A missing input sanitization flaw was found in the implementation of LDP database used for the LDAP server. An attacker could use this flaw to cause a denial of service against a samba server, used as a Active Directory Domain Controller. All versions of Samba from 4.8.0 onwards are vulnerable
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ldbUpgrade samba | Aug 24, 2018 | Aug 22, 2018 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Aug 22, 2018 |
| Freebsd | — | Upgrade samba46Upgrade samba47Upgrade samba48 | Aug 15, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Aug 22, 2018 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4 | Oct 19, 2018 | Aug 22, 2018 |
| Samba | — | Upgrade to Samba version 4.8.4 | Aug 16, 2018 | Aug 16, 2018 |
| Suse | — | Upgrade samba-libs-python3Upgrade libwbclient0-32bitUpgrade samba-python3Upgrade samba-core-develUpgrade samba-pidlUpgrade libsamba-policy0-python3Upgrade libndr-standard0-32bitUpgrade libsmbldap-develUpgrade samba-winbindUpgrade libtevent-util0Upgrade libdcerpc-binding0Upgrade libsmbldap2-32bitUpgrade samba-dsdb-modulesUpgrade ctdb-testsUpgrade libdcerpc-samr0Upgrade libtevent-util0-32bitUpgrade samba-kdc-32bitUpgrade ldb-toolsUpgrade libsamba-passdb0-32bitUpgrade samba-libsUpgrade libsamba-policy0Upgrade python3-ldbUpgrade libldb1-32bitUpgrade libwbclient0Upgrade libndr-krb5pac-develUpgrade libldb2-32bitUpgrade samba-testUpgrade sambaUpgrade libdcerpc-develUpgrade samba-libs-python3-32bitUpgrade libsamba-passdb-develUpgrade libsamba-credentials0Upgrade libnetapi0-32bitUpgrade libldb1Upgrade samba-pythonUpgrade libsamba-passdb0Upgrade libsamba-util-develUpgrade libdcerpc0Upgrade libndr-krb5pac0Upgrade libldb2Upgrade libdcerpc-samr0-32bitUpgrade libsmbclient-develUpgrade libldb-develUpgrade python-ldb-develUpgrade libsmbconf0Upgrade samba-clientUpgrade libsmbclient0Upgrade libdcerpc0-32bitUpgrade samba-client-32bitUpgrade libndr-develUpgrade libsamdb0-32bitUpgrade libndr0Upgrade libsamba-policy-python3-develUpgrade libndr-standard0Upgrade libsmbconf-develUpgrade libwbclient-develUpgrade samba-docUpgrade libsamba-credentials0-32bitUpgrade libdcerpc-samr-develUpgrade libndr-krb5pac0-32bitUpgrade libndr-nbt0Upgrade libsamba-hostconfig0Upgrade libsmbconf0-32bitUpgrade samba-kdcUpgrade libndr-standard-develUpgrade libndr1Upgrade libsamba-policy-develUpgrade libndr-nbt-develUpgrade libtevent-util-develUpgrade libsamba-util0-32bitUpgrade libnetapi-develUpgrade libndr0-32bitUpgrade libnetapi0Upgrade python-ldbUpgrade libsamba-errors0-32bitUpgrade samba-cephUpgrade libsamba-hostconfig-develUpgrade libsamba-credentials-develUpgrade libsmbldap2Upgrade libsamdb0Upgrade libndr-nbt0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libsamba-policy0-32bitUpgrade samba-winbind-32bitUpgrade libsamdb-develUpgrade libsamba-util0Upgrade samba-libs-32bitUpgrade libsamba-errors0Upgrade ctdbUpgrade libndr1-32bitUpgrade libsmbclient0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade python3-ldb-develUpgrade libsamba-errors-develUpgrade ctdb-pcp-pmda | Aug 18, 2018 | Aug 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub