The internal DNS server in Samba 4.x before 4.0.18 does not check the QR field in the header section of an incoming DNS message before sending a response, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged response packet that triggers a communication loop, a related issue to CVE-1999-0103.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade samba | Jul 30, 2024 | May 28, 2014 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | May 28, 2014 |
| Samba | — | Upgrade to Samba version 4.0.18 | May 30, 2014 | May 28, 2014 |
| Suse | — | Upgrade samba-libs-32bitUpgrade libwbclient0Upgrade libsmbsharemodes0Upgrade libsmbconf0-32bitUpgrade libsmbldap2-32bitUpgrade libsamba-credentials0-32bitUpgrade samba-clientUpgrade samba-client-32bitUpgrade libsamba-passdb-develUpgrade libnetapi-develUpgrade libsmbldap0-32bitUpgrade libsmbclient-develUpgrade libtevent-util0Upgrade libndr-nbt0Upgrade libsamba-credentials-develUpgrade samba-winbind-32bitUpgrade libgensec0Upgrade sambaUpgrade libsamba-util-develUpgrade libndr-standard0Upgrade libpdb-develUpgrade samba-pythonUpgrade libsamba-util0-32bitUpgrade libsmbconf0Upgrade samba-dsdb-modulesUpgrade samba-docUpgrade libndr-standard-develUpgrade ctdbUpgrade libdcerpc-develUpgrade samba-libsUpgrade samba-kdcUpgrade libpdb0-32bitUpgrade libsamba-errors0-32bitUpgrade libsamba-hostconfig0Upgrade libdcerpc0-32bitUpgrade libgensec0-32bitUpgrade libndr0Upgrade samba-winbindUpgrade libsmbclient-raw0Upgrade libsmbldap-develUpgrade libnetapi0Upgrade samba-libs-python3Upgrade libsamdb-develUpgrade libndr-krb5pac0-32bitUpgrade libsmbclient0Upgrade libgensec-develUpgrade libtevent-util-develUpgrade libsamba-policy-develUpgrade libpdb0Upgrade libndr-nbt-develUpgrade libsamba-credentials0Upgrade libsamba-errors0Upgrade libsamba-passdb0Upgrade libsamba-util0Upgrade libdcerpc-binding0Upgrade libndr0-32bitUpgrade libndr-develUpgrade libsmbconf-develUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-policy0Upgrade libsmbclient-raw-develUpgrade libndr-nbt0-32bitUpgrade libdcerpc-atsvc-develUpgrade samba-32bitUpgrade libsamba-errors-develUpgrade libsmbclient-raw0-32bitUpgrade libsmbclient0-32bitUpgrade libsamba-passdb0-32bitUpgrade libsamdb0-32bitUpgrade libsamba-hostconfig-develUpgrade samba-libs-python3-32bitUpgrade samba-core-develUpgrade libtevent-util0-32bitUpgrade libsmbsharemodes-develUpgrade libdcerpc0Upgrade libndr-krb5pac0Upgrade libdcerpc-binding0-32bitUpgrade libndr-krb5pac-develUpgrade libsamdb0Upgrade libdcerpc-atsvc0Upgrade libwbclient-develUpgrade samba-test-develUpgrade libregistry-develUpgrade libsmbldap2Upgrade libdcerpc-samr0Upgrade libwbclient0-32bitUpgrade libsmbldap0Upgrade libnetapi0-32bitUpgrade libdcerpc-samr-develUpgrade libregistry0Upgrade libndr-standard0-32bit | Dec 18, 2015 | May 28, 2014 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | May 28, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub