CVE-2018-14629: Medium severity Samba Samba vulnerability
Published Nov 28, 2018
·Updated
A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry, leading to denial of service.
Affected Software
11 affected componentsFixes available
Samba Samba>=4.0.0<4.7.12
Samba Samba>=4.8.0<4.8.7
Samba Samba>=4.8.8<4.9.3
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=18.04
Canonical Ubuntu Linux=18.10
Debian Debian Linux=8.0
Debian Debian Linux=9.0
debian/samba
2:4.13.13+dfsg-1~deb11u62:4.13.13+dfsg-1~deb11u72:4.17.12+dfsg-0+deb12u32:4.17.12+dfsg-0+deb12u12:4.22.6+dfsg-0+deb13u12:4.23.5+dfsg-1
Remediation
Patch Available
Event History
Nov 28, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:29 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·10:52 PM
Description
Feb 20, 2026
Data Sourced
via Ubuntu·05:08 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Debian·05:09 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-14629?
CVE-2018-14629 is classified as a denial of service vulnerability which can lead to service interruptions.
2
How do I fix CVE-2018-14629?
To mitigate CVE-2018-14629, upgrade to Samba versions 4.7.12, 4.8.7, or 4.9.3 or later.
3
What versions of Samba are affected by CVE-2018-14629?
Samba versions prior to 4.7.12, 4.8.7, and 4.9.3 are affected by CVE-2018-14629.
4
Who can exploit CVE-2018-14629?
An unprivileged local attacker could exploit CVE-2018-14629 to create a denial of service condition.
5
What systems are vulnerable to CVE-2018-14629?
CVE-2018-14629 affects various Ubuntu and Debian versions of Samba prior to the patched releases.