A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry, leading to denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Feb 20, 2019 | Nov 28, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 28, 2018 |
| Debian | — | Upgrade samba | Nov 28, 2018 | Aug 14, 2018 |
| Freebsd | — | Upgrade samba46Upgrade samba48Upgrade samba49Upgrade samba47 | Nov 28, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Nov 28, 2018 |
| Samba | — | Upgrade to Samba version 4.7.12Upgrade to Samba version 4.8.7Upgrade to Samba version 4.9.3 | Dec 4, 2018 | Nov 28, 2018 |
| Suse | — | Upgrade samba-libs-32bitUpgrade libndr1Upgrade libndr-standard-develUpgrade libsamba-errors-develUpgrade libndr-krb5pac0-32bitUpgrade samba-winbind-32bitUpgrade libsmbconf0-32bitUpgrade samba-pythonUpgrade libsamba-util0Upgrade samba-winbindUpgrade libsmbldap2Upgrade libsamba-policy0-python3Upgrade samba-client-32bitUpgrade libsamba-util0-32bitUpgrade libnetapi0Upgrade libsamba-credentials0-32bitUpgrade libndr-standard0Upgrade libndr-nbt0Upgrade libsamba-hostconfig0Upgrade libsamba-errors0-32bitUpgrade samba-docUpgrade libdcerpc-develUpgrade libsamba-hostconfig-develUpgrade sambaUpgrade libsmbconf-develUpgrade libtevent-util-develUpgrade libsmbconf0Upgrade libsamba-errors0Upgrade libdcerpc-binding0Upgrade libdcerpc-samr0Upgrade libndr0Upgrade libsmbldap-develUpgrade libsmbclient0Upgrade libnetapi-develUpgrade libsmbldap2-32bitUpgrade libwbclient0Upgrade samba-libs-python3Upgrade samba-cephUpgrade libndr0-32bitUpgrade ctdbUpgrade libndr1-32bitUpgrade libsamba-policy-develUpgrade libsmbclient-develUpgrade samba-dsdb-modulesUpgrade libsmbclient0-32bitUpgrade libndr-standard0-32bitUpgrade libsamba-credentials-develUpgrade libndr-develUpgrade libsamba-policy0Upgrade libndr-nbt0-32bitUpgrade samba-libs-python3-32bitUpgrade libsamdb0-32bitUpgrade libsamba-policy-python3-develUpgrade libtevent-util0-32bitUpgrade libwbclient0-32bitUpgrade libsamba-passdb0Upgrade libdcerpc0Upgrade libndr-nbt-develUpgrade libnetapi0-32bitUpgrade libdcerpc0-32bitUpgrade libsamba-util-develUpgrade libndr-krb5pac0Upgrade libsamba-passdb-develUpgrade samba-clientUpgrade libdcerpc-samr-develUpgrade libsamdb-develUpgrade libwbclient-develUpgrade samba-python3Upgrade libsamba-credentials0Upgrade samba-libsUpgrade libndr-krb5pac-develUpgrade libtevent-util0Upgrade libdcerpc-binding0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libsamdb0Upgrade libsamba-passdb0-32bitUpgrade samba-core-devel | Dec 19, 2019 | Aug 14, 2018 |
| Ubuntu | — | Upgrade samba | Dec 4, 2018 | Aug 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub