CVE-2007-0452: Samba

Medium severity, CVSS 6.8. EPSS: 4.7% chance of exploitation in the next 30 days.

smbd in Samba 3.0.6 through 3.0.23d allows remote authenticated users to cause a denial of service (memory and CPU exhaustion) by renaming a file in a way that prevents a request from being removed from the deferred open queue, which triggers an infinite loop.

Affected products

• Samba Samba: version 3.0.6 only; version 3.0.7 only; version 3.0.8 only; version 3.0.9 only; version 3.0.10 only; version 3.0.11 only; …

Published 2007-02-06. Last modified 2026-06-16.