CVE-2013-4124: Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6....

Security readout for executives and security teams

This is an old Samba file-sharing server flaw that can let a remote attacker crash or exhaust memory on affected systems by sending a malformed packet. The business impact is service disruption, not confirmed data theft or code execution. Priority is highest where legacy Samba is still reachable from untrusted networks. Exposure is likely limited to legacy Samba deployments still running the affected versions, especially systems offering SMB file-sharing to broad internal networks or the internet. Treat as a targeted legacy-risk cleanup. Remediate promptly where affected Samba remains exposed, but escalate only if critical file-sharing services are reachable by untrusted users. Mitigation focus: Upgrade Samba to 3.5.22, 3.6.17, 4.0.8, or later supported releases.; Apply distribution vendor security updates from affected operating system channels.; Restrict SMB access to trusted networks and required clients only..

Prepared

Jun 14, 2026, 21:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.