CVE-2018-16853 : Security Advisory and Response

Samba versions 4.7.12, 4.8.7, and 4.9.3 are affected by a vulnerability that can lead to a crash in the KDC when built with the non-default MIT Kerberos configuration.

Understanding CVE-2018-16853

This CVE affects Samba versions 4.7.12, 4.8.7, and 4.9.3, exposing a vulnerability that can be exploited by a user within a Samba AD domain.

What is CVE-2018-16853?

Starting from Samba version 4.7.0, a vulnerability exists that allows a user to crash the KDC within a Samba AD domain if Samba is built using the non-default MIT Kerberos configuration.

The Impact of CVE-2018-16853

The vulnerability has a CVSS base score of 7.5 (High severity) with a high availability impact. It affects Samba versions 4.7.12, 4.8.7, and 4.9.3.

Technical Details of CVE-2018-16853

Samba's vulnerability and its impact on systems.

Vulnerability Description

The vulnerability in Samba versions 4.7.12, 4.8.7, and 4.9.3 allows a user within a Samba AD domain to crash the KDC when Samba is built with the non-default MIT Kerberos configuration.

Affected Systems and Versions

Product: Samba
Vendor: [UNKNOWN]
Versions: 4.7.12, 4.8.7, 4.9.3

Exploitation Mechanism

The vulnerability can be exploited by a user within a Samba AD domain, specifically when Samba is built using the non-default MIT Kerberos configuration.

Mitigation and Prevention

Steps to mitigate and prevent the CVE-2018-16853 vulnerability.

Immediate Steps to Take

Avoid building Samba AD DC with MIT Kerberos unless necessary
Apply security releases for Samba versions 4.7.12, 4.8.7, and 4.9.3

Long-Term Security Practices

Regularly monitor for security advisories from Samba
Implement secure configurations for Samba installations

Patching and Updates

Ensure all Samba installations are updated with the latest security releases