Login Request a demo
Medium severity · published Mar 13, 2018
CVE-2018-1050
All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon
4.3
CVSS
6.5%
EPSS
No
On KEV
Description
All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)6.5% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DL
Debian Linux · Debian
7.0; 8.0; 9.0 · source: NVD
EL
Enterprise Linux Desktop · Redhat
6.0; 7.0 · source: NVD
EL
Enterprise Linux Server · Redhat
6.0; 7.0 · source: NVD
EL
Enterprise Linux Workstation · Redhat
6.0; 7.0 · source: NVD
SA
Samba · Samba
3.6.0 before 4.5.16; 4.6.0 before 4.6.14; 4.7.0 before 4.7.6 · source: NVD
UL
Ubuntu Linux · Canonical
12.04; 14.04; 16.04; 17.10 · source: NVD
Affected product
UL
Ubuntu Linux
Canonical
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-1050
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-1050
Third Party Advisory
http://www.securityfocus.com/bid/103387
Third Party Advisory
http://www.securitytracker.com/id/1040493
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1860
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1883
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2612
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2613
More from Ubuntu Linux
9.8
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
9.8
CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation