Debian/samba: high 8.8
A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndr_pull_dnsp_name parses
Action: Upgrade samba to 2:4.5.2+dfsg-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2:4.5.2+dfsg-2 | - |
Fixed versions
| 2:4.5.2+dfsg-2 |
Sources
published · modified · JSON