PT-2014-1431 · Samba+2 · Samba+2

Published 2014-05-28 · Updated 2024-06-15 · CVE-2014-0239

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Samba versions prior to 4.0.18

Description The internal DNS server in Samba does not check the QR field in the header section of an incoming DNS message before sending a response. This allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged response packet that triggers a communication loop.

Recommendations For versions prior to 4.0.18, update to version 4.0.18 or later to resolve the issue. As a temporary workaround, consider restricting access to the internal DNS server to minimize the risk of exploitation.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2014-1728

BDU:2015-00391

CVE-2014-0239

ECHO-D287-EF1A-DDD2

OPENSUSE-SU-2024:10069-1

USN-2257-1

Affected Products

Alt Linux

Samba

Ubuntu

References · 75

• https://osv.dev/vulnerability/CVE-2014-0239 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10069-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2014-0239 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-0239 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201502-15.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-0239 · Security Note
• https://ubuntu.com/security/CVE-2014-3493 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-0239 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-0239 · Vendor Advisory
• http://samba.org/samba/security/CVE-2014-0239 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2257-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-2257-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-0178 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-0244 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-00391 · Security Note