Every CVE Search/ Get API key

CVE-2018-16853

Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the...

7.5 HighFix available

Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is built in the non-default MIT Kerberos configuration. With this advisory the Samba Team clarify that the MIT Kerberos build of the Samba AD DC is considered experimental. Therefore the Samba Team will not issue security patches for this configuration. Additionally, Samba 4.7.12, 4.8.7 and 4.9.3 have been issued as security releases to prevent building of the AD DC with MIT Kerberos unless --with-experimental-mit-ad-dc is specified to the configure command.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

3.08%Up 1.8 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 7.5

Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is built in the non-default MIT Kerberos configuration. With this advisory the Samba Team clarify that the MIT Kerberos build of the Samba AD DC is considered experimental. Therefore the Samba Team will not issue security patches for this configuration. Additionally, Samba 4.7.12, 4.8.7 and 4.9.3 have been issued as security releases to prevent building of the AD DC with MIT Kerberos unless --with-experimental-mit-ad-dc is specified to the configure command.

Record
CVE-2018-16853
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400
Updated
2026-11-02
EUVDEUVD-2018-8647 7.5

Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is built in the non-default MIT Kerberos configuration. With this advisory the Samba Team clarify that the MIT Kerberos build of the Samba AD DC is considered experimental. Therefore the Samba Team will not issue security patches for this configuration. Additionally, Samba 4.7.12, 4.8.7 and 4.9.3 have been issued as security releases to prevent building of the AD DC with MIT Kerberos unless --with-experimental-mit-ad-dc is specified to the configure command.

Record
EUVD-2018-8647
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-wggh-6fmq-953v 5.9

Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the...

Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is built in the non-default MIT Kerberos configuration. With this advisory the Samba Team clarify that the MIT Kerberos build of the Samba AD DC is considered experimental. Therefore the Samba Team will not issue security patches for this configuration. Additionally, Samba 4.7.12, 4.8.7 and 4.9.3 have been issued as security releases to prevent building of the AD DC with MIT Kerberos unless --with-experimental-mit-ad-dc is specified to the configure command.

Record
GHSA-wggh-6fmq-953v
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400
Updated
2026-11-02
NVD 7.5

Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is built in the non-default MIT Kerberos configuration. With this advisory the Samba Team clarify that the MIT Kerberos build of the Samba AD DC is considered experimental. Therefore the Samba Team will not issue security patches for this configuration. Additionally, Samba 4.7.12, 4.8.7 and 4.9.3 have been issued as security releases to prevent building of the AD DC with MIT Kerberos unless --with-experimental-mit-ad-dc is specified to the configure command.

Record
CVE-2018-16853
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-400
Updated
2026-11-02
OSVALPINE-CVE-2018-16853 5.9

Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is built in the non-default MIT Kerberos configuration. With this advisory the Samba Team clarify that the MIT Kerberos build of the Samba AD DC is considered experimental. Therefore the Samba Team will not issue security patches for this configuration. Additionally, Samba 4.7.12, 4.8.7 and 4.9.3 have been issued as security releases to prevent building of the AD DC with MIT Kerberos unless --with-experimental-mit-ad-dc is specified to the configure command.

Record
ALPINE-CVE-2018-16853
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 5.9

Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is built in the non-default MIT Kerberos configuration. With this advisory the Samba Team clarify that the MIT Kerberos build of the Samba AD DC is considered experimental. Therefore the Samba Team will not issue security patches for this configuration. Additionally, Samba 4.7.12, 4.8.7 and 4.9.3 have been issued as security releases to prevent building of the AD DC with MIT Kerberos unless --with-experimental-mit-ad-dc is specified to the configure command.

Record
CVE-2018-16853
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2018-16853 5.9

Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is built in the non-default MIT Kerberos configuration. With this advisory the Samba Team clarify that the MIT Kerberos build of the Samba AD DC is considered experimental. Therefore the Samba Team will not issue security patches for this configuration. Additionally, Samba 4.7.12, 4.8.7 and 4.9.3 have been issued as security releases to prevent building of the AD DC with MIT Kerberos unless --with-experimental-mit-ad-dc is specified to the configure command.

Record
DEBIAN-CVE-2018-16853
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2024:11365-1 No score

ctdb-4.14.6+git.182.2205d5224e3-1.1 on GA media

These are all security issues fixed in the ctdb-4.14.6+git.182.2205d5224e3-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11365-1
Updated
2026-11-02
OSVSUSE-SU-2018:4066-1 No score

Security update for samba

This update for samba fixes the following issues:

Update to samba version 4.7.11.

Security issues fixed:

  • CVE-2018-14629: Fixed CNAME loops in Samba AD DC DNS server (bsc#1116319).
  • CVE-2018-16841: Fixed segfault on PKINIT when mis-matching principal (bsc#1116320).
  • CVE-2018-16851: Fixed NULL pointer de-reference in Samba AD DC LDAP server (bsc#1116322).
  • CVE-2018-16853: Mark MIT support for the AD DC experimental (bsc#1116324).

Non-security issues fixed:

  • Fixed do not take over stderr when there is no log file (bsc#1101499).
  • Fixed ctdb_mutex_ceph_rados_helper deadlock; (bsc#1102230).
  • Fixed ntlm authentications with 'winbind use default domain = yes'; (bsc#1068059).
  • Fixed idmap_rid to have primary group other than 'Domain Users'; (bsc#1087931).
  • Fixed windows domain with one way trust that was not working (bsc#1087303).
Record
SUSE-SU-2018:4066-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
samba
Alpine:v3.10
 4.7.0 up to 4.8.7-r0
4.8.7-r0
samba
Alpine:v3.11
 4.7.0 up to 4.8.7-r0
4.8.7-r0
samba
Alpine:v3.12
 4.7.0 up to 4.8.7-r0
4.8.7-r0
samba
Alpine:v3.13
 4.7.0 up to 4.8.7-r0
4.8.7-r0
samba
Alpine:v3.14
 4.7.0 up to 4.8.7-r0
4.8.7-r0
samba
Alpine:v3.15
 4.7.0 up to 4.8.7-r0
4.8.7-r0
samba
Alpine:v3.16
 4.7.0 up to 4.8.7-r0
4.8.7-r0
samba
Alpine:v3.17
 4.7.0 up to 4.8.7-r0
4.8.7-r0
samba
Alpine:v3.18
 4.7.0 up to 4.8.7-r0
4.8.7-r0
samba
Alpine:v3.19
 4.7.0 up to 4.8.7-r0
4.8.7-r0
Show 13 moreShow less
Affected packages
PackageAffectedFixed
samba
Alpine:v3.20
 4.7.0 up to 4.8.7-r0
4.8.7-r0
samba
Alpine:v3.21
 4.7.0 up to 4.8.7-r0
4.8.7-r0
samba
Alpine:v3.22
 4.7.0 up to 4.8.7-r0
4.8.7-r0
samba
Alpine:v3.23
 4.7.0 up to 4.8.7-r0
4.8.7-r0
samba
Alpine:v3.24
 4.7.0 up to 4.8.7-r0
4.8.7-r0
samba
Alpine:v3.9
 4.7.0 up to 4.8.7-r0
4.8.7-r0
samba
Debian:12
 before 2:4.9.2+dfsg-2
2:4.9.2+dfsg-2
samba
Debian:13
 before 2:4.9.2+dfsg-2
2:4.9.2+dfsg-2
samba
Debian:14
 before 2:4.9.2+dfsg-2
2:4.9.2+dfsg-2
samba
SUSE:Linux Enterprise Module for Basesystem 15
From an advisory covering 4 CVEs
 before 4.7.11+git.140.6bd0e5b30d8-4.21.1
4.7.11+git.140.6bd0e5b30d8-4.21.1
samba
SUSE:Linux Enterprise Module for Package Hub 15
From an advisory covering 4 CVEs
 before 4.7.11+git.140.6bd0e5b30d8-4.21.1
4.7.11+git.140.6bd0e5b30d8-4.21.1
samba
SUSE:Linux Enterprise High Availability Extension 15
From an advisory covering 4 CVEs
 before 4.7.11+git.140.6bd0e5b30d8-4.21.1
4.7.11+git.140.6bd0e5b30d8-4.21.1
samba
openSUSE:Tumbleweed
From an advisory covering 66 CVEs
 before 4.14.6+git.182.2205d5224e3-1.1
4.14.6+git.182.2205d5224e3-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-16853 is a high vulnerability (CVSS 7.5) in [unknown] Samba, published November 28, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.08%, the 87th percentile. Fixed in samba 4.8.7-r0.

References

Show 79 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open