CVE-2018-10858mediumCWE-20

CVE-2018-10858: medium-severity vulnerability in The Samba Team samba

Published · Updated

Follow this CVE+ Monitor samba+ Monitor samba

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 4.3%
A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
Affected products
The Samba Team · samba
Related CVEs — The Samba Team samba

In the same product, most dangerous first.

CVE-2018-1140MEDIUMCVE-2018-1140EPSS 10.9%CVE-2018-1139MEDIUMCVE-2018-1139EPSS 3.1%CVE-2018-10918MEDIUMCVE-2018-10918EPSS 2.5%CVE-2018-10919MEDIUMCVE-2018-10919EPSS 2.2%