Ubuntu 13.04: 1966-1 Critical Samba Denial Of Service Alert

ubuntu

September 24, 2013

Samba could be made to hang if it received specially crafted network traffic.

Summary

Samba could be made to hang if it received specially crafted network

traffic.

Software Description:

- samba: SMB/CIFS file, print, and login server for Unix

Details:

Jeremy Allison discovered that Samba incorrectly handled certain extended

attribute lists. A remote attacker could use this issue to cause Samba

to hang, resulting in a denial of service.

Topics Covered

security advisory denial of service critical samba ubuntu network exploit

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.04:
  samba                           2:3.6.9-1ubuntu1.1

Ubuntu 12.10:
  samba                           2:3.6.6-3ubuntu5.2

Ubuntu 12.04 LTS:
  samba                           2:3.6.3-2ubuntu2.8

Ubuntu 10.04 LTS:
  samba                           2:3.4.7~dfsg-1ubuntu3.12

In general, a standard system update will make all the necessary changes.