CVE-2018-1050

—

CVSS 3.1

4.3 medium

EPSS

7%p93

Published

Mar 13, 2018 (Mar 13, 2018)

Modified

Jun 17, 2026

Description

All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash.

Vendors: canonical samba debian redhat
Products: ubuntu linux, samba, debian linux, enterprise linux desktop, enterprise linux server, enterprise linux workstation
Weakness: CWE-476
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (6.5%)

In the news2 stories

Update Samba Servers Immediately to Patch Password Reset and DoS Vulnerabilities

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2018Vulnerability CVE-2018-1050 CVE-2018-1057

Samba fixed two critical vulnerabilities, update your version as soon as possible

Security AffairsMar 13, 18:48 UTC · Mar 13, 2018Vulnerability CVE-2018-1050 CVE-2018-1057