A flaw was found in Sambas internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.
Weakness
The product’s resource pool is not large enough to handle peak demand, which allows an attacker to prevent others from accessing the resource by using a (relatively) large number of requests for resources.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Samba | Ubuntu | devel | * |
| Samba | Ubuntu | jammy | * |
| Samba | Ubuntu | noble | * |
| Samba | Ubuntu | resolute | * |
| Samba | Ubuntu | upstream | * |