Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2018-14629

Опубликовано: 28 нояб. 2018
Источник: debian
EPSS Средний

Описание

A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry, leading to denial of service.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
sambafixed2:4.9.2+dfsg-2package

Примечания

  • https://www.samba.org/samba/security/CVE-2018-14629.html

EPSS

Процентиль: 94%
0.13621
Средний

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 7 лет назад

A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry, leading to denial of service.

CVSS3: 6.5
redhat
около 7 лет назад

A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry, leading to denial of service.

CVSS3: 6.5
nvd
около 7 лет назад

A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry, leading to denial of service.

CVSS3: 6.5
github
больше 3 лет назад

A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry, leading to denial of service.

CVSS3: 6.5
fstec
больше 7 лет назад

Уязвимость LDAP-сервера пакета программ сетевого взаимодействия Samba, связанная с ошибкой при обработке запросов, содержащих зацикленные записи CNAME, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 94%
0.13621
Средний