CVE-2016-0771 Information disclosure in n/a
Remote authenticated users can cause denial of service or read sensitive memory via crafted DNS TXT records in Samba AD DC.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-0771?
CVE-2016-0771 is a medium-severity vulnerability in Samba Samba, published on 13 Mar 2016. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record.
Weakness: CWE-119
Which versions are affected by CVE-2016-0771?
It affects 1 product.
Products include Samba Samba.
How do I fix CVE-2016-0771?
Upgrade to a fixed version.
Is CVE-2016-0771 being exploited?
There is no known exploitation of CVE-2016-0771 in the wild and no public exploit code.
Other vulnerabilities in Samba Samba
Sources
Also known as DEBIAN-CVE-2016-0771, ECHO-3d57-486c-d5a0, GHSA-mjrq-735v-hm5h, UBUNTU-CVE-2016-0771.