CVE-2018-1050
- State
- Published
- Severity
- Not scored
- Published
- Mar 13, 2018
- Updated
- Sep 16, 2024
- Reserved
- Dec 4, 2017
Description
All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash.
Scores
The record has no CVSS score.
Weaknesses
Affected Products
| Product | Versions |
|---|---|
SambaSamba |
|
References
- USN-3595-2vendor-advisory
- 103387vdb-entry
- RHSA-2018:2613vendor-advisory
- RHSA-2018:2612vendor-advisory
- RHSA-2018:1883vendor-advisory
- DSA-4135vendor-advisory
- USN-3595-1vendor-advisory
- RHSA-2018:1860vendor-advisory
- RHSA-2018:3056vendor-advisory
- GLSA-201805-07vendor-advisory
- 1040493vdb-entry
- [debian-lts-announce] 20180327 [SECURITY] [DLA 1320-1] samba security updatemailing-list
- [debian-lts-announce] 20190409 [SECURITY] [DLA 1754-1] samba security updatemailing-list
- https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
- https://www.samba.org/samba/security/CVE-2018-1050.html
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03834en_us
- https://bugzilla.redhat.com/show_bug.cgi?id=1538771
- https://security.netapp.com/advisory/ntap-20180313-0001/
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.