CVE-2013-4408

Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
samba	17.04 zesty	Fixed 2:4.0.13+dfsg-1ubuntu1
	16.10 yakkety	Fixed 2:4.0.13+dfsg-1ubuntu1
	16.04 LTS xenial	Fixed 2:4.0.13+dfsg-1ubuntu1
	15.10 wily	Fixed 2:4.0.13+dfsg-1ubuntu1
	15.04 vivid	Fixed 2:4.0.13+dfsg-1ubuntu1
	14.10 utopic	Fixed 2:4.0.13+dfsg-1ubuntu1
	14.04 LTS trusty	Fixed 2:4.0.13+dfsg-1ubuntu1
	13.10 saucy	Fixed 2:3.6.18-1ubuntu3.1
	13.04 raring	Fixed 2:3.6.9-1ubuntu1.2
	12.10 quantal	Fixed 2:3.6.6-3ubuntu5.3
	12.04 LTS precise	Fixed 2:3.6.3-2ubuntu2.9
	10.04 LTS lucid	Fixed 2:3.4.7~dfsg-1ubuntu3.13
samba4	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not in release
	15.10 wily	Not in release
	15.04 vivid	Not in release
	14.10 utopic	Not in release
	14.04 LTS trusty	Not in release
	13.10 saucy	Ignored end of life
	13.04 raring	Ignored end of life
	12.10 quantal	Ignored end of life
	12.04 LTS precise	Ignored end of life
	10.04 LTS lucid	Ignored end of life

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
samba	Upstream: http://git.samba.org/?p=samba.git;a=commit;h=d485eff4c13ce3c0ab689cde56fe74ad3a0343f5 Upstream: http://git.samba.org/?p=samba.git;a=commit;h=b13b1426f6c309b6ff3b2b5f9e335a62fd256969 Upstream: http://git.samba.org/?p=samba.git;a=commit;h=4487b19619fa0fbfc64c33cd073e67ceae8563c3 Upstream: http://git.samba.org/?p=samba.git;a=commit;h=288337429fe8f3a830e592a53b8b12e1a060d299 Upstream: http://git.samba.org/?p=samba.git;a=commit;h=17667fcf49609a67ce72b6be6f922003db9befdc Upstream: http://git.samba.org/?p=samba.git;a=commit;h=c9d780c7d95dd8a5aaf0a87f48baed3bff046d59 Upstream: http://git.samba.org/?p=samba.git;a=commit;h=fc294c4842cfaea19ddcec2a5be37322ab8b5b45 Upstream: http://git.samba.org/?p=samba.git;a=commit;h=ba9728b86c52ad2da4d80d80edb17c07bd09be2c Upstream: http://git.samba.org/?p=samba.git;a=commit;h=27a751632eb3bfc3f5610314b8254d16d027c0b0 Upstream: http://git.samba.org/?p=samba.git;a=commit;h=9242121dcae43a736a9de5cf73c48a6dc95516f8 Upstream: http://git.samba.org/?p=samba.git;a=commit;h=f6d2b22ec51e025a309548224e8354bce52ea648 Upstream: http://git.samba.org/?p=samba.git;a=commit;h=6434d492578b37c7c97bd3f55d4fc14958bbd080 Upstream: http://git.samba.org/?p=samba.git;a=commit;h=4c2aa03e447b0ac7a74aecdee37205740e43bea5 Upstream: http://git.samba.org/?p=samba.git;a=commit;h=b915d0bd6d88f8fe725716b7654acfcb8303a2d4 Upstream: http://git.samba.org/?p=samba.git;a=commit;h=50e3da9992e4a43b888caa3aeadfbf5293e8281a

Package

Patch details

samba

References

Related Ubuntu Security Notices (USN)

USN-2054-1
Samba vulnerabilities
11 December 2013

Status

Patch details

References

Related Ubuntu Security Notices (USN)

Other references