UpHeron
All vulnerabilities

Servers and applications

CVE-2015-0240

The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the…

Severity
High 10.0
Published
24 Feb 2015
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
88% in the next 30 daysHigher than 99% of CVEs. EPSS by FIRST, 11 Nov 2026
Weakness
CWE-17
Attack
Over the network · No login needed
Attacker can
Read data · Change data · Take it down
CVSS vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Sources
NVD

Description

The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.

From NVD.

Affected software

SoftwareAffected versions
SambaServers and applications · cpe:a:samba:samba
  • Version 4.2.0-rc4
  • Version 4.2.0-rc3
  • Version 4.2.0-rc2
  • Version 4.2.0-rc1
All 87 release lines
  • Version 3.5.0
  • Version 3.5.1
  • Version 3.5.2
  • Version 3.5.3
  • Version 3.5.4
  • Version 3.5.5
  • Version 3.5.6
  • Version 3.5.7
  • Version 3.5.8
  • Version 3.5.9
  • Version 3.5.10
  • Version 3.5.11
  • Version 3.5.12
  • Version 3.5.13
  • Version 3.5.14
  • Version 3.5.15
  • Version 3.5.16
  • Version 3.5.17
  • Version 3.5.18
  • Version 3.5.19
  • Version 3.5.20
  • Version 3.5.21
  • Version 3.5.22
  • Version 3.6.0
  • Version 3.6.1
  • Version 3.6.2
  • Version 3.6.10
  • Version 3.6.11
  • Version 3.6.12
  • Version 3.6.13
  • Version 3.6.14
  • Version 3.6.15
  • Version 3.6.16
  • Version 3.6.17
  • Version 3.6.18
  • Version 3.6.19
  • Version 3.6.20
  • Version 3.6.21
  • Version 3.6.22
  • Version 3.6.23
  • Version 3.6.24
  • Version 4.0.0
  • Version 4.0.1
  • Version 4.0.2
  • Version 4.0.3
  • Version 4.0.4
  • Version 4.0.5
  • Version 4.0.6
  • Version 4.0.7
  • Version 4.0.8
  • Version 4.0.9
  • Version 4.0.10
  • Version 4.0.11
  • Version 4.0.12
  • Version 4.0.13
  • Version 4.0.14
  • Version 4.0.15
  • Version 4.0.16
  • Version 4.0.17
  • Version 4.0.18
  • Version 4.0.19
  • Version 4.0.20
  • Version 4.0.21
  • Version 4.0.22
  • Version 4.0.23
  • Version 4.0.24
  • Version 4.1.0
  • Version 4.1.1
  • Version 4.1.2
  • Version 4.1.3
  • Version 4.1.4
  • Version 4.1.5
  • Version 4.1.6
  • Version 4.1.7
  • Version 4.1.8
  • Version 4.1.9
  • Version 4.1.10
  • Version 4.1.11
  • Version 4.1.12
  • Version 4.1.13
  • Version 4.1.14
  • Version 4.1.15
  • Version 4.1.16
  • Version 4.2.0-rc1
  • Version 4.2.0-rc2
  • Version 4.2.0-rc3
  • Version 4.2.0-rc4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2015-0240
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2015-0240