N/A

Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card authentication, Samba's KDC will call talloc_free() twice on the same memory if the principal in a validly signed certificate does not match the principal in the AS-REQ. This is only possible after authentication with a trusted certificate. talloc is robust against further corruption from a double-free with talloc_free() and directly calls abort(), terminating the KDC process.

N/A

释放后使用

Samba 安全漏洞

Samba是Samba团队开发的一套可使UNIX系列的操作系统与微软Windows操作系统的SMB/CIFS网络协议做连结的自由软件。该软件支持共享打印机、互相传输资料文件等。 Samba 4.3.0及之后版本（4.7.12版本、4.8.7版本和4.9.3版本已修复）中存在拒绝服务漏洞，该漏洞源于程序没有正确地处理内存。远程攻击者可利用该漏洞造成拒绝服务（双重释放和崩溃）。

N/A

N/A