CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.0. Its EPSS score suggests a 66.8% probability of exploitation in the next 30 days. It may be remotely exploitable. It may lead to a denial-of-service condition.
CVE
CVE-2014-0239
Severity
MEDIUM
CVSS
5
EPSS
66.81%
Original NVD Description
The internal DNS server in Samba 4.x before 4.0.18 does not check the QR field in the header section of an incoming DNS message before sending a response, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged response packet that triggers a communication loop, a related issue to CVE-1999-0103.