CVE-2018-10918CWE-476

A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer

Medium · published August 22, 2018

CVSS v3.0
5.2
EPSS
3%
Percentile
84.9
In the wild
Unconfirmed
What it is

A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer. An authenticated attacker could use this flaw to crash a samba server in an Active Directory Domain Controller configuration. Samba versions before 4.7.9 and 4.8.4 are vulnerable.

The record
Technical detail
CVSS v3.0
5.2 · MEDIUM
Vector
CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.02546 · 84.9th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2018-08-22T17:00Z
EPSS history
Timeline
  • 22 AUG 17:00Z
    A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer
    cvelistv5