CVE-2014-0244

Severity: low (CVSS 3.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 20.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-06-23 · updated 2026-06-17
Weakness: CWE-20

Description

The sys_recvfrom function in nmbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed UDP packet.

Affected products

Samba: 4.1.0, 4.1.1, 4.1.2, 4.1.3, 4.1.4, 4.1.5 (+46)

References

http://advisories.mageia.org/MGASA-2014-0279.html
http://linux.oracle.com/errata/ELSA-2014-0866.html
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html
http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.html
http://rhn.redhat.com/errata/RHSA-2014-0866.html
http://secunia.com/advisories/59378
http://secunia.com/advisories/59407
http://secunia.com/advisories/59433
http://secunia.com/advisories/59579
http://secunia.com/advisories/59834
http://secunia.com/advisories/59848
http://secunia.com/advisories/59919

Get alerted when CVE-2014-0244 or the next vulnerability affects your stack