Samba CVE-2018-1050 Remote Denial of Service Vulnerability

Bugtraq ID:	103387
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2018-1050
Remote:	Yes
Local:	No
Published:	Mar 13 2018 12:00AM
Updated:	Mar 13 2018 12:00AM
Credit:	Synopsys Defensics intelligent fuzz testing tool.
Vulnerable:	Samba Samba 4.7.3 Samba Samba 4.6.11 Samba Samba 4.6.8 Samba Samba 4.6.7 Samba Samba 4.6.6 Samba Samba 4.6.4 Samba Samba 4.6.1 Samba Samba 4.6 Samba Samba 4.5.15 Samba Samba 4.5.14 Samba Samba 4.5.13 Samba Samba 4.5.12 Samba Samba 4.5.10 Samba Samba 4.5.7 Samba Samba 4.5.6 Samba Samba 4.5.5 Samba Samba 4.5.4 Samba Samba 4.5.1 Samba Samba 4.5 Samba Samba 4.4.16 Samba Samba 4.4.15 Samba Samba 4.4.14 Samba Samba 4.4.12 Samba Samba 4.4.11 Samba Samba 4.4.10 Samba Samba 4.4.9 Samba Samba 4.4.7 Samba Samba 4.4.6 Samba Samba 4.4.1 Samba Samba 4.4 rc4 Samba Samba 4.4 rc3 Samba Samba 4.4 Samba Samba 4.3.7 Samba Samba 4.3.5 Samba Samba 4.3.4 Samba Samba 4.3.3 Samba Samba 4.3.2 Samba Samba 4.3.1 Samba Samba 4.3 Samba Samba 4.2.10 Samba Samba 4.2.8 Samba Samba 4.2.7 Samba Samba 4.2.6 Samba Samba 4.2.5 Samba Samba 4.2.4 Samba Samba 4.2.3 Samba Samba 4.2.2 Samba Samba 4.2.1 Samba Samba 4.2 Samba Samba 4.1.22 Samba Samba 4.1.21 Samba Samba 4.1.20 Samba Samba 4.1.19 Samba Samba 4.1.18 Samba Samba 4.1.17 Samba Samba 4.1.16 Samba Samba 4.1.15 Samba Samba 4.1.14 Samba Samba 4.1.13 Samba Samba 4.1.10 Samba Samba 4.1.9 Samba Samba 4.1.7 Samba Samba 4.1.3 Samba Samba 4.1.2 Samba Samba 4.1.1 Samba Samba 4.1 Samba Samba 4.0.24 Samba Samba 4.0.23 Samba Samba 4.0.21 Samba Samba 4.0.20 Samba Samba 4.0.19 Samba Samba 4.0.18 Samba Samba 4.0.17 Samba Samba 4.0.13 Samba Samba 4.0.12 Samba Samba 4.0.10 Samba Samba 4.0.2 Samba Samba 4.5.3 Samba Samba 4.5.2 Samba Samba 4.4.8 Samba Samba 4.4.5 Samba Samba 4.4.4 Samba Samba 4.4.3 Samba Samba 4.4.2 Samba Samba 4.4.0 Rc2 Samba Samba 4.3.9 Samba Samba 4.3.8 Samba Samba 4.3.6 + Trustix Secure Linux 2.0 + Trustix Secure Linux 1.5 Samba Samba 4.3.13 Samba Samba 4.3.11 Samba Samba 4.3.10 Samba Samba 4.2rc4 Samba Samba 4.2.9 + Trustix Secure Linux 2.0 + Trustix Secure Linux 1.5 Samba Samba 4.2.14 Samba Samba 4.2.13 Samba Samba 4.2.12 Samba Samba 4.2.11 Samba Samba 4.2.0 Rc4 Samba Samba 4.2.0 Rc3 Samba Samba 4.2.0 Rc2 Samba Samba 4.2.0 Rc1 Samba Samba 4.1.8 Samba Samba 4.1.6 Samba Samba 4.1.5 Samba Samba 4.1.23 + Trustix Secure Linux 2.0 + Trustix Secure Linux 1.5 Samba Samba 4.1.12 Samba Samba 4.1.11 Samba Samba 4.0.9 Samba Samba 4.0.8 Samba Samba 4.0.7 Samba Samba 4.0.6 Samba Samba 4.0.5 Samba Samba 4.0.4 Samba Samba 4.0.3 Samba Samba 4.0.22 Samba Samba 4.0.16 Samba Samba 4.0.15 Samba Samba 4.0.14 Samba Samba 4.0.11 Samba Samba 4.0.1 Samba Samba 4.0.0 Redhat Gluster Storage 3.0 Redhat Enterprise Linux 7 Redhat Enterprise Linux 6 + Trustix Secure Enterprise Linux 2.0 + Trustix Secure Linux 2.2 + Trustix Secure Linux 2.1 + Trustix Secure Linux 2.0
Not Vulnerable:	Samba Samba 4.7.6 Samba Samba 4.6.14 Samba Samba 4.5.16

Samba CVE-2018-1050 Remote Denial of Service Vulnerability

Samba is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause the application to crash, denying service to legitimate users.

Samba 4.0.0 and later are vulnerable.

Samba CVE-2018-1050 Remote Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Samba CVE-2018-1050 Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

Samba CVE-2018-1050 Remote Denial of Service Vulnerability

References:

• Bug 1538771 - (CVE-2018-1050) CVE-2018-1050 samba: Null pointer indirection in p (Red Hat Bugzilla)
  
• CVE-2018-1050 (Red Hat Bugzilla)
  
• Samba Homepage (Samba)
  
• Samba Security Releases (samba)
  
• Subject: Denial of Service Attack on external print server. (Samba)