NVD

Id
28088  
Name
CVE-2015-7540  
Description
The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return values to ensure successful ASN.1 memory allocation, which allows remote attackers to cause a denial of service (memory consumption and daemon crash) via crafted packets.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2015-12-29  
Modified Date
2016-12-30  
Seq
2015-7540  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
147494 28088 CVE-2015-7540 FEDORA-2015-b36076d32e  View
147495 28088 CVE-2015-7540 FEDORA-2015-0e0879cc8a  View
147496 28088 CVE-2015-7540 openSUSE-SU-2015:2356  View
147497 28088 CVE-2015-7540 DSA-3433  View
147498 28088 CVE-2015-7540 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
147499 28088 CVE-2015-7540 79736  View
147500 28088 CVE-2015-7540 1034492  View
147501 28088 CVE-2015-7540 USN-2855-1  View
147502 28088 CVE-2015-7540 USN-2855-2  View
147503 28088 CVE-2015-7540 https://bugzilla.redhat.com/show_bug.cgi?id=1288451  View
147504 28088 CVE-2015-7540 https://git.samba.org/?p=samba.git;a=commit;h=530d50a1abdcdf4d1775652d4c456c1274d83d8d  View
147505 28088 CVE-2015-7540 https://git.samba.org/?p=samba.git;a=commit;h=9d989c9dd7a5b92d0c5d65287935471b83b6e884  View
147506 28088 CVE-2015-7540 GLSA-201612-47  View
147507 28088 CVE-2015-7540 https://www.samba.org/samba/security/CVE-2015-7540.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11259 JVNDB-2015-006579 Samba の AD ドメインコントローラの LDAP サーバにおけるサービス運用妨害 (DoS) の脆弱性 Samba の AD ドメインコントローラの LDAP サーバは、ASN.1 メモリ割り当ての成功を保証する戻り値をチェックしないため、サービス運用妨害 (メモリ消費およびデーモンクラッシュ) 状態にされる脆弱性が存在します。 CVE-2015-7540 84765 CVE-2015-7540 28088 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006579.html 2015-12-10 2016-01-05 View