Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2014-0239
HistoryMay 28, 2014 - 12:00 a.m.

CVE-2014-0239

2014-05-2800:00:00
ubuntu.com
ubuntu.com
17

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.374 Low

EPSS

Percentile

97.1%

JSON

The internal DNS server in Samba 4.x before 4.0.18 does not check the QR
field in the header section of an incoming DNS message before sending a
response, which allows remote attackers to cause a denial of service (CPU
and bandwidth consumption) via a forged response packet that triggers a
communication loop, a related issue to CVE-1999-0103.

Notes

Author Note
mdeslaur 4.x only
OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchsamba< 2:4.1.6+dfsg-1ubuntu2.14.04.2UNKNOWN

Related

cve 3
prion 1
debiancve 2
ics 1
nessus 12
openvas 9
checkpoint_advisories 1
ubuntucve 1
freebsd 1
samba 1
altlinux 3
securityvulns 2
ubuntu 1
slackware 1
gentoo 1
cve
cve
CVE-2014-0239
2014-05-28 04:58:00
CVE-1999-0103
1996-02-08 05:00:00
CVE-2002-2443
2013-05-29 14:29:00
prion
prion
Design/Logic Flaw
2014-05-28 04:58:00
debiancve
debiancve
CVE-2014-0239
2014-05-28 04:58:00
CVE-2002-2443
2013-05-29 14:29:00
ics
ics
Philips IntelliVue Information Center iX (Update B)
2018-10-11 12:00:00
nessus
nessus
Chargen UDP Service Remote DoS
1999-11-29 00:00:00
Quote of the Day (QOTD) Service Detection
1999-11-30 00:00:00
FreeBSD : krb5 -- UDP ping-pong vulnerability in the kpasswd (password changing) service. [CVE-2002-2443] (e3f64457-cccd-11e2-af76-206a8a720317)
2013-06-04 00:00:00
openvas
openvas
Check for Quote of the Day (qotd) Service (UDP)
2005-11-03 00:00:00
Check for Quote of the Day (qotd) Service (TCP)
2005-11-03 00:00:00
Check for Chargen Service (TCP)
2005-11-03 00:00:00
checkpoint_advisories
checkpoint_advisories
Samba DNS Reply Flag Denial of Service (CVE-2014-0239)
2014-08-03 00:00:00
ubuntucve
ubuntucve
CVE-2002-2443
2013-05-10 00:00:00
freebsd
freebsd
krb5 -- UDP ping-pong vulnerability in the kpasswd (password changing) service. [CVE-2002-2443]
2013-05-10 00:00:00
samba
samba
Potential DOS in Samba internal DNS server
2014-06-03 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package samba version 4.1.8-alt1
2014-06-04 00:00:00
Security fix for the ALT Linux 8 package samba version 4.1.8-alt1
2014-06-04 00:00:00
Security fix for the ALT Linux 8 package samba-DC version 4.1.8-alt1
2014-06-04 00:00:00
securityvulns
securityvulns
[slackware-security] samba &#40;SSA:2014-175-04&#41;
2014-06-26 00:00:00
Samba multiple security vulnerabilities
2014-06-26 00:00:00
ubuntu
ubuntu
Samba vulnerabilities
2014-06-26 00:00:00
slackware
slackware
[slackware-security] samba
2014-06-24 23:47:25
gentoo
gentoo
Samba: Multiple vulnerabilities
2015-02-25 00:00:00

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.374 Low

EPSS

Percentile

97.1%

JSON
Related for UB:CVE-2014-0239
cve3prion1debiancve2ics1nessus12openvas9checkpoint_advisories1ubuntucve1freebsd1samba1altlinux3securityvulns2ubuntu1slackware1gentoo1