VYPR
Unrated severityNVD Advisory· Published Feb 6, 2007· Updated Apr 23, 2026

CVE-2007-0452

CVE-2007-0452

Description

smbd in Samba 3.0.6 through 3.0.23d allows remote authenticated users to cause a denial of service (memory and CPU exhaustion) by renaming a file in a way that prevents a request from being removed from the deferred open queue, which triggers an infinite loop.

Affected products

24
  • cpe:2.3:a:samba:samba:3.0.10:*:*:*:*:*:*:*+ 21 more
    • cpe:2.3:a:samba:samba:3.0.10:*:*:*:*:*:*:*
    • cpe:2.3:a:samba:samba:3.0.11:*:*:*:*:*:*:*
    • cpe:2.3:a:samba:samba:3.0.12:*:*:*:*:*:*:*
    • cpe:2.3:a:samba:samba:3.0.13:*:*:*:*:*:*:*
    • cpe:2.3:a:samba:samba:3.0.14a:*:*:*:*:*:*:*
    • cpe:2.3:a:samba:samba:3.0.20:*:*:*:*:*:*:*
    • cpe:2.3:a:samba:samba:3.0.20a:*:*:*:*:*:*:*
    • cpe:2.3:a:samba:samba:3.0.20b:*:*:*:*:*:*:*
    • cpe:2.3:a:samba:samba:3.0.21:*:*:*:*:*:*:*
    • cpe:2.3:a:samba:samba:3.0.21a:*:*:*:*:*:*:*
    • cpe:2.3:a:samba:samba:3.0.21b:*:*:*:*:*:*:*
    • cpe:2.3:a:samba:samba:3.0.21c:*:*:*:*:*:*:*
    • cpe:2.3:a:samba:samba:3.0.22:*:*:*:*:*:*:*
    • cpe:2.3:a:samba:samba:3.0.23:*:*:*:*:*:*:*
    • cpe:2.3:a:samba:samba:3.0.23a:*:*:*:*:*:*:*
    • cpe:2.3:a:samba:samba:3.0.23b:*:*:*:*:*:*:*
    • cpe:2.3:a:samba:samba:3.0.23c:*:*:*:*:*:*:*
    • cpe:2.3:a:samba:samba:3.0.23d:*:*:*:*:*:*:*
    • cpe:2.3:a:samba:samba:3.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:samba:samba:3.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:samba:samba:3.0.8:*:*:*:*:*:*:*
    • cpe:2.3:a:samba:samba:3.0.9:*:*:*:*:*:*:*
  • osv-coords2 versions
    < 6.13-1.3+ 1 more
    • (no CPE)range: < 6.13-1.3
    • (no CPE)range: < 4.14.6+git.182.2205d5224e3-1.1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

39

News mentions

0

No linked articles in our index yet.