novell:suse_linux_enterprise_server:12:*:*:*:*:*:*:* Remediation No remediation found in references. novell suse linux enterprise software development kit 12
CPE cpe:2.3:o:novell:suse_linux_enterprise_software_development_kit:12:*:*:*:*:*:*:* Remediation No remediation found in references. canonical ubuntu linux 12.04
14.04
14.10
CPE cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:* Remediation No remediation found in references.
Change History 22 change records found show changes
Date Action Recorded By Jun 17, 2026 CVE Modified [email protected] May 6, 2026 Status Change [email protected] May 9, 2025 CVE Modified CVE Nov 21, 2024 CVE Modified CVE May 14, 2024 CVE Modified [email protected] Feb 13, 2023 CVE Modified [email protected] Feb 2, 2023 CVE Modified [email protected] Apr 22, 2019 CPE Deprecation Remap [email protected] Dec 8, 2016 CVE Modified [email protected] Dec 3, 2016 CVE Modified [email protected] Oct 26, 2016 CVE Modified [email protected] May 12, 2015 CVE Modified [email protected] Apr 2, 2015 CVE Modified [email protected] Mar 28, 2015 CVE Modified [email protected] Mar 12, 2015 CVE Modified [email protected] Mar 6, 2015 CVE Modified [email protected] Mar 3, 2015 CVE Modified [email protected] Feb 28, 2015 CVE Modified [email protected] Feb 27, 2015 Modified Analysis [email protected] Feb 27, 2015 CVE Modified [email protected] Feb 24, 2015 Modified Analysis [email protected] Feb 24, 2015 Initial Analysis [email protected]