Mend Vulnerability Database

Vulnerability DatabaseCVE-2014-3560

CVE-2014-3560

Published:August 06, 2014

Updated:May 16, 2026

NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in string_wrappers.h.

Related Resources (17)

https://access.redhat.com/security/cve/CVE-2014-3560

http://www.samba.org/samba/security/CVE-2014-3560

https://security-tracker.debian.org/tracker/CVE-2014-3560

http://www.securityfocus.com/bid/69021

https://people.canonical.com/~ubuntu-security/cve/CVE-2014-3560

http://secunia.com/advisories/59583

http://www.securitytracker.com/id/1030663

https://git.samba.org/?p=samba.git%3Ba=commitdiff%3Bh=e6a848630da3ba958c442438ea131c99fa088605

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html

http://secunia.com/advisories/59610

https://exchange.xforce.ibmcloud.com/vulnerabilities/95081

http://lists.opensuse.org/opensuse-updates/2014-08/msg00027.html

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136280.html

https://bugzilla.redhat.com/show_bug.cgi?id=1126010

https://git.samba.org/?p=samba.git%3Ba=commitdiff%3Bh=fb1d325d96dfe9bc2e9c4ec46ad4c55e8f18f4a2

http://www.ubuntu.com/usn/USN-2305-1

http://secunia.com/advisories/59976

Do you need more information?

CVSS v3

Base Score:

7.5

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

CVSS v2

Base Score:

7.9

Access Vector

ADJACENT NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

Weakness Type (CWE)

Improper Control of Generation of Code ('Code Injection')

EPSS

Base Score:

71.95