CVE-2014-0178

Summary

CVE	CVE-2014-0178
State	PUBLISHED
Assigner	redhat
Source Priority	CVE Program / NVD first with legacy fallback
Published	2014-05-28 04:58:32 UTC
Updated	2026-05-06 22:30:45 UTC
Description	Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration is enabled, does not properly initialize the SRV_SNAPSHOT_ARRAY response field, which allows remote authenticated users to obtain potentially sensitive information from process memory via a (1) FSCTL_GET_SHADOW_COPY_DATA or (2) FSCTL_SRV_ENUMERATE_SNAPSHOTS request.

Risk And Classification

Primary CVSS: v2.0 3.5 from [email protected]

AV:N/AC:M/Au:S/C:P/I:N/A:N

Problem Types: CWE-665 | n/a

CVSS v2.0 Breakdown

Access Vector

Network

Access Complexity

Medium

Authentication

Single

Confidentiality

Partial

Integrity

None

Availability

None

AV:N/AC:M/Au:S/C:P/I:N/A:N

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Samba	Samba	All	All	All	All

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Na	N/a	affected n/a	Not specified

References

Reference	Source	Link	Tags
Samba: Multiple vulnerabilities (GLSA 201502-15) — Gentoo security	af854a3a-2127-422b-91ae-364da2661108	security.gentoo.org	Third Party Advisory
Support / Security / Advisories / / MDVSA-2014:136 \| Mandriva	af854a3a-2127-422b-91ae-364da2661108	www.mandriva.com	Third Party Advisory
Security Advisory SA59407 - Debian update for samba - Secunia	af854a3a-2127-422b-91ae-364da2661108	secunia.com	Third Party Advisory
Support / Security / Advisories / / MDVSA-2015:082 \| Mandriva	af854a3a-2127-422b-91ae-364da2661108	www.mandriva.com	Broken Link
Mageia Advisory: MGASA-2014-0279 - Updated samba packages fix multiple vulnerabilities	af854a3a-2127-422b-91ae-364da2661108	advisories.mageia.org	Third Party Advisory
SecurityFocus	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com	Third Party Advisory, VDB Entry
Document Display \| HPE Support Center	af854a3a-2127-422b-91ae-364da2661108	h20566.www2.hpe.com	Third Party Advisory
[SECURITY] Fedora 19 Update: samba-4.0.21-1.fc19	af854a3a-2127-422b-91ae-364da2661108	lists.fedoraproject.org	Mailing List, Third Party Advisory
Samba Discloses Portions of System Memory to Remote Authenticated Users - SecurityTracker	af854a3a-2127-422b-91ae-364da2661108	www.securitytracker.com	Third Party Advisory, VDB Entry
[SECURITY] Fedora 20 Update: samba-4.1.9-3.fc20	af854a3a-2127-422b-91ae-364da2661108	lists.fedoraproject.org	Mailing List, Third Party Advisory
Security Advisory SA59378 - SUSE update for samba - Secunia	af854a3a-2127-422b-91ae-364da2661108	secunia.com	Third Party Advisory
Security Advisory SA59579 - Ubuntu update for samba - Secunia	af854a3a-2127-422b-91ae-364da2661108	secunia.com	Third Party Advisory
Samba - Security Announcement Archive	af854a3a-2127-422b-91ae-364da2661108	www.samba.org	Vendor Advisory
Samba Uninitialized Memory Information Disclosure Vulnerability	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com	Third Party Advisory, VDB Entry
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.