CVE-2018-10858CWE-20

A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing

Medium · published August 22, 2018

CVSS v3.0
4.3
EPSS
4%
Percentile
91.1
In the wild
Unconfirmed
What it is

A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.04302 · 91.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2018-08-22T17:00Z
EPSS history
Timeline
  • 22 AUG 17:00Z
    A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing
    cvelistv5