Security Advisory

CVE-2016-0771

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-03-13 22:00:00
Last updated 2024-08-05 22:30:04
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record.