CVE-2012-0817

Description

Memory leak in smbd in Samba 3.6.x before 3.6.3 allows remote attackers to cause a denial of service (memory and CPU consumption) by making many connection requests.

How to fix CVE-2012-0817

To remediate CVE-2012-0817, upgrade the affected package to a fixed version below.

• Debian/samba—upgrade to 2:3.6.3-1 or later

Is CVE-2012-0817 being exploited?

Low — EPSS is 3.5%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 2:3.6.3-1

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2012-0817