NVD

Id
22734  
Name
CVE-2015-0240  
Description
The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-02-23  
Modified Date
2016-12-07  
Seq
2015-0240  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
120362 22734 CVE-2015-0240 http://advisories.mageia.org/MGASA-2015-0084.html  View
120363 22734 CVE-2015-0240 SUSE-SU-2015:0353  View
120364 22734 CVE-2015-0240 SUSE-SU-2015:0371  View
120365 22734 CVE-2015-0240 openSUSE-SU-2015:0375  View
120366 22734 CVE-2015-0240 SUSE-SU-2015:0386  View
120367 22734 CVE-2015-0240 openSUSE-SU-2016:1064  View
120368 22734 CVE-2015-0240 openSUSE-SU-2016:1106  View
120369 22734 CVE-2015-0240 openSUSE-SU-2016:1107  View
120370 22734 CVE-2015-0240 SSRT101979  View
120371 22734 CVE-2015-0240 SSRT101952  View
120372 22734 CVE-2015-0240 RHSA-2015:0249  View
120373 22734 CVE-2015-0240 RHSA-2015:0250  View
120374 22734 CVE-2015-0240 RHSA-2015:0251  View
120375 22734 CVE-2015-0240 RHSA-2015:0252  View
120376 22734 CVE-2015-0240 RHSA-2015:0253  View
120377 22734 CVE-2015-0240 RHSA-2015:0254  View
120378 22734 CVE-2015-0240 RHSA-2015:0255  View
120379 22734 CVE-2015-0240 RHSA-2015:0256  View
120380 22734 CVE-2015-0240 RHSA-2015:0257  View
120381 22734 CVE-2015-0240 GLSA-201502-15  View
120382 22734 CVE-2015-0240 DSA-3171  View
120383 22734 CVE-2015-0240 MDVSA-2015:081  View
120384 22734 CVE-2015-0240 MDVSA-2015:082  View
120385 22734 CVE-2015-0240 http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html  View
120386 22734 CVE-2015-0240 72711  View
120387 22734 CVE-2015-0240 1031783  View
120388 22734 CVE-2015-0240 SSA:2015-064-01  View
120389 22734 CVE-2015-0240 USN-2508-1  View
120390 22734 CVE-2015-0240 https://access.redhat.com/articles/1346913  View
120391 22734 CVE-2015-0240 https://bugzilla.redhat.com/show_bug.cgi?id=1191325  View
120392 22734 CVE-2015-0240 https://securityblog.redhat.com/2015/02/23/samba-vulnerability-cve-2015-0240/  View
120393 22734 CVE-2015-0240 https://support.lenovo.com/product_security/samba_remote_vuln  View
120394 22734 CVE-2015-0240 https://support.lenovo.com/us/en/product_security/samba_remote_vuln  View
120395 22734 CVE-2015-0240 36741  View
120396 22734 CVE-2015-0240 https://www.samba.org/samba/security/CVE-2015-0240  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6276 JVNDB-2015-001596 Samba の smbd の Netlogon サーバの実装における任意のコードを実行される脆弱性 Samba の smbd の Netlogon サーバの実装は、初期化されていないスタックポインタ上で解放の操作を実行するため、任意のコードを実行される脆弱性が存在します。 CVE-2015-0240 77451 CVE-2015-0240 22734 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001596.html 2015-02-11 2015-04-08 View