Note:
This project will be discontinued after December 13, 2021. [more]
2018-11-28
A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry, leading to denial of service.
| Products | Ubuntu_linux, Debian_linux, Samba |
| Type | Loop with Unreachable Exit Condition ('Infinite Loop') (CWE-835) |
| First patch | - None (likely due to unavailable code) |
| Links |
• https://usn.ubuntu.com/3827-2/
• https://www.debian.org/security/2018/dsa-4345 • https://www.samba.org/samba/security/CVE-2018-14629.html • https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14629 • http://www.securityfocus.com/bid/106022 |