CVEvulnerability
CVE-2015-7540
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-12-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-399
Description
The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return values to ensure successful ASN.1 memory allocation, which allows remote attackers to cause a denial of service (memory consumption and daemon crash) via crafted packets.
Affected configurations
• samba samba (>= 4.0.0 < 4.1.22)
• canonical ubuntu linux 12.04
• canonical ubuntu linux 14.04
• canonical ubuntu linux 15.04
• canonical ubuntu linux 15.10
• debian debian linux 7.0
• debian debian linux 8.0
Related
Weakness · not in database (1)
References
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174076.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174391.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html Mailing List, Third Party Advisory
- http://www.debian.org/security/2016/dsa-3433 Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html Third Party Advisory
- http://www.securityfocus.com/bid/79736 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1034492 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2855-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2855-2 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1288451 Issue Tracking, Third Party Advisory
- https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=530d50a1abdcdf4d1775652d4c456c1274d83d8d git.samba.org
- https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=9d989c9dd7a5b92d0c5d65287935471b83b6e884 git.samba.org
- https://security.gentoo.org/glsa/201612-47 Third Party Advisory
- https://www.samba.org/samba/security/CVE-2015-7540.html Vendor Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174076.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174391.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html Mailing List, Third Party Advisory
- http://www.debian.org/security/2016/dsa-3433 Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html Third Party Advisory
- http://www.securityfocus.com/bid/79736 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1034492 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2855-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2855-2 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1288451 Issue Tracking, Third Party Advisory
- https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=530d50a1abdcdf4d1775652d4c456c1274d83d8d git.samba.org
- https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=9d989c9dd7a5b92d0c5d65287935471b83b6e884 git.samba.org
- https://security.gentoo.org/glsa/201612-47 Third Party Advisory
- https://www.samba.org/samba/security/CVE-2015-7540.html Vendor Advisory