Description
Samba 3.x before 3.3.15, 3.4.x before 3.4.12, and 3.5.x before 3.5.7 does not perform range checks for file descriptors before use of the FD_SET macro, which allows remote attackers to cause a denial of service (stack memory corruption, and infinite loop or daemon crash) by opening a large number of files, related to (1) Winbind or (2) smbd.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | samba | 2:3.5.7~dfsg-1 | — |
| Debian 13 | samba | 2:3.5.7~dfsg-1 | — |
| Debian 12 | samba | 2:3.5.7~dfsg-1 | — |
| Debian 6.0 | samba | 2:3.5.6~dfsg-3squeeze2 | DSA-2175-1 |
| Debian 5.0 | samba | 2:3.2.5-4lenny14 | DSA-2175-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | samba +10 | 3.5.4-68.el6_0.2 | RHSA-2011:0305 |
| RHEL 5 | samba +5 | 3.0.33-3.29.el5_6.2 | RHSA-2011:0305 |
| RHEL 5 | samba3x +7 | 3.5.4-0.70.el5_6.1 | RHSA-2011:0306 |
| RHEL 4 | samba +3 | 3.0.33-0.30.el4 | RHSA-2011:0305 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | samba | 4.5.0-1.1 | openSUSE-SU-2024:10069-1 |
Advisories 4
- RHSA-2011:0305 Red Hat Security Advisory: samba security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-2175-1 samba - missing input sanisiting Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10069-1 ctdb-4.5.0-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- RHSA-2011:0306 Red Hat Security Advisory: samba3x security update Red Hat Security Advisories (RHSA) · Jan 14, 2026
References
- HPSBUX02657 vendor-advisory
- ADV-2011-0522 vdb-entry
- SSA:2011-059-01 vendor-advisory
- 1025132 vdb-entry
- http://support.apple.com/kb/HT4723
- https://bugzilla.redhat.com/show_bug.cgi?id=678328
- RHSA-2011:0306 vendor-advisory
- DSA-2175 vendor-advisory
- 46597 vdb-entry
- ADV-2011-0541 vdb-entry
- ADV-2011-0517 vdb-entry
- ADV-2011-0702 vdb-entry
- APPLE-SA-2011-06-23-1 vendor-advisory
- http://www.samba.org/samba/history/samba-3.4.12.html
- ADV-2011-0518 vdb-entry
- FEDORA-2011-3118 vendor-advisory
- 43517 third-party-advisory
- 43557 third-party-advisory
- 43556 third-party-advisory
- 43512 third-party-advisory
- USN-1075-1 vendor-advisory
- ADV-2011-0519 vdb-entry
- http://samba.org/samba/security/CVE-2011-0719.html
- ADV-2011-0520 vdb-entry
- FEDORA-2011-3120 vendor-advisory
- 43503 third-party-advisory
- samba-fdset-dos(65724) vdb-entry
- RHSA-2011:0305 vendor-advisory
- http://www.samba.org/samba/history/samba-3.5.7.html
- 43482 third-party-advisory
- 43843 third-party-advisory
- MDVSA-2011:038 vendor-advisory
- http://www.samba.org/samba/history/samba-3.3.15.html