CVE-2014-3560

CVE-2014-3560

Published · Updated

Follow this CVE+ Monitor samba

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

15Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 56%
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Fixed
12 products (327 components)
Red Hat Enterprise Linux Server (v. 6) · Red Hat Enterprise Linux Server Optional (v. 7) · Red Hat Enterprise Linux Server (v. 7) · Red Hat Enterprise Linux Desktop (v. 6) · Red Hat Enterprise Linux Workstation (v. 6) · and others 7
fix ↗
Not affected
4 products (52 components) — because the vulnerable code is not present in the product
Red Hat Storage 3 · Red Hat Enterprise Linux 6 · Red Hat Enterprise Linux 5 · Red Hat Storage 2
NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in string_wrappers.h.
Affected products
n/a · n/a