CVE-2011-0719

Samba 3.x before 3.3.15, 3.4.x before 3.4.12, and 3.5.x before 3.5.7 does not perform range checks for file descriptors before use of the FD_SET macro, which…

published March 1, 2011

CVSS
—
EPSS
5%
Percentile
91.6
In the wild
Unconfirmed
What it is

Samba 3.x before 3.3.15, 3.4.x before 3.4.12, and 3.5.x before 3.5.7 does not perform range checks for file descriptors before use of the FD_SET macro, which allows remote attackers to cause a denial of service (stack memory corruption, and infinite loop or daemon crash) by opening a large number of files, related to (1) Winbind or (2) smbd.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04648 · 91.6th percentile
Published
2011-03-01T22:00Z
EPSS history
Timeline
  • 01 MAR 22:00Z
    Samba 3.x before 3.3.15, 3.4.x before 3.4.12, and 3.5.x before 3.5.7 does not perform range checks for file descriptors before use of the FD_SET macro, which…
    cvelistv5