A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-ldbUpgrade libldb-develUpgrade ldb-toolsUpgrade libldb | May 4, 2022 | Jul 7, 2020 |
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Jul 7, 2020 |
| Centos_linux | — | Upgrade libldb-debugsourceUpgrade ldb-tools-debuginfoUpgrade libldbUpgrade libldb-develUpgrade libldb-debuginfoUpgrade python3-ldb-debuginfoUpgrade ldb-toolsUpgrade python3-ldb | Nov 5, 2020 | Jul 7, 2020 |
| Debian | — | Upgrade ldbUpgrade samba | Nov 24, 2020 | Jul 7, 2020 |
| Freebsd | — | Upgrade samba411Upgrade samba410Upgrade samba412 | Jul 5, 2020 | Jul 2, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Jul 28, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade sambaUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-client-libsUpgrade samba-pythonUpgrade libwbclient | Sep 16, 2021 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-winbind-clientsUpgrade sambaUpgrade samba-libsUpgrade samba-commonUpgrade libsmbclientUpgrade samba-common-libsUpgrade libwbclientUpgrade samba-clientUpgrade samba-winbindUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade samba-common-tools | Apr 30, 2021 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-commonUpgrade sambaUpgrade samba-pythonUpgrade samba-libsUpgrade samba-winbindUpgrade libwbclient | Nov 2, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libwbclientUpgrade samba-commonUpgrade python2-sambaUpgrade samba-libsUpgrade samba-test-libsUpgrade ctdbUpgrade samba-pidlUpgrade samba-testUpgrade samba-krb5-printingUpgrade python3-sambaUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-dc-libsUpgrade python3-samba-testUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-winbindUpgrade sambaUpgrade python2-samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade ctdb-testsUpgrade samba-client-libs | Dec 15, 2020 | Jul 7, 2020 |
| Oracle_linux | — | Upgrade libldbUpgrade python3-ldbUpgrade libldb-develUpgrade ldb-tools | Nov 12, 2020 | Jul 2, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Jul 7, 2020 |
| Redhat_linux | — | No solution existsUpgrade ldb-tools-debuginfoUpgrade ldb-toolsUpgrade libldbUpgrade python3-ldbUpgrade libldb-debuginfoUpgrade libldb-debugsourceUpgrade python3-ldb-debuginfoUpgrade libldb-devel | Nov 5, 2020 | Jul 7, 2020 |
| Samba | — | Upgrade to Samba 4.11.11 or later.Upgrade to Samba 4.12.4 or later.Upgrade to Samba 4.10.17 or later. | Jul 7, 2020 | Jul 7, 2020 |
| Suse | — | Upgrade libsamba-policy0-python3Upgrade libtevent-util0-32bitUpgrade libldb1Upgrade libndr1Upgrade libndr-standard0-32bitUpgrade samba-libs-python-32bitUpgrade libsamba-policy0Upgrade libwbclient0Upgrade libsmbclient-develUpgrade samba-libsUpgrade libndr0Upgrade libsmbldap2-32bitUpgrade libndr1-32bitUpgrade libsamba-hostconfig-develUpgrade ctdb-testsUpgrade libdcerpc-develUpgrade libndr-krb5pac0Upgrade libdcerpc-binding0-32bitUpgrade libsamba-credentials0Upgrade samba-testUpgrade libndr-standard-develUpgrade libsamba-hostconfig0Upgrade python-ldb-32bitUpgrade libdcerpc-samr0Upgrade libsamba-passdb0-32bitUpgrade libtevent-util-develUpgrade samba-pidlUpgrade samba-client-32bitUpgrade samba-python3Upgrade libndr-krb5pac-develUpgrade libndr-nbt0-32bitUpgrade libldb2-32bitUpgrade libnetapi0Upgrade samba-cephUpgrade python3-ldbUpgrade libsmbldap-develUpgrade samba-dsdb-modulesUpgrade libsamba-util0-32bitUpgrade ldb-toolsUpgrade libsmbconf0Upgrade libsamba-passdb-develUpgrade libsmbconf0-32bitUpgrade samba-libs-python3-32bitUpgrade libsmbclient0Upgrade samba-pythonUpgrade libsamba-policy0-32bitUpgrade libsamba-errors0Upgrade libdcerpc-samr0-32bitUpgrade samba-docUpgrade libldb1-32bitUpgrade python3-ldb-32bitUpgrade libsamba-policy-python-develUpgrade samba-libs-pythonUpgrade libtevent-util0Upgrade libsamba-policy-python3-develUpgrade libndr-nbt0Upgrade libsamba-credentials0-32bitUpgrade libsamba-policy-develUpgrade libndr0-32bitUpgrade libsamdb0-32bitUpgrade samba-libs-python3Upgrade python3-ldb-develUpgrade libsamba-passdb0Upgrade samba-winbindUpgrade libsmbclient0-32bitUpgrade libnetapi-devel-32bitUpgrade libwbclient-develUpgrade samba-ad-dcUpgrade libdcerpc0-32bitUpgrade python-ldb-develUpgrade ctdbUpgrade libnetapi-develUpgrade libsamba-errors0-32bitUpgrade libnetapi0-32bitUpgrade libsamba-util-develUpgrade samba-ad-dc-32bitUpgrade libsmbconf-develUpgrade libsamba-hostconfig0-32bitUpgrade samba-winbind-32bitUpgrade sambaUpgrade libwbclient0-32bitUpgrade samba-clientUpgrade libsamba-util0Upgrade libldb-develUpgrade libsmbldap2Upgrade python-ldbUpgrade libndr-nbt-develUpgrade libsamdb-develUpgrade libsamdb0Upgrade libldb2Upgrade samba-core-develUpgrade libsamba-errors-develUpgrade libdcerpc-binding0Upgrade libsamba-credentials-develUpgrade libndr-standard0Upgrade libndr-develUpgrade samba-libs-32bitUpgrade libdcerpc0Upgrade libndr-krb5pac0-32bitUpgrade libsamba-policy0-python3-32bitUpgrade ctdb-pcp-pmdaUpgrade libdcerpc-samr-devel | Jul 18, 2020 | Jul 2, 2020 |
| Ubuntu | — | Upgrade sambaUpgrade samba (Ubuntu Pro) | Aug 5, 2020 | Jul 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub