CVE-2009-2906
Published Oct 7, 2009
Last updated 2 years ago
Overview
- Description
- smbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8, and 3.4 before 3.4.2 allows remote authenticated users to cause a denial of service (infinite loop) via an unanticipated oplock break notification reply packet.
- Source
- secalert@redhat.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4
- Impact score
- 2.9
- Exploitability score
- 8
- Vector string
- AV:N/AC:L/Au:S/C:N/I:N/A:P
Weaknesses
- nvd@nist.gov
- CWE-835
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BC40E8A-9CDA-4574-AAF2-792EB0B55B79",
"versionEndExcluding": "3.0.37"
},
{
"criteria": "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "836C7AC0-CAE0-459A-A8A5-AA60DFD693CE",
"versionEndExcluding": "3.2.15",
"versionStartIncluding": "3.2.0"
},
{
"criteria": "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D9C888EF-28BF-44BF-9E47-564B0C3222F4",
"versionEndExcluding": "3.3.8",
"versionStartIncluding": "3.3.0"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C78E2B3A-10C4-4226-A224-8D4AC792B2F5"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EFFCF854-E316-442F-A62F-ACC1CA4E9892"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7EBFE35C-E243-43D1-883D-4398D71763CC"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4747CC68-FAF4-482F-929A-9DA6C24CB663"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
}
],
"operator": "OR"
}
]
}
]