CVE-2018-14629

Name of the Vulnerable Software and Affected Versions Samba versions prior to 4.7.12 Samba versions prior to 4.8.7 Samba versions prior to 4.9.3

Description The issue is related to an error in handling requests containing CNAME loop records in the Samba package's network interaction software. This can be exploited by a remote attacker to cause infinite recursion on the server, resulting in a denial of service. An unprivileged local attacker could create such an entry, leading to denial of service.

Recommendations For versions prior to 4.7.12, update to version 4.7.12 or later. For versions prior to 4.8.7, update to version 4.8.7 or later. For versions prior to 4.9.3, update to version 4.9.3 or later.