Description
The smdb daemon (smbd/service.c) in Samba 3.0.1 through 3.0.22 allows remote attackers to cause a denial of service (memory consumption) via a large number of share connection requests.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | samba | 3.0.23a-1 | — |
| Debian 13 | samba | 3.0.23a-1 | — |
| Debian 12 | samba | 3.0.23a-1 | — |
| Debian 3.1 | samba | 3.0.14a-3sarge2 | DSA-1110 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | samba +3 | 3.0.10-1.4E.6.2 | RHSA-2006:0591 |
| RHEL 3 | samba +3 | 3.0.9-1.3E.10 | RHSA-2006:0591 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | cifs-utils | 6.13-1.3 | openSUSE-SU-2024:10683-1 |
| openSUSE Tumbleweed | samba | 4.14.6+git.182.2205d5224e3-1.1 | openSUSE-SU-2024:11365-1 |
Advisories 4
- RHSA-2006:0591 Red Hat Security Advisory: samba security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1110 samba - missing input sanitising Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:11365-1 ctdb-4.14.6+git.182.2205d5224e3-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10683-1 cifs-utils-6.13-1.3 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- USN-314-1 vendor-advisory
- 21187 third-party-advisory
- ADV-2006-4750 vdb-entry
- SUSE-SR:2006:017 vendor-advisory
- 1016459 vdb-entry
- 20983 third-party-advisory
- ADV-2006-2745 vdb-entry
- ADV-2006-4502 vdb-entry
- http://securitydot.net/xpl/exploits/vulnerabilities/articles/1175/exploit.html
- http://www.samba.org/samba/security/CAN-2006-3403.html
- http://docs.info.apple.com/article.html?artnum=304829
- 22875 third-party-advisory
- SSA:2006-195 vendor-advisory
- http://www.vmware.com/download/esx/esx-202-200610-patch.html
- 21190 third-party-advisory
- 21086 third-party-advisory
- 20061113 VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2 mailing-list
- http://www.vmware.com/download/esx/esx-213-200610-patch.html
- 21262 third-party-advisory
- 20060711 rPSA-2006-0128-1 samba samba-swat mailing-list
- 20060710 Re: [ANNOUNCEMENT] Samba 3.0.1 - 3.0.22: memory exhaustion DoS against smbd mailing-list
- VU#313836 third-party-advisory
- 23155 third-party-advisory
- 18927 vdb-entry
- samba-smbd-connection-dos(27648) vdb-entry
- 21019 third-party-advisory
- 20980 third-party-advisory
- 20060721 Re: Samba Internal Data Structures DOS Vulnerability Exploit mailing-list
- RHSA-2006:0591 vendor-advisory
- APPLE-SA-2006-11-28 vendor-advisory
- HPSBUX02155 vendor-advisory
- TA06-333A third-party-advisory
- 20061113 VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4 mailing-list
- 21046 third-party-advisory
- 21159 third-party-advisory
- 20060720 Samba Internal Data Structures DOS Vulnerability Exploit mailing-list
- DSA-1110 vendor-advisory
- 20060710 [ANNOUNCEMENT] Samba 3.0.1 - 3.0.22: memory exhaustion DoS against smbd mailing-list
- GLSA-200607-10 vendor-advisory
- oval:org.mitre.oval:def:11355 vdb-entry signature
- 20061113 VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2 mailing-list
- MDKSA-2006:120 vendor-advisory
- 21143 third-party-advisory
- 21018 third-party-advisory