Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to trigger an out-of-bounds read, and cause a denial of service (process crash), via a \xff\xff security blob length in a Session Setup AndX request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Samba Smbd守护程序 reply_sesssetup_and_X_spnego函数拒绝服务漏洞
Vulnerability Description
Samba是Samba团队开发的一套可使UNIX系列的操作系统与微软Windows操作系统的SMB/CIFS网络协议做连结的自由软件。该软件支持共享打印机、互相传输资料文件等。 Samba的smbd的sesssetup.c的reply_sesssetup_and_X_spnego函数存在漏洞，远程攻击者可利用Session Setup AndX请求的xffxff安全blob长度，触发越界读取，并引发拒绝服务(过程崩溃)。
CVSS Information
N/A
Vulnerability Type
N/A