Vulnerability in Novell SUSE Linux Enterprise Desktop
CVE-2015-0240
The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.
EPSS: 0.876 (99.7th percentile) — read the EPSS interpretation.
Affected products
- Novell Suse_linux_enterprise_desktop — versions 12
- Novell Suse_linux_enterprise_server — versions 12
- Novell Suse_linux_enterprise_software_development_kit — versions 12
- Samba — versions 3.5.0, 3.5.1, 3.5.2
- Canonical Ubuntu_linux — versions 12.04, 14.04, 14.10
- Redhat Enterprise_linux — versions 5, 6.0, 7.0
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secalert@redhat.com (x_refsource_HP, vendor-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_CONFIRM, Exploit)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (vendor-advisory, x_refsource_SLACKWARE)
- secalert@redhat.com (exploit, x_refsource_EXPLOIT-DB)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory)
Frequently asked questions
- What is CVE-2015-0240?
- CVE-2015-0240 is a vulnerability in Novell SUSE Linux Enterprise Desktop, classified under CWE-17. Published 2015-02-24.
- Is CVE-2015-0240 known to be exploited?
- 9 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.