DEBIAN-CVE-2016-0771

DEBIAN-CVE-2016-0771 PUBLISHED CVSS 5.900000095367432 MEDIUM

The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record.

Risk Scores

CVSS 3.0

5.900000095367432

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected Products

Vendor	Product	Versions
Debian:14	samba	0, 0, 0
Debian:11	samba	0, 0, 0
Debian:12	samba	0, 0, 0
Debian:13	samba	0, 0, 0

Timeline

Mar 13, 2016 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2016-0771 advisory

Open in Interactive Console →