Published: 28/11/2018 Updated: 29/08/2022

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

Samba from version 4.3.0 and prior to 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card authentication, Samba's KDC will call talloc_free() twice on the same memory if the principal in a validly signed certificate does not match the principal in the AS-REQ. This is only possible after authentication with a trusted certificate. talloc is robust against further corruption from a double-free with talloc_free() and directly calls abort(), terminating the KDC process.

Vulnerable Product	Search on Vulmon	Subscribe to Product
samba samba
canonical ubuntu linux 16.04
canonical ubuntu linux 14.04
canonical ubuntu linux 12.04
canonical ubuntu linux 18.04
canonical ubuntu linux 18.10
debian debian linux 9.0

Several security issues were fixed in Samba ...

Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2018-14629 Florian Stuelpner discovered that Samba is vulnerable to infinite query recursion caused by CNAME loops, resulting in denial of servic ...

A double-free was found when Samba's KDC is used as an Active Directory Domain Controller An authenticated attacker could use this flaw to cause a denial of service (application crash) ...

A double-free issue has been found in samba from 430 up to and including 492, where a user with a valid certificate or smart card can crash the Samba AD DC's KDC When configured to accept smart-card authentication, Samba's KDC willcall talloc_free() twice on the same memory if the principal in a validly signed certificate does not match the pr ...

CWE-415 https://www.samba.org/samba/security/CVE-2018-16841.html https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16841 https://www.debian.org/security/2018/dsa-4345 https://usn.ubuntu.com/3827-2/https://usn.ubuntu.com/3827-1/https://security.netapp.com/advisory/ntap-20181127-0001/http://www.securityfocus.com/bid/106023 https://security.gentoo.org/glsa/202003-52 https://nvd.nist.gov https://usn.ubuntu.com/3827-2/

CVE-2018-16841

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect