CVE-2018-16851

Name of the Vulnerable Software and Affected Versions Samba versions 4.0.0 through 4.7.11 Samba versions 4.8.0 through 4.8.6 Samba versions 4.9.0 through 4.9.2

Description The issue is related to a denial of service in Samba's LDAP search functionality. It occurs when the maximum size of cached search results, which is 256MB, is reached, causing the Samba process to follow a NULL pointer and terminate. This can be exploited by a remote attacker to cause a denial of service.

Recommendations For Samba versions 4.0.0 through 4.7.11, update to version 4.7.12 or later. For Samba versions 4.8.0 through 4.8.6, update to version 4.8.7 or later. For Samba versions 4.9.0 through 4.9.2, update to version 4.9.3 or later.