GCVE-VVD-MAGEIA-2019-11

Advisory Published

Vulnetix · Advisory published February 14, 2019

Florian Stuelpner discovered that Samba is vulnerable to infinite query recursion caused by CNAME loops, resulting in denial of service (CVE-2018-14629). Alex MacCuish discovered that a user with a valid certificate or smart card can crash the Samba AD DC's KDC when configured to accept smart-card authentication (CVE-2018-16841). Garming Sam of the Samba Team and Catalyst discovered a NULL pointer dereference vulnerability in the Samba AD DC LDAP server allowing a user able to read more than 256MB of LDAP entries to crash the Samba AD DC's LDAP server (CVE-2018-16851). Samba has been updated to version 4.7.12 of the 4.7.x stable branch, and the tdb, talloc, tevent, ldb, and cmocka packages have also been updated. The sssd package has also been rebuilt against the updated ldb.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	kdepim-runtime	0 (affected), 17.12.2-1.2.mga6 (unaffected)	—
Mageia	tdb	0 (affected), 1.3.14-1.mga6 (unaffected), 0 (affected), 1.3.14-1.mga6 (unaffected)	—
Mageia	talloc	0 (affected), 2.1.11-1.1.mga6 (unaffected), 0 (affected), 2.1.11-1.1.mga6 (unaffected)	—
Mageia	tevent	0 (affected), 0.9.36-1.1.mga6 (unaffected), 0 (affected), 0.9.36-1.1.mga6 (unaffected)	—
Mageia	ldb	0 (affected), 1.2.3-1.mga6 (unaffected), 0 (affected), 1.2.3-1.mga6 (unaffected)	—
Mageia	cmocka	0 (affected), 1.1.3-1.mga6 (unaffected), 0 (affected), 1.1.3-1.mga6 (unaffected)	—
Mageia	sssd	0 (affected), 1.13.4-9.3.mga6 (unaffected), 0 (affected), 1.13.4-9.3.mga6 (unaffected)	—
Mageia	samba	0 (affected), 4.7.12-1.1.mga6 (unaffected), 0 (affected), 4.7.12-1.1.mga6 (unaffected)	—