CVE-2018-14629

A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry, leading to denial of service.

• CWE-400
• CWE-835

• http://www.securityfocus.com/bid/106022Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14629Exploit, Issue Tracking, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/12/msg00005.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202003-52
• https://security.netapp.com/advisory/ntap-20181127-0001/Third Party Advisory
• https://usn.ubuntu.com/3827-1/Third Party Advisory
• https://usn.ubuntu.com/3827-2/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4345Third Party Advisory
• https://www.samba.org/samba/security/CVE-2018-14629.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/106022Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14629Exploit, Issue Tracking, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/12/msg00005.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202003-52
• https://security.netapp.com/advisory/ntap-20181127-0001/Third Party Advisory
• https://usn.ubuntu.com/3827-1/Third Party Advisory
• https://usn.ubuntu.com/3827-2/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4345Third Party Advisory
• https://www.samba.org/samba/security/CVE-2018-14629.htmlPatch, Vendor Advisory

Published

Nov 28, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-14623A SQL injection flaw was found in katello's errata-related A…4.3
• CVE-2018-14624A vulnerability was discovered in 389-ds-base through versio…7.5
• CVE-2018-14625A flaw was found in the Linux Kernel where an attacker may b…5.3
• CVE-2018-14626PowerDNS Authoritative Server 4.1.0 up to 4.1.4 inclusive an…5.3
• CVE-2018-14627The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 …5.3
• CVE-2018-14628An information leak vulnerability was discovered in Samba's …4.3
• CVE-2018-1463IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtua…6.5
• CVE-2018-14630moodle before versions 3.5.2, 3.4.5, 3.3.8, 3.1.14 is vulner…8.8
• CVE-2018-14631moodle before versions 3.5.2, 3.4.5, 3.3.8 is vulnerable to …8.8
• CVE-2018-14632An out of bound write can occur when patching an Openshift o…7.7
• CVE-2018-14633A security flaw was found in the chap_server_compute_md5() f…7
• CVE-2018-14634An integer overflow flaw was found in the Linux kernel's cre…7.8