CVE-2018-1050

Опубликовано: 13 мар. 2018

Источник: nvd

CVSS3: 4.3

CVSS2: 3.3

EPSS Средний

Описание

All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash.

Ссылки

http://www.securityfocus.com/bid/103387
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040493
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:1860
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1883
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2612
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2613
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3056
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1538771
Issue Tracking
Third Party Advisory
https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/03/msg00024.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/04/msg00013.html
Mailing List
Third Party Advisory
https://security.gentoo.org/glsa/201805-07
Third Party Advisory
https://security.netapp.com/advisory/ntap-20180313-0001/
Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03834en_us
Third Party Advisory
https://usn.ubuntu.com/3595-1/
Third Party Advisory
https://usn.ubuntu.com/3595-2/
Third Party Advisory
https://www.debian.org/security/2018/dsa-4135
Third Party Advisory
https://www.samba.org/samba/security/CVE-2018-1050.html
Mitigation
Vendor Advisory
http://www.securityfocus.com/bid/103387
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040493
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:lts:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*

Версия от 3.6.0 (включая) до 4.5.16 (исключая)

cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*

Версия от 4.6.0 (включая) до 4.6.14 (исключая)

cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*

Версия от 4.7.0 (включая) до 4.7.6 (исключая)

Конфигурация 3

Одно из

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.27175

Средний

4.3 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2018-1050

CVSS3: 4.3

ubuntu

больше 7 лет назад

CVE-2018-1050

CVSS3: 4.3

redhat

больше 7 лет назад

CVE-2018-1050

CVSS3: 4.3

msrc

почти 4 года назад

Описание отсутствует

CVE-2018-1050

CVSS3: 4.3

debian

больше 7 лет назад

All versions of Samba from 4.0.0 onwards are vulnerable to a denial of ...

openSUSE-SU-2018:0801-1

suse-cvrf

больше 7 лет назад

Security update for samba, talloc, tevent

EPSS

Процентиль: 96%

0.27175

Средний

4.3 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-476