CVE-2018-10858 Memory corruption in samba
A malicious Samba server can trigger a heap-buffer overflow in Samba clients, leading to arbitrary code execution on the client system.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2018-10858?
CVE-2018-10858 is a medium-severity memory corruption vulnerability in Canonical Ubuntu Linux, published on 22 Aug 2018. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.
Official description
A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
Which versions are affected by CVE-2018-10858?
It affects 8 products.
Linux distribution packages (23)
samba SUSE:Enterprise Storage 4 | All versions | 4.4.2-38.20.1 |
samba SUSE:Enterprise Storage 5 | All versions | 4.6.14+git.157.c2d53c2b191-3.29.1 |
samba SUSE:Linux Enterprise Desktop 12 SP3 | All versions | 4.6.14+git.157.c2d53c2b191-3.29.1 |
samba SUSE:Linux Enterprise High Availability Extension 12 SP2 | All versions | 4.4.2-38.20.1 |
samba SUSE:Linux Enterprise High Availability Extension 12 SP3 | All versions | 4.6.14+git.157.c2d53c2b191-3.29.1 |
samba SUSE:Linux Enterprise Point of Sale 11 SP3 | All versions | 3.6.3-94.14.2 |
samba-doc SUSE:Linux Enterprise Point of Sale 11 SP3 | All versions | 3.6.3-94.14.2 |
samba SUSE:Linux Enterprise Server 11 SP3-LTSS | All versions | 3.6.3-94.14.2 |
samba-doc SUSE:Linux Enterprise Server 11 SP3-LTSS | All versions | 3.6.3-94.14.2 |
samba SUSE:Linux Enterprise Server 11 SP3-TERADATA | All versions | 3.6.3-94.14.2 |
samba-doc SUSE:Linux Enterprise Server 11 SP3-TERADATA | All versions | 3.6.3-94.14.2 |
samba SUSE:Linux Enterprise Server 11 SP4 | All versions | 3.6.3-94.14.2 |
samba-doc SUSE:Linux Enterprise Server 11 SP4 | All versions | 3.6.3-94.14.2 |
samba SUSE:Linux Enterprise Server 12 SP2-BCL | All versions | 4.4.2-38.20.1 |
samba SUSE:Linux Enterprise Server 12 SP2-LTSS | All versions | 4.4.2-38.20.1 |
samba SUSE:Linux Enterprise Server 12 SP3 | All versions | 4.6.14+git.157.c2d53c2b191-3.29.1 |
samba SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | All versions | 3.6.3-94.14.2 |
samba-doc SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | All versions | 3.6.3-94.14.2 |
samba SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | All versions | 4.4.2-38.20.1 |
samba SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | All versions | 4.6.14+git.157.c2d53c2b191-3.29.1 |
samba SUSE:Linux Enterprise Software Development Kit 11 SP4 | All versions | 3.6.3-94.14.2 |
samba SUSE:Linux Enterprise Software Development Kit 12 SP3 | All versions | 4.6.14+git.157.c2d53c2b191-3.29.1 |
samba SUSE:OpenStack Cloud 7 | All versions | 4.4.2-38.20.1 |
Products include Canonical Ubuntu Linux, Debian Debian Linux, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Workstation, Redhat Virtualization and 2 more.
How do I fix CVE-2018-10858?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2018-10858 being exploited?
There is no known exploitation of CVE-2018-10858 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as ALPINE-CVE-2018-10858, DEBIAN-CVE-2018-10858, ECHO-d03e-1f78-2a94, GHSA-76v4-f6wg-3fqw, SUSE-SU-2018:2319-1, SUSE-SU-2018:2320-1 and 3 more.