VULNERABILITY INTELLIGENCE

CVE-2018-10918

CVSS score5.2 MEDIUM
EPSS probability2.51%
CISA KEVNot currently listed
Published2018-08-22
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Description

A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer. An authenticated attacker could use this flaw to crash a samba server in an Active Directory Domain Controller configuration. Samba versions before 4.7.9 and 4.8.4 are vulnerable.

Weakness classification

  • secalert@redhat.com: CWE-476
  • nvd@nist.gov: CWE-476

Primary references