CVE-2013-4408

samba: Heap-based buffer overflow due to incorrect DCE-RPC fragment length field check

Published Dec 10, 2013 CVSS 2.0 · 8.3 High EPSS 2.7% KEV · Not listed
Description
Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2812-1 samba security update
EUVD EUVD EUVD-2013-4287 Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.
Ubuntu USN Ubuntu USN USN-2054-1 Samba vulnerabilities
History
Type Values Removed Values Added
Metrics epss

{'score': 0.02873}

epss

{'score': 0.02652}

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 4:45 PM
Reserved
Jun 12, 2013, 12:00 AM
Status
Modified
Published
Dec 10, 2013, 6:14 AM
Modified
Jun 16, 2026, 11:57 PM
Severity
Important
Public date
Dec 9, 2013, 12:00 AM