CVE-2018-10918

A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer. An authenticated attacker…

Medium5.2EPSS 2.5%

Published: 22 Aug 2018
Updated: 5 Aug 2024
Reserved: 9 May 2018
Assigned by: redhat

Description

A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer. An authenticated attacker could use this flaw to crash a samba server in an Active Directory Domain Controller configuration. Samba versions before 4.7.9 and 4.8.4 are vulnerable.

Scores

CVSS scores of CVE-2018-10918, by who scored it
Scored by	CVSS	Score	Vector
redhatCNA (assigner)	3.0	Medium5.2	CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
NVDNVD · Modified	3.0	Medium6.5	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS (exploitation in 30 days): 2.5% · top 15% of all CVEs (5 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.2.

Weakness

CWE-476 (opens in a new tab)All about CWE-476 and its CVEs

Affected products

The Samba Team · samba
- affected 4.7.9
- affected 4.8.4

References (6)

https://www.samba.org/samba/security/CVE-2018-10918.html (opens in a new tab)x_refsource_CONFIRMx_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10918 (opens in a new tab)x_refsource_CONFIRMx_transferred
USN-3738-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
https://security.netapp.com/advisory/ntap-20180814-0001/ (opens in a new tab)x_refsource_CONFIRMx_transferred
105083 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
GLSA-202003-52 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2018-10918](https://trackcve.app/badge/CVE-2018-10918.svg)](https://trackcve.app/cve/CVE-2018-10918)

Record last updated 5 Aug 2024, 07:54 UTC.