smbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8, and 3.4 before…
Priority LOW 26CWE-835Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · Partial
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-835.
Summary
smbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8, and 3.4 before 3.4.2 allows remote authenticated users to cause a denial of service (infinite loop) via an unanticipated oplock break notification reply packet.
Why it matters now
EPSS 0.04207 91st percentileScored 2026-11-07
Fix Fixed Red Hat: 3 advisories
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 7
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* | before 3.0.37; 3.2.0 to before 3.2.15; 3.3.0 to before 3.3.8 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.4.0:*:*:*:*:*:*:* | 3.4.0 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.4.1:*:*:*:*:*:*:* | 3.4.1 | Vulnerable | Samba |
| cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:* | 6.06 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:* | 8.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:* | 8.10 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:* | 9.04 | Vulnerable | Canonical |
- cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* Versions before 3.0.37; 3.2.0 to before 3.2.15; 3.3.0 to before 3.3.8 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.4.0:*:*:*:*:*:*:* Versions 3.4.0 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.4.1:*:*:*:*:*:*:* Versions 3.4.1 Vulnerable ·Samba
- cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:* Versions 6.06 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:* Versions 8.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:* Versions 8.10 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:* Versions 9.04 Vulnerable ·Canonical
Remediation
Red Hat 3 advisories
- RHSA-2009:1585 Released 2009-11-16 · Red Hat rating Moderatesamba3x security and bug fix update
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) libsmbclient-3.0.34-46.el5, libsmbclient-devel-3.0.34-46.el5, libtalloc-1.2.0-46.el5 +12
- Red Hat Enterprise Linux Server Supplementary (v. 5) libsmbclient-3.0.34-46.el5, libsmbclient-devel-3.0.34-46.el5, libtalloc-1.2.0-46.el5 +12
- RHSA-2009:1529 Released 2009-10-27 · Red Hat rating Moderatesamba security update
- Red Hat Enterprise Linux (v. 5 server) samba-3.0.33-3.15.el5_4, samba-3.0.33-3.15.el5_4.i386, samba-3.0.33-3.15.el5_4.ia64 +13
- Red Hat Enterprise Linux AS version 4 samba-3.0.33-0.18.el4_8, samba-3.0.33-0.18.el4_8.i386, samba-3.0.33-0.18.el4_8.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) samba-3.0.33-3.15.el5_4, samba-3.0.33-3.15.el5_4.i386, samba-client-3.0.33-3.15.el5_4 +5
- Red Hat Enterprise Linux Desktop version 4 samba-3.0.33-0.18.el4_8, samba-3.0.33-0.18.el4_8.i386, samba-client-3.0.33-0.18.el4_8 +5
- Red Hat Enterprise Linux ES version 4 samba-3.0.33-0.18.el4_8, samba-3.0.33-0.18.el4_8.i386, samba-3.0.33-0.18.el4_8.ia64 +9
- Red Hat Enterprise Linux WS version 4 samba-3.0.33-0.18.el4_8, samba-3.0.33-0.18.el4_8.i386, samba-3.0.33-0.18.el4_8.ia64 +9
- RHSA-2009:1528 Released 2009-10-27 · Red Hat rating Moderatesamba security and bug fix update
- Red Hat Desktop version 3 samba-3.0.9-1.3E.16, samba-3.0.9-1.3E.16.i386, samba-client-3.0.9-1.3E.16 +5
- Red Hat Enterprise Linux AS version 3 samba-3.0.9-1.3E.16, samba-3.0.9-1.3E.16.i386, samba-3.0.9-1.3E.16.ia64 +13
- Red Hat Enterprise Linux ES version 3 samba-3.0.9-1.3E.16, samba-3.0.9-1.3E.16.i386, samba-3.0.9-1.3E.16.ia64 +9
- Red Hat Enterprise Linux WS version 3 samba-3.0.9-1.3E.16, samba-3.0.9-1.3E.16.i386, samba-3.0.9-1.3E.16.ia64 +9
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Desktop version 3 | Fixed | RHSA-2009:1528 |
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2009:1529 |
| Red Hat Enterprise Linux AS version 3 | Fixed | RHSA-2009:1528 |
| Red Hat Enterprise Linux AS version 4 | Fixed | RHSA-2009:1529 |
| Red Hat Enterprise Linux Desktop (v. 5 client) | Fixed | RHSA-2009:1529 |
| Red Hat Enterprise Linux Desktop Supplementary (v. 5) | Fixed | RHSA-2009:1585 |
| Red Hat Enterprise Linux Desktop version 4 | Fixed | RHSA-2009:1529 |
| Red Hat Enterprise Linux ES version 3 | Fixed | RHSA-2009:1528 |
| Red Hat Enterprise Linux ES version 4 | Fixed | RHSA-2009:1529 |
| Red Hat Enterprise Linux Server Supplementary (v. 5) | Fixed | RHSA-2009:1585 |
| Red Hat Enterprise Linux WS version 3 | Fixed | RHSA-2009:1528 |
| Red Hat Enterprise Linux WS version 4 | Fixed | RHSA-2009:1529 |
Timeline
- 2026-10-02 Threatist record created from CVE-2009-2906
- 2026-10-03 Alias added: GHSA-rqxx-j33q-88vv
References
Advisory 12
- http://samba.org/samba/security/CVE-2009-2906.html
- http://news.samba.org/releases/3.4.2/
- oval:org.mitre.oval:def:9944
- APPLE-SA-2010-03-29-1
- http://news.samba.org/releases/3.2.15/
- 1021111
- http://support.apple.com/kb/HT4077
- http://news.samba.org/releases/3.0.37/
- oval:org.mitre.oval:def:7090
- http://news.samba.org/releases/3.3.8/
- http://wiki.rpath.com/Advisories:rPSA-2009-0145
- SUSE-SR:2009:017
Other 1
Sources
- CVE-2009-2906 · CVE Program
- CVE-2009-2906 · NVD
- FIRST EPSS
- GHSA-rqxx-j33q-88vv · GitHub Advisory Database · CC BY 4.0
- CVE-2009-2906 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences