CVE-2018-16851CWE-476

Samba from version 4.0.0 and before versions 4.7.12, 4.8.7, 4.9.3 is vulnerable to a denial of service

Medium · published November 28, 2018

CVSS v3.0
6.5
EPSS
3%
Percentile
88.2
In the wild
Unconfirmed
What it is

Samba from version 4.0.0 and before versions 4.7.12, 4.8.7, 4.9.3 is vulnerable to a denial of service. During the processing of an LDAP search before Samba's AD DC returns the LDAP entries to the client, the entries are cached in a single memory object with a maximum size of 256MB. When this size is reached, the Samba process providing the LDAP service will follow the NULL pointer, terminating the process. There is no further vulnerability associated with this issue, merely a denial of service.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.03251 · 88.2th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2018-11-28T14:00Z
EPSS history
Timeline
  • 28 NOV 14:00Z
    Samba from version 4.0.0 and before versions 4.7.12, 4.8.7, 4.9.3 is vulnerable to a denial of service
    cvelistv5