VulnerableCode Vulnerability Details

Search for vulnerabilities

Vulnerability details: VCID-gk9s-j9p8-aaab

Essentials
Severities (82)
References (28)
Severity details (13)
Exploits (0)
EPSS
History (0)

Vulnerability ID	VCID-gk9s-j9p8-aaab
Aliases	CVE-2018-16841
Summary	Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card authentication, Samba's KDC will call talloc_free() twice on the same memory if the principal in a validly signed certificate does not match the principal in the AS-REQ. This is only possible after authentication with a trusted certificate. talloc is robust against further corruption from a double-free with talloc_free() and directly calls abort(), terminating the KDC process.
Status	Published
Exploitability	0.5
Weighted Severity	8.0
Risk	4.0
Affected and Fixed Packages	Package Details

Weaknesses (2)

CWE-415	Double Free
CWE-416	Use After Free

System	Score	Found at
generic_textual	Medium	http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-16841.html
cvssv3	5.7	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16841.json
epss	0.00870	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.00870	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.00870	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.00870	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.01170	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.01170	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.01170	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.01170	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.01170	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.01170	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.01170	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.01170	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.01170	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.01170	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.06788	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
epss	0.09136	https://api.first.org/data/v1/epss?cve=CVE-2018-16841
rhbs	medium	https://bugzilla.redhat.com/show_bug.cgi?id=1642545
generic_textual	Medium	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14629
generic_textual	Medium	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16841
generic_textual	Medium	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16851
cvssv3	6.5	https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv2	4.0	https://nvd.nist.gov/vuln/detail/CVE-2018-16841
cvssv3	6.5	https://nvd.nist.gov/vuln/detail/CVE-2018-16841
cvssv3.1	6.5	https://nvd.nist.gov/vuln/detail/CVE-2018-16841
archlinux	High	https://security.archlinux.org/AVG-823
generic_textual	Medium	https://ubuntu.com/security/notices/USN-3827-1
generic_textual	Medium	https://ubuntu.com/security/notices/USN-3827-2
generic_textual	Medium	https://www.samba.org/samba/security/CVE-2018-16841.html

Reference id	Reference type	URL
		http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-16841.html
		https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16841.json
		https://api.first.org/data/v1/epss?cve=CVE-2018-16841
		https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16841
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14629
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16841
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16851
		https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
		https://security.gentoo.org/glsa/202003-52
		https://security.netapp.com/advisory/ntap-20181127-0001/
		https://ubuntu.com/security/notices/USN-3827-1
		https://ubuntu.com/security/notices/USN-3827-2
		https://usn.ubuntu.com/3827-1/
		https://usn.ubuntu.com/3827-2/
		https://www.debian.org/security/2018/dsa-4345
		https://www.samba.org/samba/security/CVE-2018-16841.html
		http://www.securityfocus.com/bid/106023
1642545		https://bugzilla.redhat.com/show_bug.cgi?id=1642545
ASA-201811-22		https://security.archlinux.org/ASA-201811-22
AVG-823		https://security.archlinux.org/AVG-823
cpe:2.3:a:samba:samba::::::::		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:samba:samba::::::::
cpe:2.3:o:canonical:ubuntu_linux:12.04::::esm:::		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04::::esm:::
cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts:::		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:16.04::::lts:::		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:18.04::::lts:::		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:18.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:18.10:::::::*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:18.10:::::::*
cpe:2.3:o:debian:debian_linux:9.0:::::::*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:::::::*
CVE-2018-16841		https://nvd.nist.gov/vuln/detail/CVE-2018-16841

No exploits are available.

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16841.json

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2018-16841

Exploitability (E)	Access Vector (AV)	Access Complexity (AC)	Authentication (Au)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
high functional unproven proof_of_concept not_defined	local adjacent_network network	high medium low	multiple single none	none partial complete	none partial complete	none partial complete

Exploitability (E)

Access Vector (AV)

Access Complexity (AC)

Authentication (Au)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

partial

complete

none

partial

complete

none

partial

complete

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2018-16841

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2018-16841

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Exploit Prediction Scoring System (EPSS)

Percentile	0.82163
EPSS Score	0.00870
Published At	Dec. 17, 2024, midnight

Date	Actor	Action	Source	VulnerableCode Version
There are no relevant records.