A out-of-bounds heap read/write vulnerability has been reported in vfs_fruit module of Samba. The vulnerability is due a flaw while parsing EA metadata when opening files in smbd. A remote, unauthenticated attacker can exploit this vulnerability by sending crafted requests to the target service. Successful exploitation could result in the execution of arbitrary code. |