CVEvulnerability

CVE-2016-0771

5.9 MEDIUM Published 2016-03-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-03-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.9 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H
CVSS 2.0 ([email protected])
4.9 MEDIUM — AV:N/AC:M/Au:S/C:P/I:N/A:P
Weaknesses
CWE-119

Description

The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record.

Affected configurations

• samba samba 4.0.0 • samba samba 4.0.1 • samba samba 4.0.2 • samba samba 4.0.3 • samba samba 4.0.4 • samba samba 4.0.5 • samba samba 4.0.6 • samba samba 4.0.7 • samba samba 4.0.8 • samba samba 4.0.9 • samba samba 4.0.10 • samba samba 4.0.11 • samba samba 4.0.12 • samba samba 4.0.13 • samba samba 4.0.14 • samba samba 4.0.15 • samba samba 4.0.16 • samba samba 4.0.17 • samba samba 4.0.18 • samba samba 4.0.19 • samba samba 4.0.20 • samba samba 4.0.21 • samba samba 4.0.22 • samba samba 4.0.23 • samba samba 4.0.24 • samba samba 4.1.0 • samba samba 4.1.1 • samba samba 4.1.2 • samba samba 4.1.3 • samba samba 4.1.4 • samba samba 4.1.5 • samba samba 4.1.6 • samba samba 4.1.7 • samba samba 4.1.8 • samba samba 4.1.9 • samba samba 4.1.10 • samba samba 4.1.11 • samba samba 4.1.12 • samba samba 4.1.13 • samba samba 4.1.14 • samba samba 4.1.15 • samba samba 4.1.16 • samba samba 4.1.17 • samba samba 4.1.18 • samba samba 4.1.19 • samba samba 4.1.20 • samba samba 4.1.21 • samba samba 4.1.22 • samba samba 4.2.0 • samba samba 4.2.1 • samba samba 4.2.2 • samba samba 4.2.3 • samba samba 4.2.4 • samba samba 4.2.5 • samba samba 4.2.6 • samba samba 4.2.7 • samba samba 4.2.8 • samba samba 4.3.0 • samba samba 4.3.1 • samba samba 4.3.2 … and 4 more

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References