CVE-2014-0239

 

Published at: - 28-05-2014 06:58

Last modified: - 29-08-2022 10:04

Total changes: - 2

Description

The internal DNS server in Samba 4.x before 4.0.18 does not check the QR field in the header section of an incoming DNS message before sending a response, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged response packet that triggers a communication loop, a related issue to CVE-1999-0103.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:N/I:N/A:P

 

Verification logic

 

Reference

• http://www.samba.org/samba/security/CVE-2014-0239
• 1030309-Third Party Advisory, VDB Entry
• 59579-Third Party Advisory
• GLSA-201502-15-Third Party Advisory
• 67691-Third Party Advisory, VDB Entry

 

Keywords

NVD

 

CVE-2014-0239

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures