CVE-2018-16853

Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is built in the non-default MIT Kerberos configuration. With this advisory the Samba Team clarify that the MIT Kerberos build of the Samba AD DC is considered experimental. Therefore the Samba Team will not issue security patches for this configuration. Additionally, Samba 4.7.12, 4.8.7 and 4.9.3 have been issued as security releases to prevent building of the AD DC with MIT Kerberos unless --with-experimental-mit-ad-dc is specified to the configure command.

• CWE-400
• CWE-400

• http://www.securityfocus.com/bid/106026Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16853Issue Tracking, Third Party Advisory
• https://security.gentoo.org/glsa/202003-52
• https://security.netapp.com/advisory/ntap-20181127-0001/Third Party Advisory
• https://www.samba.org/samba/security/CVE-2018-16853.htmlVendor Advisory
• http://www.securityfocus.com/bid/106026Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16853Issue Tracking, Third Party Advisory
• https://security.gentoo.org/glsa/202003-52
• https://security.netapp.com/advisory/ntap-20181127-0001/Third Party Advisory
• https://www.samba.org/samba/security/CVE-2018-16853.htmlVendor Advisory

Published

Nov 28, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-16848A Denial of Service (DoS) condition is possible in OpenStack…6.5
• CVE-2018-16849A flaw was found in openstack-mistral. By manipulating the S…3.1
• CVE-2018-1685IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Se…
• CVE-2018-16850postgresql before versions 11.1, 10.6 is vulnerable to a to …9.8
• CVE-2018-16851Samba from version 4.0.0 and before versions 4.7.12, 4.8.7, …6.5
• CVE-2018-16852Samba from version 4.9.0 and before version 4.9.3 is vulnera…6.5
• CVE-2018-16854A flaw was found in moodle versions 3.5 to 3.5.2, 3.4 to 3.4…6.5
• CVE-2018-16855An issue has been found in PowerDNS Recursor before version …7.5
• CVE-2018-16856In a default Red Hat Openstack Platform Director installatio…5.5
• CVE-2018-16857Samba from version 4.9.0 and before version 4.9.3 that have …7.4
• CVE-2018-16858It was found that libreoffice before versions 6.0.7 and 6.1.…7.8
• CVE-2018-16859Execution of Ansible playbooks on Windows platforms with Pow…4.2