Fo those in need of a samba fix.

http://www.samba.org/samba/security/CVE-2012-0817

The Samba smbd daemon that listens for incoming connections leaks
a small amount of memory on every connection attempt. Although this
is a small leak, it happens on every connection even without successful
authentication. Thus an attacker can simply loop making connection
requests and cause the listening daemon to ever increase in size.

Eventually the server process will grow enough to either cause memory
allocations in other processes to fail, or be killed by the system
as part of its out of memory protection. Either way, denial of service
would be achieved.

http://www.samba.org/samba/history/samba-3.6.3.html

CVE-2012-0817:
   The Samba File Serving daemon (smbd) in Samba versions
   3.6.0 to 3.6.2 is affected by a memory leak that can
   cause a server denial of service.

Ian McWilliam

Attachment: samba-3.6.3.diff
Description: Binary data



Reply via email to