Description
Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service, as discovered by the Samba team and a different vulnerability than CVE-2003-0201.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | samba | 3.0 | — |
| Debian 13 | samba | 3.0 | — |
| Debian 12 | samba | 3.0 | — |
| Debian 3.0 | samba | 2.2.3a-12.3 | DSA-280 |
Advisories 1
- DSA-280 samba - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026
References
- oval:org.mitre.oval:def:564 vdb-entry signature
- DSA-280 vendor-advisory
- MDKSA-2003:044 vendor-advisory
- RHSA-2003:137 vendor-advisory
- 20030407 [OpenPKG-SA-2003.028] OpenPKG Security Advisory (samba) mailing-list
- 20030407 Immunix Secured OS 7+ samba update mailing-list