CVE-2015-7540
Publicada em · Atualizada em
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 7.1%
probabilidade de exploração
7.1%top 6% das CVEs
exploração observada
nãonenhuma fonte reporta
The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return values to ensure successful ASN.1 memory allocation, which allows remote attackers to cause a denial of service (memory consumption and daemon crash) via crafted packets.
Produtos afetados
n/a · n/aReferências
http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174076.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-December/174391.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=1288451https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=530d50a1abdcdf4d1775652d4c456c1274d83d8dhttps://git.samba.org/?p=samba.git%3Ba=commit%3Bh=9d989c9dd7a5b92d0c5d65287935471b83b6e884https://security.gentoo.org/glsa/201612-47https://www.samba.org/samba/security/CVE-2015-7540.htmlhttp://www.debian.org/security/2016/dsa-3433http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.htmlhttp://www.securityfocus.com/bid/79736http://www.securitytracker.com/id/1034492