Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Svyatoslav Phirsov

#28966de 53,639
8.8CVSS total
Vulnerabilidades · 1
PT-2018-2736
8.8
2018-08-14
Samba · Samba · CVE-2018-10858
**Name of the Vulnerable Software and Affected Versions** Samba versions prior to 4.6.16 Samba versions prior to 4.7.9 Samba versions prior to 4.8.4 **Description** The issue is related to a heap-buffer overflow that occurs when Samba clients process extra long filenames in a directory listing. This can be exploited by a malicious Samba server to cause arbitrary code execution on a Samba client. The problem arises due to insufficient input validation in libsmbclient, allowing attackers to overwrite client heap memory. **Recommendations** For Samba versions prior to 4.6.16, update to version 4.6.16 or later. For Samba versions prior to 4.7.9, update to version 4.7.9 or later. For Samba versions prior to 4.8.4, update to version 4.8.4 or later.