CVE-2018-10858 samba: insufficient input validation in libsmbclient

SUMMARY

Not exposed

CVE ID

CVE-2018-10858

DESCRIPTION

A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client.

CVSS3 Base Score    4.3
Public Date: 2018-08-16
 

RESOLUTION

Unitrends assessment:  Not exposed (false positive)
     Red Hat Enterprise Linux 6 samba is not affected.

 

LINK TO ADVISORIES

• https://access.redhat.com/security/cve/cve-2018-10858 https://nvd.nist.gov/vuln/detail/CVE-2018-10858 https://www.samba.org/samba/security/CVE-2018-10858.html