CVE-2018-1140CWE-20

A missing input sanitization flaw was found in the implementation of LDP database used for the LDAP server

Medium · published August 22, 2018

CVSS v3.0
6.5
EPSS
11%
Percentile
95.8
In the wild
Unconfirmed
What it is

A missing input sanitization flaw was found in the implementation of LDP database used for the LDAP server. An attacker could use this flaw to cause a denial of service against a samba server, used as a Active Directory Domain Controller. All versions of Samba from 4.8.0 onwards are vulnerable

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.10839 · 95.8th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2018-08-22T14:00Z
EPSS history
Timeline
  • 22 AUG 14:00Z
    A missing input sanitization flaw was found in the implementation of LDP database used for the LDAP server
    cvelistv5