CVE-2015-0240

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 23-02-2015 01:00

Last modified: - 23-02-2015 01:00

Total changes: - 12

Description

CVE-2015-0240 samba: talloc free on uninitialized stack pointer in netlogon server could lead to remote-code execution

Common Vulnerability Scoring System (CVSS)

AV:A/AC:M/Au:N/C:C/I:C/A:C

Low

Attack complexity

Adjacent

Attack vector

High

Availability

High

Confidentiality

High

Integrity

Privileges required

Scope

User interaction

7.9

Base score

Exploitability score

Impact score

Verification logic

AND

product=samba3x-0 AND versionEndExcluding=3.6.23-9.el5_11

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=5

AND

product=samba3x-0 AND versionEndExcluding=3.5.4-0.70.el5_6.4

vendor=Red Hat Enterprise Linux AND product=rhel_mission_critical AND version=5.6

AND

product=samba3x-0 AND versionEndExcluding=3.6.6-0.131.el5_9

vendor=Red Hat Enterprise Linux AND product=rhel_eus AND version=5.9

AND

product=samba4-0 AND versionEndExcluding=4.0.0-66.el6_6.rc4

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=6

AND

product=samba-0 AND versionEndExcluding=3.6.23-14.el6_6

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=6

AND

product=samba-0 AND versionEndExcluding=3.5.10-119.el6_2

vendor=Red Hat Enterprise Linux AND product=rhel_mission_critical AND version=6.2

AND

product=samba-0 AND versionEndExcluding=3.6.9-151.el6_4.3

vendor=Red Hat Enterprise Linux AND product=rhel_eus AND version=6.4

AND

product=samba4-0 AND versionEndExcluding=4.0.0-57.el6_4.rc4

vendor=Red Hat Enterprise Linux AND product=rhel_eus AND version=6.4

AND

product=samba-0 AND versionEndExcluding=3.6.9-171.el6_5

vendor=Red Hat Enterprise Linux AND product=rhel_eus AND version=6.5

AND

product=samba4-0 AND versionEndExcluding=4.0.0-65.el6_5.rc4

vendor=Red Hat Enterprise Linux AND product=rhel_eus AND version=6.5

AND

product=samba-0 AND versionEndExcluding=4.1.1-38.el7_0

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=7

AND

product=samba-0 AND versionEndExcluding=3.6.9-167.10.3.el6rhs

vendor=Red Hat Enterprise Linux AND product=storage AND version=2.1

AND

product=samba-0 AND versionEndExcluding=3.6.509-169.6.el6rhs

vendor=Red Hat Enterprise Linux AND product=storage AND version=3

AND

product=samba3x AND version=

vendor=Red Hat Enterprise Linux AND product=rhel_eus AND version=5.6

Reference

Keywords

CVE-2015-0240

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

REDHAT

CVE-2015-0240

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures