CVE-2013-4124: Canonical Ubuntu Linux

Medium severity, CVSS 5.0. EPSS: 69% chance of exploitation in the next 30 days.

Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.

Affected products

• Canonical Ubuntu Linux: version 10.04 only; version 12.04 only; version 12.10 only; version 13.04 only
• Fedoraproject Fedora: version 18 only; version 19 only
• Opensuse Opensuse: version 12.2 only; version 12.3 only
• Red Hat Enterprise Linux: version 5 only
• Samba Samba: version 3.0.0 only; version 3.0.1 only; version 3.0.2 only; version 3.0.2a only; version 3.0.3 only; version 3.0.4 only; …

Published 2013-08-06. Last modified 2026-06-16.