CVE-2014-0178 Information disclosure in n/a

Low 3.5 Published 28 May 2014 Updated 6 Aug 2024

Authenticated remote attackers can read sensitive process memory via shadow copy requests when specific VFS configurations are enabled.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2014-0178?

CVE-2014-0178 is a low-severity vulnerability in Samba Samba, published on 28 May 2014. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration is enabled, does not properly initialize the SRV_SNAPSHOT_ARRAY response field, which allows remote authenticated users to obtain potentially sensitive information from process memory via a (1) FSCTL_GET_SHADOW_COPY_DATA or (2) FSCTL_SRV_ENUMERATE_SNAPSHOTS request.

Weakness: CWE-665

Which versions are affected by CVE-2014-0178?

It affects 1 product.

Products include Samba Samba.

How do I fix CVE-2014-0178?

Upgrade to a fixed version.

Is CVE-2014-0178 being exploited?

There is no known exploitation of CVE-2014-0178 in the wild and no public exploit code.

All Samba Samba vulnerabilities

Sources

Also known as DEBIAN-CVE-2014-0178, ECHO-f763-abba-4afb, GHSA-f9qr-2qwc-jwpc, UBUNTU-CVE-2014-0178.