What’s Vulnerable › Vulnerabilities

CVE-2014-0178

• Severity: low (CVSS 3.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-05-28 · updated 2026-06-17
• Weakness: CWE-665

Description

Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration is enabled, does not properly initialize the SRV_SNAPSHOT_ARRAY response field, which allows remote authenticated users to obtain potentially sensitive information from process memory via a (1) FSCTL_GET_SHADOW_COPY_DATA or (2) FSCTL_SRV_ENUMERATE_SNAPSHOTS request.

Affected products

• Samba: from 3.6.6 before 3.6.25; from 4.0.0 before 4.0.18; from 4.1.0 before 4.1.8; 4.1.0, 4.1.1, 4.1.2, 4.1.3, 4.1.4, 4.1.5 (+20) — fixed in 3.6.25, 4.0.18, 4.1.8

How to fix

Upgrade to a fixed version: Samba 3.6.25, 4.0.18, 4.1.8. Check the vendor advisory for mitigations.

References

• http://advisories.mageia.org/MGASA-2014-0279.html
• http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html
• http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.html
• http://secunia.com/advisories/59378
• http://secunia.com/advisories/59407
• http://secunia.com/advisories/59579
• http://security.gentoo.org/glsa/glsa-201502-15.xml
• http://www.mandriva.com/security/advisories?name=MDVSA-2014:136
• http://www.mandriva.com/security/advisories?name=MDVSA-2015:082
• http://www.samba.org/samba/security/CVE-2014-0178
• http://www.securityfocus.com/archive/1/532757/100/0/threaded
• http://www.securityfocus.com/bid/67686

Get alerted when CVE-2014-0178 or the next vulnerability affects your stack