CVE-2016-0771

The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows…

published March 13, 2016

CVSS
—
EPSS
3%
Percentile
87.2
In the wild
Unconfirmed
What it is

The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03011 · 87.2th percentile
Published
2016-03-13T22:00Z
EPSS history
Timeline
  • 13 MAR 22:00Z
    The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows…
    cvelistv5