Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2018-10858

Quick assessment

Affected

The Samba Team samba

Exploitation

High exploitation probability; assess promptly

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Samba是Samba团队的一套可使UNIX系列的操作系统与微软Windows操作系统的SMB/CIFS网络协议做连结的自由软件。该软件支持共享打印机、互相传输资料文件等。 Samba 4.6.16之前版本、4.7.9之前版本和4.8.4之前版本中存在缓冲区错误漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。

AI Predicted 9.8 Difficulty: Hard EPSS 4.30% · P91 Updated Feb 21, 2026

Possible ATT&CK Techniques 2 AI

T1190 · Exploit Public-Facing Application T1195 · Supply Chain Compromise

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2018-10858

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

输入验证不恰当

Source: CVE Program / CVE List V5

Vulnerability Title

Samba 缓冲区错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
The Samba Team	samba	4.6.16	-

II. Public POCs for CVE-2018-10858

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2018-10858

请登录查看更多情报信息。

Vendor Advisories for CVE-2018-10858 (11)

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10858 x_refsource_CONFIRM
https://security.netapp.com/advisory/ntap-20180814-0001/ x_refsource_CONFIRM
http://www.securityfocus.com/bid/105085 vdb-entry x_refsource_BID
http://www.securitytracker.com/id/1042002 vdb-entry x_refsource_SECTRACK
https://www.debian.org/security/2018/dsa-4271 vendor-advisory x_refsource_DEBIAN
https://usn.ubuntu.com/3738-1/ vendor-advisory x_refsource_UBUNTU
https://security.gentoo.org/glsa/202003-52 vendor-advisory x_refsource_GENTOO
https://access.redhat.com/errata/RHSA-2018:2613 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:3056 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2612 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:3470 vendor-advisory x_refsource_REDHAT

Other References for CVE-2018-10858 (2)

https://kc.mcafee.com/corporate/index?page=content&id=SB10284 x_refsource_CONFIRM
https://www.samba.org/samba/security/CVE-2018-10858.html x_refsource_CONFIRM

https://www.cve.org/CVERecord?id=CVE-2018-10858

Same Patch Batch · The Samba Team · 2018-08-22 · 5 CVEs total

CVE-2018-10918		Samba 代码问题漏洞
CVE-2018-10919		Samba 信息泄露漏洞
CVE-2018-1139		Samba 信任管理问题漏洞
CVE-2018-1140		Samba 输入验证错误漏洞

IV. Related Vulnerabilities

Same product: samba

Same vendor: The Samba Team

Same weakness: CWE-20