UBUNTU-CVE-2018-16841

    Dashboard / Vulnerabilities / UBUNTU-CVE-2018-16841

    UBUNTU-CVE-2018-16841

    Published: 27 Nov 2018Last Modified: 22 Apr 2026
    Upstream:
    CVE-2018-16841

    Summary:

    Details: Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card authentication, Samba's KDC will call talloc_free() twice on the same memory if the principal in a validly signed certificate does not match the principal in the AS-REQ. This is only possible after authentication with a trusted certificate. talloc is robust against further corruption from a double-free with talloc_free() and directly calls abort(), terminating the KDC process.

    References: https://ubuntu.com/security/CVE-2018-16841, https://www.samba.org/samba/security/CVE-2018-16841.html, https://ubuntu.com/security/notices/USN-3827-1, https://ubuntu.com/security/notices/USN-3827-2, https://www.cve.org/CVERecord?id=CVE-2018-16841

    Affected packages

    Package

    Name: samba

    Purl: pkg:deb/ubuntu/samba@2:4.3.11+dfsg-0ubuntu0.14.04.19?arch=source&distro=trusty

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -2:4.3.11+dfsg-0ubuntu0.14.04.19

    Affected versions

    2:3.6.18-1ubuntu3

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High