CVE-2018-16852

A null pointer dereference flaw was found in the Samba DNS Management server when used as an Active Directory Domain Controller. A remote attacker could use this flaw to cause a denial of service application crash...

CVE-2018-16851

A null pointer dereference was found in the way LDAP search was implemented when Samba is used as Active Directory Domain Controller. A remote, authenticated attacker could use this flaw to cause a denial of service application crash...

CVE-2018-16841

A double-free was found when Samba's KDC is used as an Active Directory Domain Controller. An authenticated attacker could use this flaw to cause a denial of service application crash...

Samba Remote Denial of Service Vulnerability (CNVD-2019-08296)

Samba is a freeware implementation of the SMB protocol on Linux and UNIX systems, consisting of a server and a client program. Samba suffers from a remote denial of service vulnerability that can be exploited by an attacker to cause the application to crash and deny service to legitimate users...

Security fix for the ALT Linux 10 package samba version 4.9.3-alt1

Nov. 28, 2018 Evgeny Sinelnikov 4.9.3-alt1 - Update to autumn security release - Revert Samba DC to build with internal Heimdal Kerberos implementation - Clean test module of thirdparty/iso8601 and subunit modules - Security fixes: + CVE-2018-14629 Unprivileged adding of CNAME record causing loop...

FreeBSD : samba -- multiple vulnerabilities (54976998-f248-11e8-81e2-005056a311d1)

The samba project reports : All versions of Samba from 4.0.0 onwards are vulnerable to infinite query recursion caused by CNAME loops. Any dns record can be added via ldap by an unprivileged user using the ldbadd tool, so this is a security issue. When configured to accept smart-card...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Samba vulnerabilities (USN-3827-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3827-1 advisory. Florian Stuelpner discovered that Samba incorrectly handled CNAME records. A remote attacker could use this issue to cause Samba ...

Samba AD DC LDAP Server Denial of Service Vulnerability

Samba is a set of free software developed by the Samba team that enables UNIX series operating systems to connect to the SMB/CIFS network protocol of Microsoft Windows operating systems. The software supports sharing printers, transferring data files to each other, etc. AD DC LDAP Server is one o...

Samba Denial of Service Vulnerability (CNVD-2019-08297)

Samba is a freeware implementation of the SMB protocol on Linux and UNIX systems, consisting of a server and a client program. Samba suffers from a denial of service vulnerability that can be exploited by an attacker to cause the application to crash and deny service to legitimate users...

[ASA-201811-22] samba: multiple issues

Arch Linux Security Advisory ASA-201811-22 ========================================== Severity: High Date : 2018-11-28 CVE-ID : CVE-2018-14629 CVE-2018-16841 CVE-2018-16851 CVE-2018-16852 CVE-2018-16853 CVE-2018-16857 Package : samba Type : multiple issues Remote : Yes Link :...

Samba Denial of Service Vulnerability (CNVD-2019-08294)

Samba is a freeware implementation of the SMB protocol on Linux and UNIX systems, consisting of a server and a client program. Samba suffers from a denial of service vulnerability that can be exploited by an attacker to cause a denial of service null pointer backreference...

Samba Security Bypass and Denial of Service Vulnerabilities

Samba is a freeware implementation of the SMB protocol on Linux and UNIX systems, consisting of a server and a client program. Samba suffers from a security bypass vulnerability and a denial-of-service vulnerability that can be exploited by an attacker to conduct a brute-force attack...

USN-3827-2: Samba vulnerabilities

USN-3827-1 fixed a vulnerability in samba. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: Florian Stuelpner discovered that Samba incorrectly handled CNAME records. A remote attacker could use this issue to cause Samba to crash, resulting in a denia...

USN-3827-1: Samba vulnerabilities

Florian Stuelpner discovered that Samba incorrectly handled CNAME records. A remote attacker could use this issue to cause Samba to crash, resulting in a denial of service. CVE-2018-14629 Alex MacCuish discovered that Samba incorrectly handled memory when configured to accept smart-card...

USN-3827-1 samba vulnerabilities

Florian Stuelpner discovered that Samba incorrectly handled CNAME records. A remote attacker could use this issue to cause Samba to crash, resulting in a denial of service. CVE-2018-14629 Alex MacCuish discovered that Samba incorrectly handled memory when configured to accept smart-card...

[SECURITY] [DSA 4345-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4345-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 27, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4345-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4345-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 27, 2018 https://www.debian.org/security/faq -...

CVE-2018-16853

Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is built in the non-default MIT Kerberos configuration. With this advisory the Samba Team clarify that the MIT Kerberos build of the Samba AD DC is considered experimental. Therefore t...

CVE-2018-16841

Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card authentication, Samba's KDC will call tallocfree twice on the same memory if the principal in a validly signed certificate does not match the principal ...

CVE-2018-14629

A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry, leading to denial of service...