A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-ldbUpgrade libldb-develUpgrade ldb-toolsUpgrade libldb | May 4, 2022 | Jul 7, 2020 |
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Jul 7, 2020 |
| Centos_linux | — | Upgrade ldb-toolsUpgrade python3-ldbUpgrade libldb-debuginfoUpgrade libldb-develUpgrade libldbUpgrade python3-ldb-debuginfoUpgrade libldb-debugsourceUpgrade ldb-tools-debuginfo | Nov 5, 2020 | Jul 7, 2020 |
| Debian | — | Upgrade sambaUpgrade ldb | Nov 24, 2020 | Jul 7, 2020 |
| Freebsd | — | Upgrade samba410Upgrade samba412Upgrade samba411 | Jul 5, 2020 | Jul 2, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Jul 28, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-client-libsUpgrade libwbclientUpgrade samba-commonUpgrade samba-pythonUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-clientUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-common-tools | Sep 16, 2021 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-clientUpgrade samba-winbind-clientsUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-client-libsUpgrade sambaUpgrade samba-winbindUpgrade samba-libs | Apr 30, 2021 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade samba-common-libsUpgrade sambaUpgrade samba-pythonUpgrade libwbclientUpgrade samba-commonUpgrade samba-winbindUpgrade samba-libs | Nov 2, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-pidlUpgrade python2-sambaUpgrade samba-libsUpgrade libwbclientUpgrade samba-test-libsUpgrade python3-sambaUpgrade samba-krb5-printingUpgrade samba-testUpgrade ctdbUpgrade samba-commonUpgrade samba-winbindUpgrade samba-clientUpgrade ctdb-testsUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-dc-libsUpgrade python3-samba-testUpgrade sambaUpgrade python2-samba-testUpgrade samba-winbind-krb5-locator | Dec 15, 2020 | Jul 7, 2020 |
| Oracle_linux | — | Upgrade libldbUpgrade ldb-toolsUpgrade libldb-develUpgrade python3-ldb | Nov 12, 2020 | Jul 2, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Jul 7, 2020 |
| Redhat_linux | — | Upgrade libldb-debugsourceUpgrade libldb-debuginfoUpgrade python3-ldbUpgrade libldb-develUpgrade python3-ldb-debuginfoUpgrade ldb-tools-debuginfoUpgrade ldb-toolsNo solution existsUpgrade libldb | Nov 5, 2020 | Jul 7, 2020 |
| Samba | — | Upgrade to Samba 4.12.4 or later.Upgrade to Samba 4.11.11 or later.Upgrade to Samba 4.10.17 or later. | Jul 7, 2020 | Jul 7, 2020 |
| Suse | — | Upgrade libsmbconf0Upgrade libsamba-passdb-develUpgrade samba-pidlUpgrade libndr1Upgrade libndr1-32bitUpgrade libsmbconf0-32bitUpgrade samba-python3Upgrade libtevent-util-develUpgrade libwbclient0Upgrade python3-ldbUpgrade libsamba-policy0-python3Upgrade libndr-nbt0-32bitUpgrade libtevent-util0-32bitUpgrade libsamba-policy0Upgrade libsmbldap-develUpgrade samba-dsdb-modulesUpgrade libldb2-32bitUpgrade libldb1Upgrade libsamba-hostconfig-develUpgrade samba-client-32bitUpgrade samba-cephUpgrade ldb-toolsUpgrade libsamba-passdb0-32bitUpgrade libsmbldap2-32bitUpgrade libsamba-credentials0Upgrade libdcerpc-samr0Upgrade libndr0Upgrade samba-libs-python-32bitUpgrade libndr-standard0-32bitUpgrade libdcerpc-binding0-32bitUpgrade samba-libsUpgrade ctdb-testsUpgrade libsmbclient-develUpgrade python-ldb-32bitUpgrade samba-testUpgrade libsamba-hostconfig0Upgrade libndr-krb5pac-develUpgrade libndr-standard-develUpgrade libndr-krb5pac0Upgrade libnetapi0Upgrade libsamba-util0-32bitUpgrade libdcerpc-develUpgrade samba-docUpgrade python3-ldb-32bitUpgrade samba-ad-dc-32bitUpgrade libdcerpc0-32bitUpgrade libldb1-32bitUpgrade libdcerpc-samr0-32bitUpgrade libdcerpc-samr-develUpgrade samba-libs-pythonUpgrade libwbclient0-32bitUpgrade libsamba-credentials-develUpgrade python-ldb-develUpgrade samba-clientUpgrade ctdb-pcp-pmdaUpgrade libsamdb0Upgrade libsmbconf-develUpgrade libsmbclient0-32bitUpgrade libsamba-util0Upgrade libdcerpc0Upgrade libnetapi-develUpgrade libndr-develUpgrade ctdbUpgrade libldb2Upgrade samba-core-develUpgrade libsamba-passdb0Upgrade libtevent-util0Upgrade samba-libs-32bitUpgrade libsamba-policy-python3-develUpgrade libndr0-32bitUpgrade python3-ldb-develUpgrade libndr-nbt0Upgrade libldb-develUpgrade samba-libs-python3Upgrade libsamdb0-32bitUpgrade libsamba-policy-python-develUpgrade libsamba-credentials0-32bitUpgrade libsmbldap2Upgrade samba-ad-dcUpgrade libsamba-util-develUpgrade samba-winbind-32bitUpgrade sambaUpgrade libsamba-hostconfig0-32bitUpgrade libnetapi0-32bitUpgrade python-ldbUpgrade libndr-nbt-develUpgrade libwbclient-develUpgrade libndr-standard0Upgrade libsamba-errors0-32bitUpgrade libnetapi-devel-32bitUpgrade samba-pythonUpgrade libsamba-policy0-python3-32bitUpgrade samba-libs-python3-32bitUpgrade libsamba-errors0Upgrade libndr-krb5pac0-32bitUpgrade libsmbclient0Upgrade samba-winbindUpgrade libsamba-policy0-32bitUpgrade libsamba-policy-develUpgrade libsamba-errors-develUpgrade libsamdb-develUpgrade libdcerpc-binding0 | Jul 18, 2020 | Jul 2, 2020 |
| Ubuntu | — | Upgrade samba (Ubuntu Pro)Upgrade samba | Aug 5, 2020 | Jul 2, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub