Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2018-1050
HistoryMar 13, 2018 - 4:29 p.m.

CVE-2018-1050

2018-03-1316:29:00
CWE-476
[email protected]
web.nvd.nist.gov

3.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:N/A:P

4.3 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5 Medium

AI Score

Confidence

High

0.025 Low

EPSS

Percentile

90.2%

JSON

All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash.

Affected configurations

NVD
Node
canonicalubuntu_linuxMatch12.04esm
OR
canonicalubuntu_linuxMatch14.04lts
OR
canonicalubuntu_linuxMatch16.04lts
OR
canonicalubuntu_linuxMatch17.10lts
Node
sambasambaRange3.6.0–4.5.16
OR
sambasambaRange4.6.0–4.6.14
OR
sambasambaRange4.7.0–4.7.6
Node
debiandebian_linuxMatch7.0
OR
debiandebian_linuxMatch8.0
OR
debiandebian_linuxMatch9.0
Node
redhatenterprise_linux_desktopMatch6.0
OR
redhatenterprise_linux_desktopMatch7.0
OR
redhatenterprise_linux_serverMatch6.0
OR
redhatenterprise_linux_serverMatch7.0
OR
redhatenterprise_linux_workstationMatch6.0
OR
redhatenterprise_linux_workstationMatch7.0

References

Related

nessus 41
osv 4
redhat 5
debiancve 1
ibm 3
ubuntucve 1
prion 1
oraclelinux 3
cbl_mariner 1
ubuntu 2
veracode 1
openvas 25
cvelist 1
f5 1
cve 1
centos 3
checkpoint_advisories 1
samba 1
debian 4
redhatcve 1
alpinelinux 1
altlinux 6
freebsd 1
threatpost 1
fedora 7
thn 1
cisa 1
archlinux 1
mageia 1
amazon 2
gentoo 1
nessus
nessus
NewStart CGSL MAIN 4.05 : samba4 Vulnerability (NS-SA-2019-0128)
2019-08-12 00:00:00
SUSE SLED12 / SLES12 Security Update : samba, talloc, tevent (SUSE-SU-2018:0754-1)
2018-03-22 00:00:00
Debian DLA-1320-1 : samba security update
2018-03-28 00:00:00
osv
osv
CVE-2018-1050
2018-03-13 16:29:00
samba - security update
2018-03-27 00:00:00
samba - security update
2018-03-13 00:00:00
redhat
redhat
(RHSA-2018:1883) Low: samba4 security and bug fix update
2018-06-19 02:11:50
(RHSA-2018:1860) Low: samba security and bug fix update
2018-06-19 02:11:16
(RHSA-2018:2612) Moderate: samba security, bug fix and enhancement update
2018-09-04 06:19:17
debiancve
debiancve
CVE-2018-1050
2018-03-13 16:29:00
ibm
ibm
Security Bulletin: A vulnerability in Samba affects IBM OS Image for Red Hat Linux Systems on IBM PureApplication (CVE-2018-1050)
2018-10-17 12:20:01
Security Bulletin: Public disclosed vulnerability from Samba affect IBM Netezza Host Management
2019-10-18 03:36:34
Security Bulletin: Multiple Vulnerabilities in Samba affect IBM i
2019-12-18 14:26:38
ubuntucve
ubuntucve
CVE-2018-1050
2018-03-13 00:00:00
prion
prion
Design/Logic Flaw
2018-03-13 16:29:00
oraclelinux
oraclelinux
samba4 security and bug fix update
2018-06-25 00:00:00
samba security, bug fix, and enhancement update
2018-11-05 00:00:00
samba security and bug fix update
2018-06-25 00:00:00
cbl_mariner
cbl_mariner
CVE-2018-1050 affecting package samba for versions less than 4.12.5-6
2024-04-30 02:42:18
ubuntu
ubuntu
Samba vulnerability
2018-03-23 00:00:00
Samba vulnerabilities
2018-03-13 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:23:30
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2018:0754-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:0832-1)
2021-04-19 00:00:00
Ubuntu: Security Advisory (USN-3595-2)
2022-08-26 00:00:00
cvelist
cvelist
CVE-2018-1050
2018-03-13 00:00:00
f5
f5
K01494912 : Samba vulnerability CVE-2018-1050
2020-12-17 00:00:00
cve
cve
CVE-2018-1050
2018-03-13 16:29:00
centos
centos
samba4 security update
2018-06-21 11:56:05
libsmbclient, samba security update
2018-06-21 11:56:04
ctdb, libsmbclient, libwbclient, samba security update
2018-12-14 16:36:48
checkpoint_advisories
checkpoint_advisories
Samba Printer Server spoolss Denial Of Service (CVE-2018-1050)
2018-06-03 00:00:00
samba
samba
Denial of Service Attack on external print server.
2018-03-13 00:00:00
debian
debian
[SECURITY] [DLA 1320-1] samba security update
2018-03-27 22:36:20
[SECURITY] [DSA 4135-1] samba security update
2018-03-13 09:49:45
[SECURITY] [DSA 4135-1] samba security update
2018-03-13 09:49:45
redhatcve
redhatcve
CVE-2018-1050
2019-10-09 10:03:19
alpinelinux
alpinelinux
CVE-2018-1050
2018-03-13 16:29:00
altlinux
altlinux
Security fix for the ALT Linux 10 package samba version 4.6.14-alt1.S1.1
2018-03-15 00:00:00
Security fix for the ALT Linux 8 package samba-DC version 4.6.14-alt1.1
2018-03-15 00:00:00
Security fix for the ALT Linux 8 package samba version 4.6.14-alt1.1
2018-03-15 00:00:00
freebsd
freebsd
samba -- multiple vulnerabilities
2018-01-03 00:00:00
threatpost
threatpost
Samba Patches Two Critical Vulnerabilities in Server Software
2018-03-13 12:56:17
fedora
fedora
[SECURITY] Fedora 27 Update: samba-4.7.6-0.fc27
2018-03-14 19:40:44
[SECURITY] Fedora 27 Update: libldb-1.3.2-1.fc27
2018-03-14 19:40:43
[SECURITY] Fedora 26 Update: samba-4.6.14-0.fc26
2018-03-20 17:38:39
thn
thn
Update Samba Servers Immediately to Patch Password Reset and DoS Vulnerabilities
2018-03-13 10:05:00
cisa
cisa
Samba Releases Security Updates
2018-03-13 00:00:00
archlinux
archlinux
[ASA-201803-10] samba: multiple issues
2018-03-13 00:00:00
mageia
mageia
Updated samba packages fix security vulnerabilities
2018-04-13 23:08:48
amazon
amazon
Medium: samba
2019-01-22 17:55:00
Medium: samba
2018-12-13 20:13:00
gentoo
gentoo
Samba: Multiple vulnerabilities
2018-05-22 00:00:00

3.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:N/A:P

4.3 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5 Medium

AI Score

Confidence

High

0.025 Low

EPSS

Percentile

90.2%

JSON
Related for NVD:CVE-2018-1050
nessus41osv4redhat5debiancve1ibm3ubuntucve1prion1oraclelinux3cbl_mariner1ubuntu2veracode1openvas25cvelist1f51cve1centos3checkpoint_advisories1samba1debian4redhatcve1alpinelinux1altlinux6freebsd1threatpost1fedora7thn1cisa1archlinux1mageia1amazon2gentoo1