CVE-2018-16841
Medium
Description
Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card authentication, Samba's KDC will call talloc_free() twice on the same memory if the principal in a validly signed certificate does not match the principal in the AS-REQ. This is only possible after authentication with a trusted certificate. talloc is robust against further corruption from a double-free with talloc_free() and directly calls abort(), terminating the KDC process.
SeverityMedium
CVSS6.5
Exploit probability—
Product
Samba
PublishedNov 28, 2018
First seenNov 28, 2018
Weakness typeCWE-416Use after free
How to fix
Update
- samba samba4.7.12, 4.8.7, 4.9.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| samba samba | 4.3.0 ≤ v < 4.7.12, 4.8.0 ≤ v < 4.8.7, 4.9.0 ≤ v < 4.9.3 | 4.7.12, 4.8.7, 4.9.3 |
| canonical ubuntu_linux | 12.04, 14.04, 16.04, 18.04, 18.10 | — |
| debian debian_linux | 9.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.