The internal DNS server in Samba 4.x before 4.0.18 does not check the QR field in the header section of an incoming DNS message before sending a response, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged response packet that triggers a communication loop, a related issue to CVE-1999-0103.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade samba | Jul 30, 2024 | May 28, 2014 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | May 28, 2014 |
| Samba | — | Upgrade to Samba version 4.0.18 | May 30, 2014 | May 28, 2014 |
| Suse | — | Upgrade libsamba-policy0Upgrade libdcerpc-samr0Upgrade libsamba-passdb0Upgrade libwbclient0-32bitUpgrade libnetapi0-32bitUpgrade libsamba-errors0Upgrade libdcerpc-samr-develUpgrade libregistry-develUpgrade libndr-standard0-32bitUpgrade libsamba-hostconfig-develUpgrade samba-32bitUpgrade libsmbldap2Upgrade libsamba-errors-develUpgrade libsamdb0Upgrade libdcerpc-atsvc-develUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc-atsvc0Upgrade libndr0-32bitUpgrade libwbclient-develUpgrade libsmbclient-raw-develUpgrade libndr-nbt0-32bitUpgrade samba-test-develUpgrade libsamba-hostconfig0-32bitUpgrade libtevent-util0-32bitUpgrade libndr-develUpgrade samba-libs-python3-32bitUpgrade libndr-krb5pac-develUpgrade libsamba-util0Upgrade libndr-krb5pac0Upgrade libregistry0Upgrade libdcerpc-binding0Upgrade libdcerpc0Upgrade libsmbconf-develUpgrade libsmbldap0Upgrade libsmbclient-raw0-32bitUpgrade libsmbclient0-32bitUpgrade libsmbsharemodes-develUpgrade libsamba-passdb0-32bitUpgrade samba-core-develUpgrade libsamdb0-32bitUpgrade samba-winbind-32bitUpgrade libsamba-credentials-develUpgrade libwbclient0Upgrade libndr-nbt0Upgrade libsamdb-develUpgrade libtevent-util0Upgrade libgensec-develUpgrade libsmbldap0-32bitUpgrade libsmbclient0Upgrade libsamba-credentials0-32bitUpgrade libsmbldap2-32bitUpgrade samba-client-32bitUpgrade libsamba-credentials0Upgrade libsmbclient-develUpgrade ctdbUpgrade samba-kdcUpgrade samba-clientUpgrade libsmbsharemodes0Upgrade libndr-standard-develUpgrade samba-libs-python3Upgrade libpdb0-32bitUpgrade libndr-standard0Upgrade libndr-krb5pac0-32bitUpgrade libsamba-errors0-32bitUpgrade libsmbclient-raw0Upgrade libgensec0-32bitUpgrade samba-pythonUpgrade samba-libsUpgrade libpdb0Upgrade libsmbldap-develUpgrade libsmbconf0-32bitUpgrade samba-dsdb-modulesUpgrade libnetapi-develUpgrade sambaUpgrade libsamba-policy-develUpgrade libndr-nbt-develUpgrade libdcerpc0-32bitUpgrade libsamba-hostconfig0Upgrade samba-winbindUpgrade libpdb-develUpgrade libndr0Upgrade libnetapi0Upgrade libsamba-util-develUpgrade libdcerpc-develUpgrade libgensec0Upgrade libsamba-util0-32bitUpgrade samba-docUpgrade libtevent-util-develUpgrade libsmbconf0Upgrade libsamba-passdb-develUpgrade samba-libs-32bit | Dec 18, 2015 | May 28, 2014 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | May 28, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub