CVE-2011-2724

The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0547.

Published: 2011-09-06 Last update: 2026-06-16 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2011-2724 is rated Low Risk (16/100): CVSS Low severity, with low exploitation likelihood (EPSS 0.43%). Low composite risk—no urgent action required; patch on your normal maintenance cycle and revisit priority if CVSS or EPSS increases.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2011-2724

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 1.17% 0.43% -0.73%
2 2026-05-24 1.12% 1.17% +0.05%
3 2026-02-14 — 1.12% —

Full EPSS history (12 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2011-2724

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
1.2 2.0 LOW
AV:L/AC:H/Au:N/C:N/I:N/A:P Click to expand
Access vector (AV:L)
Requires local access to the target system.
Access complexity (AC:H)
Exploitation requires uncommon or highly specific conditions.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:N)
No confidentiality impact.
Integrity impact (I:N)
No integrity impact.
Availability impact (A:P)
Partial availability impact.
 1.9 2.9 [email protected]

Weakness enumeration for CVE-2011-2724

OS Trackers for CVE-2011-2724

vendor priority summary link
debian low CVE-2011-2724 low priority: Debian including 2 source packages (cifs-utils, samba), 10 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 10. https://security-tracker.debian.org/tracker/CVE-2011-2724
gentoo high CVE-2011-2724: 1 GLSA(s) (201206-22), 1 atom(s) (net-fs/samba); latest impact high. https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2011-2724
redhat low — https://access.redhat.com/security/cve/CVE-2011-2724
suse low CVE-2011-2724 severity low: SUSE including 97 source package names (ctdb, libdcerpc-atsvc0, …), 696 product×package rows across 36 product lines (SUSE Enterprise Storage 5, SUSE Enterprise Storage 6, … (36 product lines)): Known Not Affected 696. https://www.suse.com/security/cve/CVE-2011-2724/
ubuntu medium CVE-2011-2724 medium priority: Ubuntu including 2 source packages (cifs-utils, samba), 14 status rows across 7 suites (dapper, hardy, karmic, lucid, maverick, natty, upstream): DNE 4, not-affected 3, released 3, ignored 2, needs-triage 2. https://ubuntu.com/security/CVE-2011-2724

Affected software / configurations for CVE-2011-2724

Vendor Product Version Raw CPE
samba samba <= 3.5.10 cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
samba samba 1.9.17 cpe:2.3:a:samba:samba:1.9.17:*:*:*:*:*:*:*
samba samba 1.9.17 cpe:2.3:a:samba:samba:1.9.17:p1:*:*:*:*:*:*
samba samba 1.9.17 cpe:2.3:a:samba:samba:1.9.17:p2:*:*:*:*:*:*
samba samba 1.9.17 cpe:2.3:a:samba:samba:1.9.17:p3:*:*:*:*:*:*
samba samba 1.9.17 cpe:2.3:a:samba:samba:1.9.17:p4:*:*:*:*:*:*
samba samba 1.9.17 cpe:2.3:a:samba:samba:1.9.17:p5:*:*:*:*:*:*
samba samba 1.9.18 cpe:2.3:a:samba:samba:1.9.18:*:*:*:*:*:*:*
samba samba 1.9.18 cpe:2.3:a:samba:samba:1.9.18:p1:*:*:*:*:*:*
samba samba 1.9.18 cpe:2.3:a:samba:samba:1.9.18:p10:*:*:*:*:*:*
samba samba 1.9.18 cpe:2.3:a:samba:samba:1.9.18:p2:*:*:*:*:*:*
samba samba 1.9.18 cpe:2.3:a:samba:samba:1.9.18:p3:*:*:*:*:*:*
samba samba 1.9.18 cpe:2.3:a:samba:samba:1.9.18:p4:*:*:*:*:*:*
samba samba 1.9.18 cpe:2.3:a:samba:samba:1.9.18:p5:*:*:*:*:*:*
samba samba 1.9.18 cpe:2.3:a:samba:samba:1.9.18:p6:*:*:*:*:*:*
samba samba 1.9.18 cpe:2.3:a:samba:samba:1.9.18:p7:*:*:*:*:*:*
samba samba 1.9.18 cpe:2.3:a:samba:samba:1.9.18:p8:*:*:*:*:*:*
samba samba 2.0 cpe:2.3:a:samba:samba:2.0:*:*:*:*:*:*:*
samba samba 2.0.0 cpe:2.3:a:samba:samba:2.0.0:*:*:*:*:*:*:*
samba samba 2.0.1 cpe:2.3:a:samba:samba:2.0.1:*:*:*:*:*:*:*
samba samba 2.0.2 cpe:2.3:a:samba:samba:2.0.2:*:*:*:*:*:*:*
samba samba 2.0.3 cpe:2.3:a:samba:samba:2.0.3:*:*:*:*:*:*:*
samba samba 2.0.4 cpe:2.3:a:samba:samba:2.0.4:*:*:*:*:*:*:*
samba samba 2.0.5 cpe:2.3:a:samba:samba:2.0.5:*:*:*:*:*:*:*
samba samba 2.0.5 cpe:2.3:a:samba:samba:2.0.5:a:*:*:*:*:*:*
samba samba 2.0.5a cpe:2.3:a:samba:samba:2.0.5a:*:*:*:*:*:*:*
samba samba 2.0.6 cpe:2.3:a:samba:samba:2.0.6:*:*:*:*:*:*:*
samba samba 2.0.7 cpe:2.3:a:samba:samba:2.0.7:*:*:*:*:*:*:*
samba samba 2.0.8 cpe:2.3:a:samba:samba:2.0.8:*:*:*:*:*:*:*
samba samba 2.0.9 cpe:2.3:a:samba:samba:2.0.9:*:*:*:*:*:*:*
samba samba 2.0.10 cpe:2.3:a:samba:samba:2.0.10:*:*:*:*:*:*:*
samba samba 2.2 cpe:2.3:a:samba:samba:2.2:a:*:*:*:*:*:*
samba samba 2.2.0 cpe:2.3:a:samba:samba:2.2.0:*:*:*:*:*:*:*
samba samba 2.2.0 cpe:2.3:a:samba:samba:2.2.0:a:*:*:*:*:*:*
samba samba 2.2.0a cpe:2.3:a:samba:samba:2.2.0a:*:*:*:*:*:*:*
samba samba 2.2.1 cpe:2.3:a:samba:samba:2.2.1:*:*:*:*:*:*:*
samba samba 2.2.1 cpe:2.3:a:samba:samba:2.2.1:a:*:*:*:*:*:*
samba samba 2.2.1a cpe:2.3:a:samba:samba:2.2.1a:*:*:*:*:*:*:*
samba samba 2.2.2 cpe:2.3:a:samba:samba:2.2.2:*:*:*:*:*:*:*
samba samba 2.2.3 cpe:2.3:a:samba:samba:2.2.3:*:*:*:*:*:*:*
samba samba 2.2.3 cpe:2.3:a:samba:samba:2.2.3:a:*:*:*:*:*:*
samba samba 2.2.3a cpe:2.3:a:samba:samba:2.2.3a:*:*:*:*:*:*:*
samba samba 2.2.4 cpe:2.3:a:samba:samba:2.2.4:*:*:*:*:*:*:*
samba samba 2.2.5 cpe:2.3:a:samba:samba:2.2.5:*:*:*:*:*:*:*
samba samba 2.2.6 cpe:2.3:a:samba:samba:2.2.6:*:*:*:*:*:*:*
samba samba 2.2.7 cpe:2.3:a:samba:samba:2.2.7:*:*:*:*:*:*:*
samba samba 2.2.7 cpe:2.3:a:samba:samba:2.2.7:a:*:*:*:*:*:*
samba samba 2.2.7a cpe:2.3:a:samba:samba:2.2.7a:*:*:*:*:*:*:*
samba samba 2.2.8 cpe:2.3:a:samba:samba:2.2.8:*:*:*:*:*:*:*
samba samba 2.2.8 cpe:2.3:a:samba:samba:2.2.8:a:*:*:*:*:*:*
samba samba 2.2.8a cpe:2.3:a:samba:samba:2.2.8a:*:*:*:*:*:*:*
samba samba 2.2.9 cpe:2.3:a:samba:samba:2.2.9:*:*:*:*:*:*:*
samba samba 2.2.10 cpe:2.3:a:samba:samba:2.2.10:*:*:*:*:*:*:*
samba samba 2.2.11 cpe:2.3:a:samba:samba:2.2.11:*:*:*:*:*:*:*
samba samba 2.2.12 cpe:2.3:a:samba:samba:2.2.12:*:*:*:*:*:*:*
samba samba 2.2a cpe:2.3:a:samba:samba:2.2a:*:*:*:*:*:*:*
samba samba 2.18.3 cpe:2.3:a:samba:samba:2.18.3:*:*:*:*:*:*:*
samba samba 3.0.0 cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*
samba samba 3.0.1 cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*
samba samba 3.0.2 cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:*
samba samba 3.0.2 cpe:2.3:a:samba:samba:3.0.2:a:*:*:*:*:*:*
samba samba 3.0.2a cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:*
samba samba 3.0.3 cpe:2.3:a:samba:samba:3.0.3:*:*:*:*:*:*:*
samba samba 3.0.4 cpe:2.3:a:samba:samba:3.0.4:*:*:*:*:*:*:*
samba samba 3.0.4 cpe:2.3:a:samba:samba:3.0.4:rc1:*:*:*:*:*:*
samba samba 3.0.5 cpe:2.3:a:samba:samba:3.0.5:*:*:*:*:*:*:*
samba samba 3.0.6 cpe:2.3:a:samba:samba:3.0.6:*:*:*:*:*:*:*
samba samba 3.0.7 cpe:2.3:a:samba:samba:3.0.7:*:*:*:*:*:*:*
samba samba 3.0.8 cpe:2.3:a:samba:samba:3.0.8:*:*:*:*:*:*:*
samba samba 3.0.9 cpe:2.3:a:samba:samba:3.0.9:*:*:*:*:*:*:*
samba samba 3.0.10 cpe:2.3:a:samba:samba:3.0.10:*:*:*:*:*:*:*
samba samba 3.0.11 cpe:2.3:a:samba:samba:3.0.11:*:*:*:*:*:*:*
samba samba 3.0.12 cpe:2.3:a:samba:samba:3.0.12:*:*:*:*:*:*:*
samba samba 3.0.13 cpe:2.3:a:samba:samba:3.0.13:*:*:*:*:*:*:*
samba samba 3.0.14 cpe:2.3:a:samba:samba:3.0.14:*:*:*:*:*:*:*
samba samba 3.0.14 cpe:2.3:a:samba:samba:3.0.14:a:*:*:*:*:*:*
samba samba 3.0.14a cpe:2.3:a:samba:samba:3.0.14a:*:*:*:*:*:*:*
samba samba 3.0.15 cpe:2.3:a:samba:samba:3.0.15:*:*:*:*:*:*:*
samba samba 3.0.16 cpe:2.3:a:samba:samba:3.0.16:*:*:*:*:*:*:*
samba samba 3.0.17 cpe:2.3:a:samba:samba:3.0.17:*:*:*:*:*:*:*

References for CVE-2011-2724

cvelogic Threat Intelligence