Published: 28/11/2018 Updated: 29/08/2022

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

Samba from version 4.0.0 and prior to 4.7.12, 4.8.7, 4.9.3 is vulnerable to a denial of service. During the processing of an LDAP search before Samba's AD DC returns the LDAP entries to the client, the entries are cached in a single memory object with a maximum size of 256MB. When this size is reached, the Samba process providing the LDAP service will follow the NULL pointer, terminating the process. There is no further vulnerability associated with this issue, merely a denial of service.

Vulnerable Product	Search on Vulmon	Subscribe to Product
samba samba
canonical ubuntu linux 16.04
canonical ubuntu linux 14.04
canonical ubuntu linux 12.04
canonical ubuntu linux 18.04
canonical ubuntu linux 18.10
debian debian linux 8.0
debian debian linux 9.0

Several security issues were fixed in Samba ...

Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2018-14629 Florian Stuelpner discovered that Samba is vulnerable to infinite query recursion caused by CNAME loops, resulting in denial of servic ...

A null pointer dereference was found in the way LDAP search was implemented when Samba is used as Active Directory Domain Controller A remote, authenticated attacker could use this flaw to cause a denial of service (application crash) ...

A NULL pointer de-reference issue has been found in samba from 400 up to and including 492, where a user able to read more than 256MB of LDAP entries can crash the Samba AD DC's LDAP server ...

CWE-476 https://www.samba.org/samba/security/CVE-2018-16851.html https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16851 https://www.debian.org/security/2018/dsa-4345 https://usn.ubuntu.com/3827-2/https://usn.ubuntu.com/3827-1/https://security.netapp.com/advisory/ntap-20181127-0001/http://www.securityfocus.com/bid/106027 https://lists.debian.org/debian-lts-announce/2018/12/msg00005.html https://security.gentoo.org/glsa/202003-52 https://nvd.nist.gov https://usn.ubuntu.com/3827-2/

CVE-2018-16851

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect