CVE-2018-10858 — Improper Input Validation in Samba
Severity
8.8HIGHNVD
CNA4.3
EPSS
5.9%
top 9.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 22
Latest updateMay 14
Description
A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9
Affected Packages9 packages
Also affects: Debian Linux 9.0, Ubuntu Linux 14.04, 16.04, 18.04
🔴Vulnerability Details
4GHSA▶
GHSA-76v4-f6wg-3fqw: A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing↗2022-05-14
CVEList▶
CVE-2018-10858: A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing↗2018-08-22
OSV▶
CVE-2018-10858: A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing↗2018-08-22