CVEvulnerability
CVE-2018-1050
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-03-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS 2.0 ([email protected])
- 3.3 LOW — AV:A/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-476
Description
All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash.
Affected configurations
• canonical ubuntu linux 12.04
• canonical ubuntu linux 14.04
• canonical ubuntu linux 16.04
• canonical ubuntu linux 17.10
• samba samba (>= 3.6.0 < 4.5.16)
• samba samba (>= 4.6.0 < 4.6.14)
• samba samba (>= 4.7.0 < 4.7.6)
• debian debian linux 7.0
• debian debian linux 8.0
• debian debian linux 9.0
• redhat enterprise linux desktop 6.0
• redhat enterprise linux desktop 7.0
• redhat enterprise linux server 6.0
• redhat enterprise linux server 7.0
• redhat enterprise linux workstation 6.0
• redhat enterprise linux workstation 7.0
Related
Weakness · CWE (1)
- CWE-476 NULL Pointer Dereference weakness
References
- http://www.securityfocus.com/bid/103387 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040493 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:1860 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1883 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2612 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2613 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3056 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1538771 Issue Tracking, Third Party Advisory
- https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/03/msg00024.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/04/msg00013.html Mailing List, Third Party Advisory
- https://security.gentoo.org/glsa/201805-07 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20180313-0001/ Third Party Advisory
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03834en_us Third Party Advisory
- https://usn.ubuntu.com/3595-1/ Third Party Advisory
- https://usn.ubuntu.com/3595-2/ Third Party Advisory
- https://www.debian.org/security/2018/dsa-4135 Third Party Advisory
- https://www.samba.org/samba/security/CVE-2018-1050.html Mitigation, Vendor Advisory
- http://www.securityfocus.com/bid/103387 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040493 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:1860 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1883 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2612 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2613 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3056 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1538771 Issue Tracking, Third Party Advisory
- https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/03/msg00024.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/04/msg00013.html Mailing List, Third Party Advisory
- https://security.gentoo.org/glsa/201805-07 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20180313-0001/ Third Party Advisory
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03834en_us Third Party Advisory
- https://usn.ubuntu.com/3595-1/ Third Party Advisory
- https://usn.ubuntu.com/3595-2/ Third Party Advisory
- https://www.debian.org/security/2018/dsa-4135 Third Party Advisory
- https://www.samba.org/samba/security/CVE-2018-1050.html Mitigation, Vendor Advisory