https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 22:53:24 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-00878 bdu:2019-00878 https://cve.radiocsirt.org/vuln/bdu:2019-00878 https://cve.radiocsirt.org/vuln/certfr-2018-avi-571 certfr-2018-avi-571 https://cve.radiocsirt.org/vuln/certfr-2018-avi-571 https://cve.radiocsirt.org/vuln/cnvd-2019-08297 cnvd-2019-08297 https://cve.radiocsirt.org/vuln/cnvd-2019-08297 https://cve.radiocsirt.org/vuln/euvd-2026-68340 EUVD-2026-68340 https://cve.radiocsirt.org/vuln/euvd-2026-68340 https://cve.radiocsirt.org/vuln/fkie_cve-2018-16841 <p>Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card authentication, Samba&#39;s KDC will call talloc_free() twice on the same memory if the principal in a validly signed certificate does not match the principal in the AS-REQ. This is only possible after authentication with a trusted certificate. talloc is robust against further corruption from a double-free with talloc_free() and directly calls abort(), terminating the KDC process.</p> <p>Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card authentication, Samba&#39;s KDC will call talloc_free() twice on the same memory if the principal in a validly signed certificate does not match the principal in the AS-REQ. This is only possible after authentication with a trusted certificate. talloc is robust against further corruption from a double-free with talloc_free() and directly calls abort(), terminating the KDC process.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-16841 https://cve.radiocsirt.org/vuln/ghsa-q3v8-mj9m-2wq4 <p>Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card authentication, Samba&#39;s KDC will call talloc_free() twice on the same memory if the principal in a validly signed certificate does not match the principal in the AS-REQ. This is only possible after authentication with a trusted certificate. talloc is robust against further corruption from a double-free with talloc_free() and directly calls abort(), terminating the KDC process.</p> <p>Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card authentication, Samba&#39;s KDC will call talloc_free() twice on the same memory if the principal in a validly signed certificate does not match the principal in the AS-REQ. This is only possible after authentication with a trusted certificate. talloc is robust against further corruption from a double-free with talloc_free() and directly calls abort(), terminating the KDC process.</p> https://cve.radiocsirt.org/vuln/ghsa-q3v8-mj9m-2wq4 https://cve.radiocsirt.org/vuln/gsd-2018-16841 gsd-2018-16841 https://cve.radiocsirt.org/vuln/gsd-2018-16841 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-16841 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: samba, Ubuntu:16.04:LTS: samba, Ubuntu:18.04:LTS: samba</p> <p>Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card authentication, Samba&#39;s KDC will call talloc_free() twice on the same memory if the principal in a validly signed certificate does not match the principal in the AS-REQ. This is only possible after authentication with a trusted certificate. talloc is robust against further corruption from a double-free with talloc_free() and directly calls abort(), terminating the KDC process.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: samba, Ubuntu:16.04:LTS: samba, Ubuntu:18.04:LTS: samba</p> <p>Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card authentication, Samba&#39;s KDC will call talloc_free() twice on the same memory if the principal in a validly signed certificate does not match the principal in the AS-REQ. This is only possible after authentication with a trusted certificate. talloc is robust against further corruption from a double-free with talloc_free() and directly calls abort(), terminating the KDC process.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-16841