CVE-2018-16853: High severity samba vulnerability
Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is built in the non-default MIT Kerberos configuration. With this advisory the Samba Team clarify that the MIT Kerberos build of the Samba AD DC is considered experimental. Therefore the Samba Team will not issue security patches for this configuration. Additionally, Samba 4.7.12, 4.8.7 and 4.9.3 have been issued as security releases to prevent building of the AD DC with MIT Kerberos unless --with-experimental-mit-ad-dc is specified to the configure command.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-16853?
CVE-2018-16853 has been classified as a moderate severity vulnerability affecting Samba AD domains.
How do I fix CVE-2018-16853?
To fix CVE-2018-16853, upgrade Samba to a version higher than 4.7.12, 4.8.7, or 4.9.3, depending on your installed version.
Who is affected by CVE-2018-16853?
CVE-2018-16853 affects users operating a Samba Active Directory domain that is built with the MIT Kerberos configuration.
What types of vulnerabilities does CVE-2018-16853 represent?
CVE-2018-16853 represents a denial-of-service vulnerability where a user can crash the Key Distribution Center (KDC).
Is the MIT Kerberos build of Samba stable according to CVE-2018-16853?
The MIT Kerberos build of Samba is considered experimental and may not be stable as highlighted by CVE-2018-16853.