CVE-2008-4314: Samba

High severity, CVSS 8.5. EPSS: 4.3% chance of exploitation in the next 30 days.

smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a denial of service via crafted (1) trans, (2) trans2, and (3) nttrans requests, related to a "cut&paste error" that causes an improper bounds check to be performed.

Affected products

• Samba Samba: version 3.0.29 only; version 3.0.30 only; version 3.0.31 only; version 3.0.32 only; version 3.0.33 only; version 3.2.0 only; …

Published 2008-12-01. Last modified 2026-06-16.