CVE-2013-4408

samba: Heap-based buffer overflow due to incorrect DCE-RPC fragment length field check

Loading…

Severity

Important

Red Hat Product Security

6.8

CVSS 2.0

Review impact separately from score.

Published · December 9, 2013

Updated · June 27, 2026

Description

Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.

Statement

This issue does not affect the version of samba as shipped with Red Hat Enterprise Linux 5.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 2.0 · 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-130 · Improper Handling of Length Parameter Inconsistency