CVE-2018-1140

MEDIUM 6.5CVE-2018-1140 · Published 22/08/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
samba samba	`≥ 4.8.0, < 4.8.4`	`4.8.4`

Description

A missing input sanitization flaw was found in the implementation of LDP database used for the LDAP server. An attacker could use this flaw to cause a denial of service against a samba server, used as a Active Directory Domain Controller. All versions of Samba from 4.8.0 onwards are vulnerable

References

securityfocus.com/bid/105082 · Third Party Advisory
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
bugzilla.samba.org/show_bug.cgi · Issue Tracking
security.gentoo.org/glsa/202003-52
security.netapp.com/advisory/ntap-20180814-0001 · Third Party Advisory
samba.org/samba/security/CVE-2018-1140.html · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free