Medium severity5.9NVD Advisory· Published Apr 25, 2016· Updated Jun 17, 2026
CVE-2015-5370
CVE-2015-5370
Description
Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remote attackers to perform protocol-downgrade attacks, cause a denial of service (application crash or CPU consumption), or possibly execute arbitrary code on a client system via unspecified vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
131cpe:2.3:a:samba:samba:3.6.0:*:*:*:*:*:*:*+ 98 more
- cpe:2.3:a:samba:samba:3.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.6.10:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.6.11:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.6.12:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.6.13:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.6.14:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.6.15:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.6.16:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.6.17:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.6.18:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.6.19:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.6.20:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.6.21:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.6.22:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.6.23:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.6.24:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.6.25:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.6.4:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.6.5:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.6.6:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.6.7:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.6.8:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.6.9:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.10:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.11:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.12:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.13:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.14:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.15:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.16:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.17:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.18:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.19:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.20:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.21:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.22:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.23:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.24:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.25:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.26:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.0.9:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.1.10:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.1.11:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.1.12:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.1.13:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.1.14:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.1.15:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.1.16:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.1.17:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.1.18:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.1.19:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.1.20:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.1.21:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.1.22:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.1.23:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.1.7:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.1.8:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.1.9:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.2.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.2.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.2.0:rc3:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.2.0:rc4:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.2.8:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.2.9:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.3.6:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:4.4.0:*:*:*:*:*:*:*
- (no CPE)range: 3.x, <4.2.11, <4.3.8, <4.4.2
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*+ 2 more
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
- osv-coords29 versionspkg:rpm/opensuse/samba&distro=openSUSE%20Tumbleweedpkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Desktop%2012pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP1pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSSpkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSSpkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATApkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%2012pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP3pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1pkg:rpm/suse/samba&distro=SUSE%20Manager%202.1pkg:rpm/suse/samba&distro=SUSE%20Manager%20Proxy%202.1pkg:rpm/suse/samba&distro=SUSE%20OpenStack%20Cloud%205pkg:rpm/suse/samba-doc&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSSpkg:rpm/suse/samba-doc&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSSpkg:rpm/suse/samba-doc&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATApkg:rpm/suse/samba-doc&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4pkg:rpm/suse/samba-doc&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4pkg:rpm/suse/samba-doc&distro=SUSE%20Manager%202.1pkg:rpm/suse/samba-doc&distro=SUSE%20Manager%20Proxy%202.1pkg:rpm/suse/samba-doc&distro=SUSE%20OpenStack%20Cloud%205
< 4.5.0-1.1+ 28 more
- (no CPE)range: < 4.5.0-1.1
- (no CPE)range: < 4.2.4-18.17.1
- (no CPE)range: < 4.2.4-16.1
- (no CPE)range: < 4.2.4-18.17.1
- (no CPE)range: < 4.2.4-16.1
- (no CPE)range: < 3.6.3-52.1
- (no CPE)range: < 3.6.3-76.1
- (no CPE)range: < 3.6.3-76.1
- (no CPE)range: < 3.6.3-76.1
- (no CPE)range: < 4.2.4-18.17.1
- (no CPE)range: < 4.2.4-16.1
- (no CPE)range: < 3.6.3-76.1
- (no CPE)range: < 4.2.4-18.17.1
- (no CPE)range: < 4.2.4-16.1
- (no CPE)range: < 3.6.3-76.1
- (no CPE)range: < 3.6.3-76.1
- (no CPE)range: < 4.2.4-18.17.1
- (no CPE)range: < 4.2.4-16.1
- (no CPE)range: < 3.6.3-76.1
- (no CPE)range: < 3.6.3-76.1
- (no CPE)range: < 3.6.3-76.1
- (no CPE)range: < 3.6.3-52.1
- (no CPE)range: < 3.6.3-76.2
- (no CPE)range: < 3.6.3-76.2
- (no CPE)range: < 3.6.3-76.2
- (no CPE)range: < 3.6.3-76.2
- (no CPE)range: < 3.6.3-76.2
- (no CPE)range: < 3.6.3-76.2
- (no CPE)range: < 3.6.3-76.2
Patches
Vulnerability mechanics
References
34- www.samba.org/samba/security/CVE-2015-5370.htmlnvdPatchVendor Advisory
- badlock.orgnvd
- lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.htmlnvd
- rhn.redhat.com/errata/RHSA-2016-0611.htmlnvd
- rhn.redhat.com/errata/RHSA-2016-0612.htmlnvd
- rhn.redhat.com/errata/RHSA-2016-0613.htmlnvd
- rhn.redhat.com/errata/RHSA-2016-0614.htmlnvd
- rhn.redhat.com/errata/RHSA-2016-0618.htmlnvd
- rhn.redhat.com/errata/RHSA-2016-0619.htmlnvd
- rhn.redhat.com/errata/RHSA-2016-0620.htmlnvd
- rhn.redhat.com/errata/RHSA-2016-0624.htmlnvd
- www.debian.org/security/2016/dsa-3548nvd
- www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.htmlnvd
- www.securitytracker.com/id/1035533nvd
- www.slackware.com/security/viewer.phpnvd
- www.ubuntu.com/usn/USN-2950-1nvd
- www.ubuntu.com/usn/USN-2950-2nvd
- www.ubuntu.com/usn/USN-2950-3nvd
- www.ubuntu.com/usn/USN-2950-4nvd
- www.ubuntu.com/usn/USN-2950-5nvd
- bto.bluecoat.com/security-advisory/sa122nvd
- h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplaynvd
- www.samba.org/samba/history/samba-4.2.10.htmlnvd
- www.samba.org/samba/latest_news.htmlnvd
News mentions
0No linked articles in our index yet.