Published: 23/06/2014 Updated: 13/02/2023

CVSS v2 Base Score: 2.7 | Impact Score: 2.9 | Exploitability Score: 5.1

VMScore: 240

Vector: AV:A/AC:L/Au:S/C:N/I:N/A:P

The push_ascii function in smbd in Samba 3.6.x prior to 3.6.24, 4.0.x prior to 4.0.19, and 4.1.x prior to 4.1.9 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) via an attempt to read a Unicode pathname without specifying use of Unicode, leading to a character-set conversion failure that triggers an invalid pointer dereference.

Vulnerable Product	Search on Vulmon	Subscribe to Product
samba samba 3.6.17
samba samba 3.6.10
samba samba 3.6.23
samba samba 3.6.4
samba samba 3.6.9
samba samba 3.6.11
samba samba 3.6.19
samba samba 3.6.16
samba samba 3.6.1
samba samba 3.6.2
samba samba 3.6.12
samba samba 3.6.3
samba samba 3.6.8
samba samba 3.6.7
samba samba 3.6.13
samba samba 3.6.22
samba samba 3.6.6
samba samba 3.6.15
samba samba 3.6.5
samba samba 3.6.20
samba samba 3.6.18
samba samba 3.6.21
samba samba 3.6.14
samba samba 3.6.0
samba samba 4.1.7
samba samba 4.1.8
samba samba 4.1.5
samba samba 4.1.6
samba samba 4.1.4
samba samba 4.1.0
samba samba 4.1.2
samba samba 4.1.3
samba samba 4.1.1
samba samba 4.0.14
samba samba 4.0.2
samba samba 4.0.11
samba samba 4.0.3
samba samba 4.0.16
samba samba 4.0.13
samba samba 4.0.17
samba samba 4.0.6
samba samba 4.0.10
samba samba 4.0.7
samba samba 4.0.1
samba samba 4.0.8
samba samba 4.0.0
samba samba 4.0.5
samba samba 4.0.18
samba samba 4.0.12
samba samba 4.0.4
samba samba 4.0.15
samba samba 4.0.9

Several security issues were fixed in Samba ...

Multiple vulnerabilities were discovered and fixed in Samba, a SMB/CIFS file, print, and login server: CVE-2014-0178 Information leak vulnerability in the VFS code, allowing an authenticated user to retrieve eight bytes of uninitialized memory when shadow copy is enabled CVE-2014-0244 Denial of service (infinite CPU loop) in the n ...

It was discovered that smbd, the Samba file server daemon, did not properly handle certain files that were stored on the disk and used a valid Unicode character in the file name An attacker able to send an authenticated non-Unicode request that attempted to read such a file could cause smbd to crash ...

CWE-119 https://bugzilla.redhat.com/show_bug.cgi?id=1108748 http://www.samba.org/samba/security/CVE-2014-3493 http://secunia.com/advisories/59834 http://secunia.com/advisories/59848 http://advisories.mageia.org/MGASA-2014-0279.html http://linux.oracle.com/errata/ELSA-2014-0866.html http://rhn.redhat.com/errata/RHSA-2014-0866.html http://secunia.com/advisories/59579 http://secunia.com/advisories/59378 http://www.mandriva.com/security/advisories?name=MDVSA-2014:136 http://secunia.com/advisories/59919 http://security.gentoo.org/glsa/glsa-201502-15.xml http://www.mandriva.com/security/advisories?name=MDVSA-2015:082 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993 https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_samba1 http://www.securitytracker.com/id/1030455 http://www.securityfocus.com/bid/68150 http://secunia.com/advisories/61218 http://secunia.com/advisories/59433 http://secunia.com/advisories/59407 http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.html http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html http://www.securityfocus.com/archive/1/532757/100/0/threaded https://usn.ubuntu.com/2257-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2014-3493

CVE-2014-3493

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect