CVE-2014-8143 Privilege escalation in n/a

What is CVE-2014-8143?

CVE-2014-8143 is a high-severity vulnerability in Samba Samba, published on 17 Jan 2015. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain Controller (AD DC) is configured, allows remote authenticated users to set the LDB userAccountControl UF_SERVER_TRUST_ACCOUNT bit, and consequently gain privileges, by leveraging delegation of authority for user-account or computer-account creation.

Weakness: CWE-264

Which versions are affected by CVE-2014-8143?

It affects 1 product.

Products include Samba Samba.

How do I fix CVE-2014-8143?

Upgrade to a fixed version.

Is CVE-2014-8143 being exploited?

There is no known exploitation of CVE-2014-8143 in the wild and no public exploit code.

Other vulnerabilities in Samba Samba

• CVE-2012-1182 Integer overflow in n/a Critical 10.0
• CVE-2007-2446 Memory corruption in n/a Critical 10.0
• CVE-2004-0600 Memory corruption in n/a Critical 10.0
• CVE-1999-0810 Denial of service in n/a Critical 10.0
• CVE-1999-0182 Memory corruption in n/a Critical 10.0

All Samba Samba vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2014-8143, ECHO-5ca8-ac49-cbd9, GHSA-g37q-w784-mfjr, UBUNTU-CVE-2014-8143, USN-2481-1.