CVE-2018-16841: Double Free
Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card authentication, Samba's KDC will call tallocfree() twice on the same memory if the principal in a validly signed certificate does not match the principal in the AS-REQ. This is only possible after authentication with a trusted certificate. talloc is robust against further corruption from a double-free with tallocfree() and directly calls abort(), terminating the KDC process.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-16841?
CVE-2018-16841 is classified as a denial of service vulnerability that can disrupt the normal operation of affected Samba versions.
How do I fix CVE-2018-16841?
To mitigate CVE-2018-16841, upgrade Samba to version 4.7.12, 4.8.7, or 4.9.3, or apply the recommended patches from your distribution.
Which Samba versions are affected by CVE-2018-16841?
CVE-2018-16841 affects Samba versions prior to 4.7.12, 4.8.7, and 4.9.3, including all versions before 4.3.0.
Is CVE-2018-16841 exploitable remotely?
Yes, CVE-2018-16841 can be exploited remotely if Samba is configured to accept smart-card authentication.
What are the potential impacts of CVE-2018-16841?
The impact of CVE-2018-16841 includes potential service disruption due to the denial of service caused by the vulnerability.