A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry, leading to denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Feb 20, 2019 | Nov 28, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 28, 2018 |
| Debian | — | Upgrade samba | Nov 28, 2018 | Aug 14, 2018 |
| Freebsd | — | Upgrade samba48Upgrade samba47Upgrade samba49Upgrade samba46 | Nov 28, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Nov 28, 2018 |
| Samba | — | Upgrade to Samba version 4.8.7Upgrade to Samba version 4.9.3Upgrade to Samba version 4.7.12 | Dec 4, 2018 | Nov 28, 2018 |
| Suse | — | Upgrade libsamba-policy0-python3Upgrade libdcerpc-binding0Upgrade libsmbldap-develUpgrade samba-libs-python3Upgrade samba-client-32bitUpgrade samba-pythonUpgrade libsamba-util0Upgrade libndr-krb5pac0-32bitUpgrade libsmbconf0-32bitUpgrade libsmbldap2Upgrade ctdbUpgrade libnetapi-develUpgrade libndr-nbt0Upgrade libndr-standard0Upgrade samba-winbind-32bitUpgrade libsmbconf-develUpgrade libtevent-util-develUpgrade samba-libs-32bitUpgrade libndr0-32bitUpgrade libndr1-32bitUpgrade libsamba-util0-32bitUpgrade libsamba-errors0Upgrade samba-cephUpgrade samba-winbindUpgrade libwbclient0Upgrade libsamba-errors-develUpgrade libndr1Upgrade libdcerpc-develUpgrade libsamba-hostconfig-develUpgrade libndr-standard-develUpgrade sambaUpgrade libdcerpc-samr0Upgrade libsmbclient0Upgrade libsamba-hostconfig0Upgrade libndr0Upgrade libnetapi0Upgrade libsamba-errors0-32bitUpgrade libsmbldap2-32bitUpgrade libsamba-credentials0-32bitUpgrade libsmbconf0Upgrade samba-docUpgrade libsamba-passdb0Upgrade libdcerpc0Upgrade samba-libs-python3-32bitUpgrade libsamba-credentials-develUpgrade libndr-nbt0-32bitUpgrade libsmbclient0-32bitUpgrade libsmbclient-develUpgrade libndr-standard0-32bitUpgrade libsamba-policy-develUpgrade libndr-develUpgrade libdcerpc-samr-develUpgrade libsamba-policy-python3-develUpgrade samba-dsdb-modulesUpgrade libsamba-passdb0-32bitUpgrade libwbclient0-32bitUpgrade libdcerpc0-32bitUpgrade libnetapi0-32bitUpgrade libndr-nbt-develUpgrade libsamba-util-develUpgrade libsamba-credentials0Upgrade libsamba-passdb-develUpgrade samba-python3Upgrade libndr-krb5pac-develUpgrade samba-libsUpgrade samba-clientUpgrade libsamba-policy0Upgrade samba-core-develUpgrade libwbclient-develUpgrade libsamdb0-32bitUpgrade libndr-krb5pac0Upgrade libsamdb-develUpgrade libsamba-hostconfig0-32bitUpgrade libsamdb0Upgrade libdcerpc-binding0-32bitUpgrade libtevent-util0-32bitUpgrade libtevent-util0 | Dec 19, 2019 | Aug 14, 2018 |
| Ubuntu | — | Upgrade samba | Dec 4, 2018 | Aug 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub