Field Assessment
AI analysis pending.
CVE
CVE-2016-0771
Severity
MEDIUM
CVSS
5.9
EPSS
2.76%
Original Filing — NVD Description
The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record.