CVE-2018-1050: Null Pointer Dereference
A flaw was found in Samba. A null pointer indirection in the printer server process may lead to denial of service.
Upstream bug:
https://bugzilla.samba.org/showbug.cgi?id=11343
Other sources
All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash.
— Ubuntu
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/sambato a version that resolves this vulnerability.Fixed in 4.7.6 - Upgrade
Upgrade
redhat/sambato a version that resolves this vulnerability.Fixed in 4.6.14 - Upgrade
Upgrade
redhat/sambato a version that resolves this vulnerability.Fixed in 4.5.16 - Upgrade
Upgrade
debian/sambato a version that resolves this vulnerability.Fixed in 2:4.17.12+dfsg-0+deb12u4Fixed in 2:4.22.11+dfsg-0+deb13u1Fixed in 2:4.22.10+dfsg-0+deb13u2Fixed in 2:4.25.1+dfsg-1
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1050?
CVE-2018-1050 has been classified as a medium-severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2018-1050?
To fix CVE-2018-1050, upgrading Samba to a patched version above 4.7.6 or applying a relevant security patch is recommended.
Which versions of Samba are affected by CVE-2018-1050?
All Samba versions from 4.0.0 onwards are affected by CVE-2018-1050.
What impact does CVE-2018-1050 have?
CVE-2018-1050 can potentially lead to a denial of service condition on the Samba printer server.
Is CVE-2018-1050 specific to any operating system?
CVE-2018-1050 affects multiple operating systems including Linux distributions that utilize Samba.