What is CVE-2015-0240?

CVE-2015-0240 is a vulnerability in Novell SUSE Linux Enterprise Desktop, classified under CWE-17. Published 2015-02-24.

Is CVE-2015-0240 known to be exploited?

9 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Novell SUSE Linux Enterprise Desktop

CVE-2015-0240

The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.

Published 2015-02-24 · last modified 2026-06-17.

CVSS v2 metric

CVSS v2 base score 10.0 (High). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.876 (99.8th percentile), scored 2026-10-15.

High probability of exploitation in the next 30 days — patch promptly. 100th percentile — 99.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.880 · newest: 0.876 · change: -0.004

Affected products

Novell SUSE Linux Enterprise Desktop — versions 12
Novell SUSE Linux Enterprise Server — versions 12
Novell SUSE Linux Enterprise Software Development Kit — versions 12
Samba — versions 3.5.0, 3.5.1, 3.5.2
Canonical Ubuntu Linux — versions 12.04, 14.04, 14.10
Red Hat Enterprise Linux — versions 5, 6.0, 7.0

Weakness classification (CWE)

CWE-17

Public proof-of-concept exploits

References

marc.info/ (vendor-advisory)
rhn.redhat.com/errata/RHSA-2015-0257.html (vendor-advisory)
rhn.redhat.com/errata/RHSA-2015-0254.html (vendor-advisory)
securityblog.redhat.com/2015/02/23/samba-vulnerability-cve-2015-0240/ (Exploit)
advisories.mageia.org/MGASA-2015-0084.html
www.slackware.com/security/viewer.php (vendor-advisory)
www.exploit-db.com/exploits/36741/ (exploit)
rhn.redhat.com/errata/RHSA-2015-0250.html (vendor-advisory)
support.lenovo.com/product_security/samba_remote_vuln
www.ubuntu.com/usn/USN-2508-1 (vendor-advisory)

Frequently asked questions

What is CVE-2015-0240?: CVE-2015-0240 is a vulnerability in Novell SUSE Linux Enterprise Desktop, classified under CWE-17. Published 2015-02-24.
Is CVE-2015-0240 known to be exploited?: 9 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.