What’s Vulnerable › Vulnerabilities

CVE-2015-0240

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 87.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2015-02-24 · updated 2026-06-17
• Weakness: CWE-17

Description

The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.

Affected products

• Canonical Ubuntu Linux: 12.04, 14.04, 14.10
• Novell Suse Linux Enterprise Desktop: 12
• Novell Suse Linux Enterprise Server: 12
• Novell Suse Linux Enterprise Software Development Kit: 12
• Red Hat Enterprise Linux: 5, 6.0, 7.0
• Samba: 3.5.0, 3.5.1, 3.5.2, 3.5.3, 3.5.4, 3.5.5 (+81)

References

• http://advisories.mageia.org/MGASA-2015-0084.html
• http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00028.html
• http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00030.html
• http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00031.html
• http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00035.html
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html
• http://marc.info/?l=bugtraq&m=142722696102151&w=2
• http://marc.info/?l=bugtraq&m=143039217203031&w=2
• http://rhn.redhat.com/errata/RHSA-2015-0249.html
• http://rhn.redhat.com/errata/RHSA-2015-0250.html

Get alerted when CVE-2015-0240 or the next vulnerability affects your stack