A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry, leading to denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Feb 20, 2019 | Nov 28, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 28, 2018 |
| Debian | — | Upgrade samba | Nov 28, 2018 | Aug 14, 2018 |
| Freebsd | — | Upgrade samba49Upgrade samba48Upgrade samba46Upgrade samba47 | Nov 28, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Nov 28, 2018 |
| Samba | — | Upgrade to Samba version 4.8.7Upgrade to Samba version 4.7.12Upgrade to Samba version 4.9.3 | Dec 4, 2018 | Nov 28, 2018 |
| Suse | — | Upgrade libsamba-hostconfig-develUpgrade libnetapi0Upgrade libdcerpc-develUpgrade libtevent-util-develUpgrade samba-client-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsamba-util0Upgrade libsmbconf0Upgrade ctdbUpgrade libsamba-errors0-32bitUpgrade libsmbconf-develUpgrade libndr-nbt0Upgrade libsamba-hostconfig0Upgrade sambaUpgrade samba-libs-python3Upgrade libwbclient0Upgrade libnetapi-develUpgrade libdcerpc-binding0Upgrade libndr-standard0Upgrade libndr-standard-develUpgrade samba-cephUpgrade samba-winbind-32bitUpgrade libndr0-32bitUpgrade libndr1-32bitUpgrade libsamba-errors0Upgrade libsamba-credentials0-32bitUpgrade libsmbldap2-32bitUpgrade libsmbclient0Upgrade samba-libs-32bitUpgrade libsamba-util0-32bitUpgrade samba-winbindUpgrade samba-docUpgrade libsmbldap-develUpgrade libsamba-errors-develUpgrade libndr1Upgrade libndr0Upgrade samba-pythonUpgrade libsmbconf0-32bitUpgrade libsamba-policy0-python3Upgrade libdcerpc-samr0Upgrade libsmbldap2Upgrade libndr-develUpgrade samba-clientUpgrade samba-libsUpgrade libndr-nbt0-32bitUpgrade libsamba-passdb0Upgrade libndr-nbt-develUpgrade libnetapi0-32bitUpgrade libdcerpc0Upgrade samba-dsdb-modulesUpgrade libdcerpc0-32bitUpgrade libsamba-util-develUpgrade libwbclient0-32bitUpgrade libsamba-policy-develUpgrade libndr-krb5pac0Upgrade libndr-krb5pac-develUpgrade libtevent-util0Upgrade libsamba-hostconfig0-32bitUpgrade libsamba-policy0Upgrade libdcerpc-binding0-32bitUpgrade libsamdb0Upgrade libsamba-passdb0-32bitUpgrade libsamdb0-32bitUpgrade samba-core-develUpgrade libsamba-passdb-develUpgrade libdcerpc-samr-develUpgrade libwbclient-develUpgrade libsamba-credentials-develUpgrade libsamdb-develUpgrade libsamba-credentials0Upgrade libsmbclient-develUpgrade samba-python3Upgrade libsamba-policy-python3-develUpgrade samba-libs-python3-32bitUpgrade libtevent-util0-32bitUpgrade libsmbclient0-32bitUpgrade libndr-standard0-32bit | Dec 19, 2019 | Aug 14, 2018 |
| Ubuntu | — | Upgrade samba | Dec 4, 2018 | Aug 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub