CVE-2018-16851

Samba from version 4.0.0 and before versions 4.7.12, 4.8.7, 4.9.3 is vulnerable to a denial of service. During the processing of an LDAP search before Samba's AD DC returns the LDAP entries to the client, the entries are cached in a single memory object with a maximum size of 256MB. When this size is reached, the Samba process providing the LDAP service will follow the NULL pointer, terminating the process. There is no further vulnerability associated with this issue, merely a denial of service.

• CWE-476
• CWE-476

• http://www.securityfocus.com/bid/106027Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16851Issue Tracking, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/12/msg00005.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202003-52Third Party Advisory
• https://security.netapp.com/advisory/ntap-20181127-0001/Third Party Advisory
• https://usn.ubuntu.com/3827-1/Third Party Advisory
• https://usn.ubuntu.com/3827-2/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4345Third Party Advisory
• https://www.samba.org/samba/security/CVE-2018-16851.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/106027Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16851Issue Tracking, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/12/msg00005.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202003-52Third Party Advisory
• https://security.netapp.com/advisory/ntap-20181127-0001/Third Party Advisory
• https://usn.ubuntu.com/3827-1/Third Party Advisory
• https://usn.ubuntu.com/3827-2/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4345Third Party Advisory
• https://www.samba.org/samba/security/CVE-2018-16851.htmlPatch, Vendor Advisory

Published

Nov 28, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-16846It was found in Ceph versions before 13.2.4 that authenticat…6.5
• CVE-2018-16847An OOB heap buffer r/w access issue was found in the NVM Exp…7.8
• CVE-2018-16848A Denial of Service (DoS) condition is possible in OpenStack…6.5
• CVE-2018-16849A flaw was found in openstack-mistral. By manipulating the S…3.1
• CVE-2018-1685IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Se…
• CVE-2018-16850postgresql before versions 11.1, 10.6 is vulnerable to a to …9.8
• CVE-2018-16852Samba from version 4.9.0 and before version 4.9.3 is vulnera…6.5
• CVE-2018-16853Samba from version 4.7.0 has a vulnerability that allows a u…7.5
• CVE-2018-16854A flaw was found in moodle versions 3.5 to 3.5.2, 3.4 to 3.4…6.5
• CVE-2018-16855An issue has been found in PowerDNS Recursor before version …7.5
• CVE-2018-16856In a default Red Hat Openstack Platform Director installatio…5.5
• CVE-2018-16857Samba from version 4.9.0 and before version 4.9.3 that have …7.4