Heap overflow

2018-08-2217:29:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.3%

JSON

A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.

CPENameOperatorVersion
ubuntu_linuxeq16.04
ubuntu_linuxeq14.04
ubuntu_linuxeq18.04
debian_linuxeq9.0
enterprise_linux_desktopeq7.0
enterprise_linux_servereq7.0
enterprise_linux_workstationeq7.0
virtualizationeq4.0
virtualization_hosteq4.0
sambalt4.6.16

Name	Operator	Version
ubuntu_linux	eq	16.04
ubuntu_linux	eq	14.04
ubuntu_linux	eq	18.04
debian_linux	eq	9.0
enterprise_linux_desktop	eq	7.0
enterprise_linux_server	eq	7.0
enterprise_linux_workstation	eq	7.0
virtualization	eq	4.0
virtualization_host	eq	4.0
samba	lt	4.6.16