A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samba user could send an empty UDP packet to cause the samba server to crash.
The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Samba | Samba | 4.10.0 (including) | 4.10.17 (excluding) |
| Samba | Samba | 4.11.0 (including) | 4.11.11 (excluding) |
| Samba | Samba | 4.12.0 (including) | 4.12.4 (excluding) |
| Samba | Ubuntu | bionic | * |
| Samba | Ubuntu | devel | * |
| Samba | Ubuntu | eoan | * |
| Samba | Ubuntu | focal | * |
| Samba | Ubuntu | trusty | * |
| Samba | Ubuntu | trusty/esm | * |
| Samba | Ubuntu | xenial | * |