A missing input sanitization flaw was found in the implementation of LDP database used for the LDAP server. An attacker could use this flaw to cause a denial of service against a samba server, used as a Active Directory Domain Controller. All versions of Samba from 4.8.0 onwards are vulnerable
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sambaUpgrade ldb | Aug 24, 2018 | Aug 22, 2018 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Aug 22, 2018 |
| Freebsd | — | Upgrade samba47Upgrade samba48Upgrade samba46 | Aug 15, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Aug 22, 2018 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4 | Oct 19, 2018 | Aug 22, 2018 |
| Samba | — | Upgrade to Samba version 4.8.4 | Aug 16, 2018 | Aug 16, 2018 |
| Suse | — | Upgrade libsamba-policy-python3-develUpgrade libsamba-errors-develUpgrade ctdbUpgrade libsamdb0-32bitUpgrade libndr1Upgrade python-ldbUpgrade libsamba-errors0-32bitUpgrade libsmbconf0Upgrade samba-cephUpgrade libsamba-hostconfig-develUpgrade libsamba-credentials-develUpgrade libsmbldap2Upgrade libnetapi0Upgrade samba-winbind-32bitUpgrade libsamba-errors0Upgrade libsamdb-develUpgrade libndr-nbt0-32bitUpgrade libsamba-policy0-32bitUpgrade libsamdb0Upgrade libldb-develUpgrade samba-docUpgrade libndr-standard0Upgrade libwbclient-develUpgrade libdcerpc-samr-develUpgrade libndr-krb5pac0-32bitUpgrade libsamba-credentials0-32bitUpgrade ctdb-pcp-pmdaUpgrade samba-clientUpgrade libdcerpc0-32bitUpgrade libsamba-util0Upgrade libsamba-hostconfig0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libsmbclient0Upgrade libsmbconf-develUpgrade python3-ldb-develUpgrade samba-kdcUpgrade python-ldb-develUpgrade libtevent-util-develUpgrade libsamba-hostconfig0Upgrade libndr-standard-develUpgrade libnetapi-develUpgrade libndr-nbt-develUpgrade libndr-nbt0Upgrade libsamba-policy-develUpgrade samba-client-32bitUpgrade libsmbconf0-32bitUpgrade libsamba-util0-32bitUpgrade libndr0-32bitUpgrade libndr1-32bitUpgrade samba-libs-32bitUpgrade libsmbclient0-32bitUpgrade libndr-develUpgrade libndr0Upgrade samba-kdc-32bitUpgrade libtevent-util0-32bitUpgrade samba-core-develUpgrade samba-python3Upgrade samba-libs-python3Upgrade libsamba-passdb-develUpgrade libsamba-policy0Upgrade samba-libsUpgrade samba-dsdb-modulesUpgrade libldb2-32bitUpgrade sambaUpgrade samba-libs-python3-32bitUpgrade samba-winbindUpgrade libdcerpc0Upgrade libdcerpc-samr0-32bitUpgrade libndr-standard0-32bitUpgrade libsmbclient-develUpgrade ctdb-testsUpgrade libdcerpc-samr0Upgrade ldb-toolsUpgrade python3-ldbUpgrade samba-pythonUpgrade libndr-krb5pac0Upgrade libnetapi0-32bitUpgrade libldb1Upgrade libsamba-passdb0Upgrade libsamba-passdb0-32bitUpgrade libwbclient0-32bitUpgrade libsamba-policy0-python3Upgrade libsamba-util-develUpgrade samba-testUpgrade libwbclient0Upgrade libsamba-credentials0Upgrade libdcerpc-develUpgrade samba-pidlUpgrade libldb2Upgrade libsmbldap2-32bitUpgrade libndr-krb5pac-develUpgrade libldb1-32bitUpgrade libsmbldap-develUpgrade libdcerpc-binding0Upgrade libtevent-util0 | Aug 18, 2018 | Aug 14, 2018 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub