Security restrictions bypass in Samba - CVE-2018-16857
Published: November 28, 2018
Vulnerability identifier: #VU16159
CSH Severity: Low
CVSS v4: 8.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-16857
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass security restrictions.
The vulnerability exists due to AD DC configurations watching for bad passwords (to restrict brute forcing of passwords) in a window of more than 3 minutes may not watch for bad passwords at all. A remote attacker can bypass security restrictions and modify arbitrary data.
Affected software
Samba
Arch Linux
Gentoo Linux
Slackware Linux
Fedora
samba
Arch Linux
Gentoo Linux
Slackware Linux
Fedora
samba
How to mitigate CVE-2018-16857
Update to version 4.9.3.
Samba - update to 4.9.3
samba - update to 4.9.3-0.fc29
samba - update to 4.9.3-0.fc29