$ cve CVE-2015-0240 JSON

CVE-2015-0240 EXPLOIT

10.0

HIGH · CVSS 2.0 · EPSS 88% (pctl 100)

Patch early

A public exploit exists.

Description

The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.

Scoring

CVSS	10.0 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS	88.01% — more likely to be exploited than 100% of all CVEs
Weakness	CWE-17
On CISA KEV	no
Public exploit	yes
Published	2015-02-24
Last modified	2026-06-17

Affected (6)

Vendor	Product
canonical	ubuntu linux
novell	suse linux enterprise desktop
novell	suse linux enterprise server
novell	suse linux enterprise software development kit
redhat	enterprise linux
samba	samba

Public exploits

Source	Title	Date
exploit-db	Samba < 3.6.2 (x86) - Denial of Service (PoC)	2015-04-13

References

→ the Explorer · watch your stack · NVD