Loop with Unreachable Exit Condition ('Infinite Loop') Affecting samba3x-domainjoin-gui package, versions <0:3.3.8-0.46.el5


Severity

Recommended
0.0
medium
0
10

Based on Red Hat Enterprise Linux security rating.

Threat Intelligence

EPSS
4.21% (90th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL10-SAMBA3XDOMAINJOINGUI-9874083
  • published28 Apr 2025
  • disclosed1 Oct 2009

Introduced: 1 Oct 2009

CVE-2009-2906  (opens in a new tab)
CWE-835  (opens in a new tab)

How to fix?

Upgrade RHEL:10 samba3x-domainjoin-gui to version 0:3.3.8-0.46.el5 or higher.
This issue was patched in RHSA-2009:1585.

NVD Description

Note: Versions mentioned in the description apply only to the upstream samba3x-domainjoin-gui package and not the samba3x-domainjoin-gui package as distributed by RHEL. See How to fix? for RHEL:10 relevant fixed versions and status.

smbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8, and 3.4 before 3.4.2 allows remote authenticated users to cause a denial of service (infinite loop) via an unanticipated oplock break notification reply packet.

References

CVSS Base Scores

version 3.1