CVE-2018-10918 PUBLISHED

A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer. An authenticated attacker could use this flaw to crash a samba server in an Active Directory Domain Controller configuration. Samba versions before 4.7.9 and 4.8.4 are vulnerable.

EPSS 4.26% · 88.7th percentile

Risk Scores

EPSS Score
4.26%
88.7th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSsamba0, 2:4.6.7+dfsg-1ubuntu3, 2:4.7.1+dfsg-1ubuntu1

Timeline

References

Open in Interactive Console →