Homepage

NULL Pointer Dereference The advisory has been revoked - it doesn't affect any version of package samba-test  (opens in a new tab)

Threat Intelligence

EPSS
3.25% (87th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-SLES150-SAMBATEST-2758834
  • published14 Apr 2022
  • disclosed10 Dec 2018
Report a new vulnerability Found a mistake?

Introduced: 10 Dec 2018

CVE-2018-16851  (opens in a new tab)
CWE-476  (opens in a new tab)

Amendment

The SLES security team deemed this advisory irrelevant for SLES:15.0.

NVD Description

Note: Versions mentioned in the description apply only to the upstream samba-test package and not the samba-test package as distributed by SLES.

Samba from version 4.0.0 and before versions 4.7.12, 4.8.7, 4.9.3 is vulnerable to a denial of service. During the processing of an LDAP search before Samba's AD DC returns the LDAP entries to the client, the entries are cached in a single memory object with a maximum size of 256MB. When this size is reached, the Samba process providing the LDAP service will follow the NULL pointer, terminating the process. There is no further vulnerability associated with this issue, merely a denial of service.