A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer. An authenticated attacker could use this flaw to crash a samba server in an Active Directory Domain Controller configuration. Samba versions before 4.7.9 and 4.8.4 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 5.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 24, 2018 | Aug 22, 2018 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Aug 22, 2018 |
| Freebsd | — | Upgrade samba47Upgrade samba48Upgrade samba46 | Aug 15, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Aug 22, 2018 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4Upgrade service/network/samba to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4 | Oct 19, 2018 | Aug 22, 2018 |
| Samba | — | Upgrade to Samba version 4.8.4Upgrade to Samba version 4.7.9 | Aug 16, 2018 | Aug 16, 2018 |
| Suse | — | Upgrade samba-kdc-32bitUpgrade libtevent-util0-32bitUpgrade libsamba-errors0Upgrade libsamba-hostconfig0-32bitUpgrade samba-libs-32bitUpgrade libsamdb0Upgrade ctdb-testsUpgrade libdcerpc-samr0-32bitUpgrade sambaUpgrade libndr-nbt0Upgrade ctdbUpgrade libsmbclient0Upgrade samba-pythonUpgrade libndr1Upgrade libdcerpc-binding0Upgrade libwbclient0Upgrade libdcerpc-samr0Upgrade libsamba-policy0-python3Upgrade libsamba-credentials0-32bitUpgrade samba-pidlUpgrade libsmbconf0-32bitUpgrade samba-libs-python3Upgrade libsamba-errors-develUpgrade libsmbldap-develUpgrade libdcerpc-develUpgrade libsamba-errors0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsamba-util0-32bitUpgrade libnetapi0Upgrade samba-libsUpgrade libwbclient-develUpgrade libsamba-hostconfig-develUpgrade samba-core-develUpgrade ctdb-pcp-pmdaUpgrade libsmbldap2-32bitUpgrade libtevent-util-develUpgrade libsamba-passdb0-32bitUpgrade samba-docUpgrade libtevent-util0Upgrade libndr0Upgrade samba-dsdb-modulesUpgrade samba-cephUpgrade samba-winbind-32bitUpgrade libnetapi-develUpgrade libndr0-32bitUpgrade libsmbclient-develUpgrade libsmbconf-develUpgrade libsmbconf0Upgrade libndr-standard0-32bitUpgrade libsamba-hostconfig0Upgrade samba-winbindUpgrade libsamba-util-develUpgrade libnetapi0-32bitUpgrade libdcerpc0Upgrade libsamdb0-32bitUpgrade samba-python3Upgrade libsamba-passdb-develUpgrade libsamba-policy0Upgrade libsamba-policy0-32bitUpgrade libwbclient0-32bitUpgrade libndr-standard-develUpgrade samba-testUpgrade libsamba-policy-python3-develUpgrade samba-clientUpgrade libsamdb-develUpgrade libsamba-credentials-develUpgrade libsamba-policy-develUpgrade libsamba-credentials0Upgrade libsmbldap2Upgrade libndr-standard0Upgrade libsamba-passdb0Upgrade libsamba-util0Upgrade libsmbclient0-32bitUpgrade samba-kdcUpgrade samba-client-32bitUpgrade libndr-krb5pac0Upgrade libndr1-32bitUpgrade libndr-develUpgrade libdcerpc-samr-develUpgrade libndr-nbt-develUpgrade libndr-krb5pac-develUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc0-32bitUpgrade samba-libs-python3-32bitUpgrade libndr-nbt0-32bit | Aug 18, 2018 | Aug 14, 2018 |
| Ubuntu | — | Upgrade libsmbclientUpgrade samba | Aug 17, 2018 | Aug 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub