未評価
Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is built in the non-default MIT Kerbe...
CVE-2018-16853
SecPulse初出
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Alpine Linux ALPINE-CVE-2018-16853 samba 修正版: 4.8.7-r0
- Debian DEBIAN-CVE-2018-16853 samba 修正版: 2:4.9.2+dfsg-2
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is built in the non-default MIT Kerberos configuration. With this advisory the Samba Team clarify that the MIT Kerberos build of the Samba AD DC is considered experimental. Therefore the Samba Team will not issue security patches for this configuration. Additionally, Samba 4.7.12, 4.8.7 and 4.9.3 have been issued as security releases to prevent building of the AD DC with MIT Kerberos unless --with-experimental-mit-ad-dc is specified to the configure command.
参照URL
- advisory securityfocus.com
- advisory security.gentoo.org
- advisory security.netapp.com
- advisory samba.org
- report bugzilla.redhat.com