CVE-2018-16851
MEDIUM severity · CVSS 6.5 · CWE-476
6.5CVSS MEDIUM
Summary
Samba from version 4.0.0 and before versions 4.7.12, 4.8.7, 4.9.3 is vulnerable to a denial of service. During the processing of an LDAP search before Samba's AD DC returns the LDAP entries to the client, the entries are cached in a single memory object with a maximum size of 256MB. When this size is reached, the Samba process providing the LDAP service will follow the NULL pointer, terminating the process. There is no further vulnerability associated with this issue, merely a denial of service.
Impact & exploitability
Attack vectorNetwork
Attack complexityLow
Privileges requiredLow
User interactionNone
Confidentiality impactNone
Integrity impactNone
Availability impactHigh
Exploit probability (EPSS)3%
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://www.securityfocus.com/bid/106027Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16851Advisory
- https://lists.debian.org/debian-lts-announce/2018/12/msg00005.htmlAdvisory
- https://security.gentoo.org/glsa/202003-52Advisory
- https://security.netapp.com/advisory/ntap-20181127-0001/Advisory
- https://usn.ubuntu.com/3827-1/Advisory
- https://usn.ubuntu.com/3827-2/Advisory
- https://www.debian.org/security/2018/dsa-4345Advisory