Improper input validation in Samba - CVE-2018-1050

Vulnerability identifier: #VU10949

CSH Severity: Low

CVSS v4: 6 [CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-1050

CWE-ID: CWE-20

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation when processing RPC requests to the spoolss service. A remote attacker can send a specially crafted RPC request to the affected service and trigger denial of service conditions.

Successful exploitation of the vulnerability requires that the RPC spoolss service services is configured as external daemon.

Samba
Arch Linux
Gentoo Linux
Debian Linux
Amazon Linux AMI
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for Power
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Server
Fedora
Red Hat Gluster Storage Server for On-premise
samba (Alpine package)
libldb
samba
RoboHelp

Apply patch from vendors website.

samba (Alpine package) - update to 4.4.16-r2
libldb - update to 1.3.2-1.fc27
samba - addressed in versions 4.6.14-0.fc26, 4.7.6-0.fc27

• https://www.samba.org/samba/security/CVE-2018-1050.html

• Multiple vulnerabilities in Samba
• Debian update for samba
• Arch Linux update for samba
• Gentoo update for Samba
• Red Hat update for samba
• Red Hat update for samba
• Red Hat update for samba
• Red Hat update for samba
• Amazon Linux AMI update for samba
• Red Hat update for samba
• Improper input validation in samba (Alpine package)
• Fedora 26 update for samba
• Fedora 27 update for libldb, samba