https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 19:47:49 +0000 https://vulnerability.circl.lu/vuln/cve-2018-1050 <p><strong>Affected:</strong> Samba</p> <p>All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash.</p> <p><strong>Affected:</strong> Samba</p> <p>All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash.</p> https://vulnerability.circl.lu/vuln/cve-2018-1050 https://vulnerability.circl.lu/vuln/usn-3595-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: samba, Ubuntu:16.04:LTS: samba</p> <p>Björn Baumbach discovered that Samba incorrectly validated permissions when changing account passwords via LDAP. An authenticated attacker could use this issue to change the password of other users, including administrators, and perform actions as those users. (CVE-2018-1057)</p> <p>It was discovered that Samba incorrectly validated inputs to the RPC spoolss service. An authenticated attacker could use this issue to cause the service to crash, resulting in a denial of service. (CVE-2018-1050)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: samba, Ubuntu:16.04:LTS: samba</p> <p>Björn Baumbach discovered that Samba incorrectly validated permissions when changing account passwords via LDAP. An authenticated attacker could use this issue to change the password of other users, including administrators, and perform actions as those users. (CVE-2018-1057)</p> <p>It was discovered that Samba incorrectly validated inputs to the RPC spoolss service. An authenticated attacker could use this issue to cause the service to crash, resulting in a denial of service. (CVE-2018-1050)</p> https://vulnerability.circl.lu/vuln/usn-3595-1