ISOMAN

CVE

CVE-2018-1050

All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash.

Severity
MEDIUM
CVSS
4.3
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://www.securityfocus.com/bid/103387
  2. http://www.securitytracker.com/id/1040493
  3. https://access.redhat.com/errata/RHSA-2018:1860
  4. https://access.redhat.com/errata/RHSA-2018:1883
  5. https://access.redhat.com/errata/RHSA-2018:2612
  6. https://access.redhat.com/errata/RHSA-2018:2613
  7. https://access.redhat.com/errata/RHSA-2018:3056
  8. https://bugzilla.redhat.com/show_bug.cgi?id=1538771
  9. https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
  10. https://lists.debian.org/debian-lts-announce/2018/03/msg00024.html
  11. https://lists.debian.org/debian-lts-announce/2019/04/msg00013.html
  12. https://security.gentoo.org/glsa/201805-07
  13. https://security.netapp.com/advisory/ntap-20180313-0001/
  14. https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03834en_us
  15. https://usn.ubuntu.com/3595-1/
  16. https://usn.ubuntu.com/3595-2/
  17. https://www.debian.org/security/2018/dsa-4135
  18. https://www.samba.org/samba/security/CVE-2018-1050.html
  19. http://www.securityfocus.com/bid/103387
  20. http://www.securitytracker.com/id/1040493