NetSight
IP …
medium4.3

CVE-2018-10858

A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing.

Impact

A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.

Affected products

VendorProductAffected versions
DebianDebian Linux
Version 9.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04
SambaSamba
before 4.6.16
from 4.7.0 before 4.7.9
from 4.8.0 before 4.8.4
RedhatVirtualization
Version 4.0
RedhatVirtualization Host
Version 4.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0

Weakness classification

CWE-20CWE-119

References