VDB
CVE-2015-7540
CVE-2015-7540
PUBLISHED
The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return values to ensure successful ASN.1 memory allocation, which allows remote attackers to cause a denial of service (memory consumption and daemon crash) via crafted packets.
EPSS 7.12% · 93.6th percentile
Risk Scores
EPSS Score
7.12%
93.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:14.04:LTS | samba | 0, 2:4.0.10+dfsg-4ubuntu2, 2:4.0.13+dfsg-1ubuntu1 |
| Ubuntu:16.04:LTS | samba | 2:4.1.17+dfsg-4ubuntu2, 2:4.1.20+dfsg-1ubuntu1, 2:4.1.20+dfsg-1ubuntu2 |
Timeline
- Dec 16, 2015 CVE Published
- Feb 4, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Apr 2, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Oct 30, 2023 EPSS Score
- Nov 8, 2023 EPSS Score
- Feb 12, 2024 EPSS Score
- May 27, 2024 EPSS Score
References
- https://ubuntu.com/security/CVE-2015-7540 third-party-advisory
- https://www.samba.org/samba/security/CVE-2015-7540.html third-party-advisory
- https://ubuntu.com/security/notices/USN-2855-1 vendor-advisory
- https://www.cve.org/CVERecord?id=CVE-2015-7540 third-party-advisory