CVE-2018-10918

Source
https://nvd.nist.gov/vuln/detail/CVE-2018-10918
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10918.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-10918
Downstream
Related
Published
2018-08-22T17:29:00Z
Modified
2025-09-30T07:10:14.616393Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer. An authenticated attacker could use this flaw to crash a samba server in an Active Directory Domain Controller configuration. Samba versions before 4.7.9 and 4.8.4 are vulnerable.

References

Affected packages

Git / github.com/samba-team/samba

Affected ranges

Type
GIT
Repo
https://github.com/samba-team/samba
Events

Affected versions

ldb-1.*

ldb-1.2.3

samba-4.*

samba-4.7.0
samba-4.7.1
samba-4.7.2
samba-4.7.3
samba-4.7.4
samba-4.7.5
samba-4.7.6
samba-4.7.7
samba-4.7.8