CVE-2018-1140

A missing input sanitization flaw was found in the implementation of LDP database used for the LDAP server. An attacker could use this flaw to cause a denial of service against a samba server, used as a Active Directory Domain Controller. All versions of Samba from 4.8.0 onwards are vulnerable

• CWE-20
• CWE-20

• http://www.securityfocus.com/bid/105082Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1140Issue Tracking, Patch, Third Party Advisory
• https://bugzilla.samba.org/show_bug.cgi?id=13374Issue Tracking, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/202003-52
• https://security.netapp.com/advisory/ntap-20180814-0001/Third Party Advisory
• https://www.samba.org/samba/security/CVE-2018-1140.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/105082Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1140Issue Tracking, Patch, Third Party Advisory
• https://bugzilla.samba.org/show_bug.cgi?id=13374Issue Tracking, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/202003-52
• https://security.netapp.com/advisory/ntap-20180814-0001/Third Party Advisory
• https://www.samba.org/samba/security/CVE-2018-1140.htmlPatch, Vendor Advisory

Published

Aug 22, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11385An issue was discovered in the Security component in Symfony…
• CVE-2018-11386An issue was discovered in the HttpFoundation component in S…
• CVE-2018-1139A flaw was found in the way samba before 4.7.9 and 4.8.4 all…8.1
• CVE-2018-11392An arbitrary file upload vulnerability in /classes/profile.c…
• CVE-2018-11396ephy-session.c in libephymain.so in GNOME Web (aka Epiphany)…
• CVE-2018-11399SimpliSafe Original has Unencrypted Sensor Transmissions, wh…
• CVE-2018-11400In SimpliSafe Original, the Base Station fails to detect tam…
• CVE-2018-11401In SimpliSafe Original, RF Interference (e.g., an extremely …
• CVE-2018-11402SimpliSafe Original has Unencrypted Keypad Transmissions, wh…
• CVE-2018-11403DomainMod v4.09.03 has XSS via the assets/edit/account-owner…
• CVE-2018-11404DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-…
• CVE-2018-11405Kliqqi 2.0.2 has CSRF in admin/admin_users.php.