NVD

Id
25114  
Name
CVE-2015-3223  
Description
The ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles certain zero values, which allows remote attackers to cause a denial of service (infinite loop) via crafted packets.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2015-12-29  
Modified Date
2016-12-30  
Seq
2015-3223  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
132779 25114 CVE-2015-3223 FEDORA-2015-b36076d32e  View
132780 25114 CVE-2015-3223 FEDORA-2015-0e0879cc8a  View
132781 25114 CVE-2015-3223 SUSE-SU-2015:2304  View
132782 25114 CVE-2015-3223 SUSE-SU-2015:2305  View
132783 25114 CVE-2015-3223 openSUSE-SU-2015:2354  View
132784 25114 CVE-2015-3223 openSUSE-SU-2015:2356  View
132785 25114 CVE-2015-3223 openSUSE-SU-2016:1064  View
132786 25114 CVE-2015-3223 DSA-3433  View
132787 25114 CVE-2015-3223 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
132788 25114 CVE-2015-3223 79731  View
132789 25114 CVE-2015-3223 1034493  View
132790 25114 CVE-2015-3223 USN-2855-1  View
132791 25114 CVE-2015-3223 USN-2855-2  View
132792 25114 CVE-2015-3223 USN-2856-1  View
132793 25114 CVE-2015-3223 https://bugzilla.redhat.com/show_bug.cgi?id=1290287  View
132794 25114 CVE-2015-3223 https://git.samba.org/?p=samba.git;a=commit;h=aa6c27148b9d3f8c1e4fdd5dd46bfecbbd0ca465  View
132795 25114 CVE-2015-3223 https://git.samba.org/?p=samba.git;a=commit;h=ec504dbf69636a554add1f3d5703dd6c3ad450b8  View
132796 25114 CVE-2015-3223 GLSA-201612-47  View
132797 25114 CVE-2015-3223 https://www.samba.org/samba/security/CVE-2015-3223.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11254 JVNDB-2015-006574 Samba の AD LDAP サーバで使用される ldb の ldb_match.c の ldb_wildcard_compare 関数におけるサービス運用妨害 (DoS) の脆弱性 Samba の AD LDAP サーバで使用される ldb の ldb_match.c の ldb_wildcard_compare 関数は、特定のゼロ値を誤って処理するため、サービス運用妨害 (無限ループ) 状態にされる脆弱性が存在します。 CVE-2015-3223 80448 CVE-2015-3223 25114 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006574.html 2015-12-10 2016-01-05 View