CVE-2013-4124

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 69.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2013-08-06 · updated 2026-06-16
Weakness: CWE-189

Description

Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.

Affected products

Canonical Ubuntu Linux: 10.04, 12.04, 12.10, 13.04
Fedoraproject Fedora: 18, 19
Opensuse: 12.2, 12.3
Red Hat Enterprise Linux: 5
Samba: 3.0.0, 3.0.1, 3.0.2, 3.0.2-a, 3.0.2a, 3.0.3 (+162)

References

http://archives.neohapsis.com/archives/bugtraq/2013-08/0028.html
http://ftp.samba.org/pub/samba/patches/security/samba-4.0.7-CVE-2013-4124.patch
http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113591.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-August/114011.html
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00012.html
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00015.html
http://marc.info/?l=bugtraq&m=141660010015249&w=2
http://osvdb.org/95969
http://rhn.redhat.com/errata/RHSA-2013-1310.html
http://rhn.redhat.com/errata/RHSA-2013-1542.html
http://rhn.redhat.com/errata/RHSA-2013-1543.html

Get alerted when CVE-2013-4124 or the next vulnerability affects your stack