A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry, leading to denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Feb 20, 2019 | Nov 28, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 28, 2018 |
| Debian | — | Upgrade samba | Nov 28, 2018 | Aug 14, 2018 |
| Freebsd | — | Upgrade samba49Upgrade samba47Upgrade samba48Upgrade samba46 | Nov 28, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Nov 28, 2018 |
| Samba | — | Upgrade to Samba version 4.7.12Upgrade to Samba version 4.9.3Upgrade to Samba version 4.8.7 | Dec 4, 2018 | Nov 28, 2018 |
| Suse | — | Upgrade libsamba-passdb-develUpgrade samba-libsUpgrade samba-clientUpgrade libndr-krb5pac-develUpgrade libsamba-credentials0Upgrade libndr-nbt0-32bitUpgrade libsamba-credentials-develUpgrade libsamdb0-32bitUpgrade libsamba-policy-develUpgrade libsmbclient0-32bitUpgrade libndr-standard0-32bitUpgrade samba-libs-python3-32bitUpgrade libsmbclient-develUpgrade libdcerpc-samr-develUpgrade libsamba-policy-python3-develUpgrade samba-python3Upgrade libsamba-util-develUpgrade libdcerpc0-32bitUpgrade libnetapi0-32bitUpgrade samba-dsdb-modulesUpgrade libsamba-policy0Upgrade libtevent-util0Upgrade libsamba-hostconfig0-32bitUpgrade libtevent-util0-32bitUpgrade libsamba-passdb0-32bitUpgrade samba-core-develUpgrade libsamdb0Upgrade libdcerpc-binding0-32bitUpgrade libwbclient-develUpgrade libndr-krb5pac0Upgrade libwbclient0-32bitUpgrade libndr-develUpgrade libndr-nbt-develUpgrade libsamba-passdb0Upgrade libsamdb-develUpgrade libdcerpc0Upgrade samba-libs-python3Upgrade libsamba-errors0-32bitUpgrade libtevent-util-develUpgrade libsamba-errors0Upgrade libsmbldap2Upgrade libsamba-errors-develUpgrade libsamba-credentials0-32bitUpgrade libndr-nbt0Upgrade samba-winbind-32bitUpgrade libnetapi-develUpgrade libsmbconf0Upgrade libsamba-util0Upgrade libwbclient0Upgrade libdcerpc-binding0Upgrade libsmbclient0Upgrade libndr-standard0Upgrade libsamba-util0-32bitUpgrade samba-libs-32bitUpgrade libsmbldap2-32bitUpgrade libsamba-hostconfig-develUpgrade libndr0-32bitUpgrade samba-docUpgrade libdcerpc-develUpgrade libndr1Upgrade libdcerpc-samr0Upgrade libndr0Upgrade sambaUpgrade libsamba-hostconfig0Upgrade samba-pythonUpgrade samba-client-32bitUpgrade libnetapi0Upgrade ctdbUpgrade libndr-standard-develUpgrade samba-cephUpgrade libsmbconf0-32bitUpgrade libndr-krb5pac0-32bitUpgrade samba-winbindUpgrade libndr1-32bitUpgrade libsmbconf-develUpgrade libsmbldap-develUpgrade libsamba-policy0-python3 | Dec 19, 2019 | Aug 14, 2018 |
| Ubuntu | — | Upgrade samba | Dec 4, 2018 | Aug 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub