CVE-2015-7540

The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return values to ensure successful ASN.1 memory allocation, which allows remote attackers to cause a denial of service (memory consumption and daemon crash) via crafted packets.

• CWE-399

• http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174076.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174391.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.htmlMailing List, Third Party Advisory
• http://www.debian.org/security/2016/dsa-3433Third Party Advisory
• http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.htmlThird Party Advisory
• http://www.securityfocus.com/bid/79736Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1034492Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2855-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-2855-2Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1288451Issue Tracking, Third Party Advisory
• https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=530d50a1abdcdf4d1775652d4c456c1274d83d8d
• https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=9d989c9dd7a5b92d0c5d65287935471b83b6e884
• https://security.gentoo.org/glsa/201612-47Third Party Advisory
• https://www.samba.org/samba/security/CVE-2015-7540.htmlVendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174076.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174391.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.htmlMailing List, Third Party Advisory
• http://www.debian.org/security/2016/dsa-3433Third Party Advisory
• http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.htmlThird Party Advisory
• http://www.securityfocus.com/bid/79736Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1034492Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2855-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-2855-2Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1288451Issue Tracking, Third Party Advisory
• https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=530d50a1abdcdf4d1775652d4c456c1274d83d8d
• https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=9d989c9dd7a5b92d0c5d65287935471b83b6e884
• https://security.gentoo.org/glsa/201612-47Third Party Advisory
• https://www.samba.org/samba/security/CVE-2015-7540.htmlVendor Advisory

Published

Dec 29, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7534Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-7535Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-7536Cross-site scripting (XSS) vulnerability in Jenkins before 1…
• CVE-2015-7537Cross-site request forgery (CSRF) vulnerability in Jenkins b…
• CVE-2015-7538Jenkins before 1.640 and LTS before 1.625.2 allow remote att…
• CVE-2015-7539The Plugins Manager in Jenkins before 1.640 and LTS before 1…
• CVE-2015-7541The initialize method in the Histogram class in lib/colorsco…
• CVE-2015-7542A vulnerability exists in libgwenhywfar through 4.12.0 due t…5.3
• CVE-2015-7543aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly …
• CVE-2015-7544redhat-support-plugin-rhev in Red Hat Enterprise Virtualizat…
• CVE-2015-7545The (1) git-remote-ext and (2) unspecified other remote help…
• CVE-2015-7546The identity service in OpenStack Identity (Keystone) before…7.5