CVE-2018-10918

A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer. An authenticated attacker could use this flaw to crash a samba server in an Active Directory Domain Controller configuration. Samba versions before 4.7.9 and 4.8.4 are vulnerable.

• CWE-476
• CWE-476

• http://www.securityfocus.com/bid/105083Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10918Issue Tracking, Third Party Advisory
• https://security.gentoo.org/glsa/202003-52
• https://security.netapp.com/advisory/ntap-20180814-0001/Third Party Advisory
• https://usn.ubuntu.com/3738-1/Third Party Advisory
• https://www.samba.org/samba/security/CVE-2018-10918.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/105083Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10918Issue Tracking, Third Party Advisory
• https://security.gentoo.org/glsa/202003-52
• https://security.netapp.com/advisory/ntap-20180814-0001/Third Party Advisory
• https://usn.ubuntu.com/3738-1/Third Party Advisory
• https://www.samba.org/samba/security/CVE-2018-10918.htmlPatch, Vendor Advisory

Published

Aug 22, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-10912keycloak before version 4.0.0.final is vulnerable to a infin…4.9
• CVE-2018-10913An information disclosure vulnerability was discovered in gl…6.5
• CVE-2018-10914It was found that an attacker could issue a xattr request vi…6.5
• CVE-2018-10915A vulnerability was found in libpq, the default PostgreSQL c…8.5
• CVE-2018-10916It has been discovered that lftp up to and including version…5.3
• CVE-2018-10917pulp 2.16.x and possibly older is vulnerable to an improper …6.8
• CVE-2018-10919The Samba Active Directory LDAP server was vulnerable to an …4.3
• CVE-2018-1092The ext4_iget function in fs/ext4/inode.c in the Linux kerne…
• CVE-2018-10920Improper input validation bug in DNS resolver component of K…6.8
• CVE-2018-10921Certain input files may trigger an integer overflow in ttemb…4.3
• CVE-2018-10922An input validation flaw exists in ttembed. With a crafted i…7.5
• CVE-2018-10923It was found that the "mknod" call derived from mknod(2) can…8.1