Skip to content
6.5 Medium

CVE-2018-14629 A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3

Description

A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry, leading to denial of service.

Affected products and versions

Product Affected versions Fixed in
samba 4.9.3 No fix stated
samba 4.8.7 No fix stated
samba 4.7.12 No fix stated
The 9 CVEs of samba →
Track this CVE