{"schemaVersion":3,"id":"USN-3595-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"samba vulnerabilities\n\nBjörn Baumbach discovered that Samba incorrectly validated permissions when\nchanging account passwords via LDAP. An authenticated attacker could use this\nissue to change the password of other users, including administrators, and\nperform actions as those users. (CVE-2018-1057)\n\nIt was discovered that Samba incorrectly validated inputs to the RPC spoolss\nservice. An authenticated attacker could use this issue to cause the service to\ncrash, resulting in a denial of service. (CVE-2018-1050)","dates":{"published":"2018-03-13T14:28:15.000Z","modified":"2026-04-22T09:44:10.659Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"samba","name":"samba","label":"samba","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/samba","purlType":"deb","versions":[{"text":"< 2:4.3.11+dfsg-0ubuntu0.14.04.14","noFixRecorded":false,"fixedIn":null},{"text":"< 2:4.3.11+dfsg-0ubuntu0.16.04.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:4.3.11+dfsg-0ubuntu0.14.04.14 | < 2:4.3.11+dfsg-0ubuntu0.16.04.13","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"samba","label":"Samba","category":"server-app"}},"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-3595-1","label":"ubuntu.com/security/notices/USN-3595-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-1050","label":"ubuntu.com/security/CVE-2018-1050","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2018-1057","label":"ubuntu.com/security/CVE-2018-1057","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2018-1050","CVE-2018-1057"],"downstream":[],"duplicates":[],"related":["CVE-2018-1050","CVE-2018-1057"]},"timeline":[{"kind":"published","date":"2018-03-13T14:28:15.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-22T09:44:10.659Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T22:42:53.196Z","stale":false,"partial":false}}