Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-0239
HistoryMay 28, 2014 - 4:58 a.m.

CVE-2014-0239

2014-05-2804:58:32
CWE-20
[email protected]
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.3 Medium

AI Score

Confidence

Low

0.875 High

EPSS

Percentile

98.7%

JSON

The internal DNS server in Samba 4.x before 4.0.18 does not check the QR field in the header section of an incoming DNS message before sending a response, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged response packet that triggers a communication loop, a related issue to CVE-1999-0103.

Affected configurations

NVD
Node
sambasambaRange4.0.0–4.0.18
OR
sambasambaRange4.1.0–4.1.8

Related

ubuntucve 2
debiancve 2
prion 1
cvelist 3
cve 3
ics 1
openvas 9
nessus 12
samba 1
checkpoint_advisories 1
freebsd 1
nvd 1
altlinux 3
securityvulns 2
ubuntu 1
slackware 1
gentoo 1
ubuntucve
ubuntucve
CVE-2014-0239
2014-05-28 00:00:00
CVE-2002-2443
2013-05-10 00:00:00
debiancve
debiancve
CVE-2014-0239
2014-05-28 04:58:32
CVE-2002-2443
2013-05-29 14:29:06
prion
prion
Design/Logic Flaw
2014-05-28 04:58:00
cvelist
cvelist
CVE-2014-0239
2014-05-28 01:00:00
CVE-1999-0103
1999-09-29 04:00:00
CVE-2002-2443
2013-05-29 10:00:00
cve
cve
CVE-2014-0239
2014-05-28 04:58:32
CVE-1999-0103
1999-09-29 04:00:00
CVE-2002-2443
2013-05-29 14:29:06
ics
ics
Philips IntelliVue Information Center iX (Update B)
2018-10-11 12:00:00
openvas
openvas
Check for Quote of the Day (qotd) Service (TCP)
2005-11-03 00:00:00
Check for Quote of the Day (qotd) Service (UDP)
2005-11-03 00:00:00
Samba 4.0.0 <= 4.0.17 Improper Input Validation Vulnerability (CVE-2014-0239)
2021-09-24 00:00:00
nessus
nessus
Quote of the Day (QOTD) Service Detection
1999-11-30 00:00:00
Chargen UDP Service Remote DoS
1999-11-29 00:00:00
Echo Service Detection
1999-06-22 00:00:00
samba
samba
Potential DOS in Samba internal DNS server
2014-06-03 00:00:00
checkpoint_advisories
checkpoint_advisories
Samba DNS Reply Flag Denial of Service (CVE-2014-0239)
2014-08-03 00:00:00
freebsd
freebsd
krb5 -- UDP ping-pong vulnerability in the kpasswd (password changing) service. [CVE-2002-2443]
2013-05-10 00:00:00
nvd
nvd
CVE-2002-2443
2013-05-29 14:29:06
altlinux
altlinux
Security fix for the ALT Linux 8 package samba version 4.1.8-alt1
2014-06-04 00:00:00
Security fix for the ALT Linux 10 package samba version 4.1.8-alt1
2014-06-04 00:00:00
Security fix for the ALT Linux 8 package samba-DC version 4.1.8-alt1
2014-06-04 00:00:00
securityvulns
securityvulns
[slackware-security] samba &#40;SSA:2014-175-04&#41;
2014-06-26 00:00:00
Samba multiple security vulnerabilities
2014-06-26 00:00:00
ubuntu
ubuntu
Samba vulnerabilities
2014-06-26 00:00:00
slackware
slackware
[slackware-security] samba
2014-06-24 23:47:25
gentoo
gentoo
Samba: Multiple vulnerabilities
2015-02-25 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.3 Medium

AI Score

Confidence

Low

0.875 High

EPSS

Percentile

98.7%

JSON
Related for NVD:CVE-2014-0239
ubuntucve2debiancve2prion1cvelist3cve3ics1openvas9nessus12samba1checkpoint_advisories1freebsd1nvd1altlinux3securityvulns2ubuntu1slackware1gentoo1