CVE Catalog

CVE-2017-14746

Critical
Published: Translated: NVD NIST

Summary

Use-after-free vulnerability in Samba 4.x before version 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request.

Risk Assessment

An attacker can exploit this vulnerability to remotely execute code, potentially gaining control over the system.

Recommendation

It is recommended to upgrade Samba to version 4.7.3 or later to mitigate this vulnerability.

Original NVD description (English source)

Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS