CVE-2015-3223: Medium severity samba vulnerability
As per samba upstream advisory:
All versions of Samba from 4.0.0 to 4.3.2 inclusive are vulnerable to a denial of service attack in the samba daemon LDAP server.
A malicious client can send packets that cause the LDAP server in the samba daemon process to become unresponsive, preventing the server from servicing any other requests.
This flaw is not exploitable beyond causing the code to loop expending CPU resources.
Other sources
The ldbwildcardcompare function in ldbmatch.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles certain zero values, which allows remote attackers to cause a denial of service (infinite loop) via crafted packets.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3223?
CVE-2015-3223 has a severity rating that typically indicates a denial of service attack vulnerability in the Samba LDAP server.
How do I fix CVE-2015-3223?
To mitigate CVE-2015-3223, you should upgrade Samba to version 4.3.3 or later as recommended by the Samba team.
Which versions of Samba are affected by CVE-2015-3223?
CVE-2015-3223 affects all versions of Samba from 4.0.0 to 4.3.2 inclusive.
What vulnerability does CVE-2015-3223 address?
CVE-2015-3223 addresses a vulnerability that allows a malicious client to send packets that can make the Samba LDAP server unresponsive.
Is CVE-2015-3223 related to network security?
Yes, CVE-2015-3223 is directly related to network security as it involves a denial of service issue in the Samba LDAP server.