Vulnerability in Samba

CVE-2007-0452

smbd in Samba 3.0.6 through 3.0.23d allows remote authenticated users to cause a denial of service (memory and CPU exhaustion) by renaming a file in a way that prevents a request from being removed from the deferred open queue, which triggers an infinite loop.

EPSS: 0.046 (90.7th percentile) — read the EPSS interpretation.

Affected products

  • Samba — versions 3.0.6, 3.0.7, 3.0.8
  • N/a — versions n/a

References