A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-ldb-develUpgrade libldb-develUpgrade libldbUpgrade ldb-toolsUpgrade python-ldb-devel-commonUpgrade python3-ldb | Nov 15, 2022 | Aug 25, 2022 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Aug 25, 2022 |
| Amazon_linux | — | Upgrade samba | Dec 10, 2022 | Jul 29, 2022 |
| Amazon_linux_2023 | — | Upgrade samba-vfs-iouring-debuginfoUpgrade libsmbclient-debuginfoUpgrade python3-samba-testUpgrade samba-develUpgrade samba-usersharesUpgrade samba-dcerpcUpgrade samba-client-libs-debuginfoUpgrade libldb-develUpgrade samba-winbind-krb5-locatorUpgrade python3-ldb-develUpgrade libsmbclient-develUpgrade samba-dc-libsUpgrade samba-clientUpgrade samba-libs-debuginfoUpgrade libldb-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-client-debuginfoUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-winbind-clients-debuginfoUpgrade samba-winbind-debuginfoUpgrade python3-samba-debuginfoUpgrade libldb-debugsourceUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade libnetapiUpgrade libwbclient-develUpgrade samba-client-libsUpgrade samba-pidlUpgrade samba-ldb-ldap-modulesUpgrade samba-dc-libs-debuginfoUpgrade samba-commonUpgrade samba-common-tools-debuginfoUpgrade samba-test-debuginfoUpgrade samba-testUpgrade python3-ldb-debuginfoUpgrade samba-debugsourceUpgrade python3-ldbUpgrade samba-dcerpc-debuginfoUpgrade libnetapi-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-debuginfoUpgrade libnetapi-develUpgrade libldbUpgrade samba-test-libsUpgrade samba-common-libs-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-vfs-iouringUpgrade samba-libsUpgrade samba-krb5-printingUpgrade python3-samba-develUpgrade ldb-toolsUpgrade python3-sambaUpgrade libwbclientUpgrade libwbclient-debuginfoUpgrade ldb-tools-debuginfoUpgrade python-ldb-devel-common | Feb 17, 2025 | Jul 27, 2022 |
| Centos_linux | — | Upgrade libldb-debugsourceUpgrade python3-ldb-debuginfoUpgrade python3-ldbUpgrade libldb-debuginfoUpgrade libldb-develUpgrade ldb-tools-debuginfoUpgrade libldbUpgrade ldb-tools | Nov 9, 2022 | Aug 25, 2022 |
| Debian | — | Upgrade samba | Nov 4, 2022 | Aug 25, 2022 |
| Freebsd | — | Upgrade samba412Upgrade samba413 | Nov 4, 2022 | Oct 11, 2022 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade samba-libsUpgrade samba-commonUpgrade libwbclientUpgrade sambaUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-client | Nov 3, 2022 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ctdb-testsUpgrade samba-krb5-printingUpgrade python3-sambaUpgrade samba-libsUpgrade samba-testUpgrade samba-client-libsUpgrade samba-test-libsUpgrade libwbclientUpgrade samba-pidlUpgrade ctdbUpgrade python3-samba-testUpgrade samba-clientUpgrade samba-dc-libsUpgrade python2-sambaUpgrade sambaUpgrade python2-samba-testUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-common-tools | Dec 9, 2022 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-libsUpgrade libwbclientUpgrade samba-winbindUpgrade libsmbclientUpgrade samba | Nov 15, 2022 | Aug 25, 2022 |
| Oracle_linux | — | Upgrade ldb-toolsUpgrade python-ldb-devel-commonUpgrade libldbUpgrade libldb-develUpgrade python3-ldb-develUpgrade python3-ldb | Nov 16, 2022 | Jul 27, 2022 |
| Redhat_linux | — | Upgrade ldb-toolsUpgrade python3-ldb-debuginfoUpgrade python-ldb-devel-commonUpgrade ldb-tools-debuginfoNo solution existsUpgrade libldbUpgrade libldb-debuginfoUpgrade libldb-develUpgrade libldb-debugsourceUpgrade python3-ldb-develUpgrade python3-ldb | Nov 9, 2022 | Aug 25, 2022 |
| Rocky_linux | — | Upgrade ldb-tools-debuginfoUpgrade python3-ldbUpgrade libldbUpgrade python3-ldb-develUpgrade python3-ldb-debuginfoUpgrade ldb-toolsUpgrade libldb-debugsourceUpgrade libldb-develUpgrade libldb-debuginfoUpgrade python-ldb-devel-common | Mar 12, 2024 | Aug 25, 2022 |
| Samba | — | Upgrade to Samba version 4.15.9Upgrade to Samba version 4.16.4Upgrade to Samba version 4.14.14 | Jul 29, 2022 | Jul 29, 2022 |
| Suse | — | Upgrade samba-docUpgrade libldb-develUpgrade libldb2-32bitUpgrade samba-client-64bitUpgrade libsamba-policy0-python3-32bitUpgrade samba-libsUpgrade samba-cephUpgrade libsamba-policy-develUpgrade ctdb-pcp-pmdaUpgrade ctdbUpgrade libsamba-policy0-python3Upgrade samba-ad-dc-libsUpgrade samba-develUpgrade samba-libs-32bitUpgrade libldb2Upgrade samba-winbindUpgrade samba-libs-python3Upgrade sambaUpgrade samba-libs-python3-64bitUpgrade ldb-toolsUpgrade samba-libs-64bitUpgrade samba-toolUpgrade samba-dsdb-modulesUpgrade samba-winbind-libsUpgrade samba-winbind-libs-32bitUpgrade samba-gpupdateUpgrade samba-clientUpgrade libsamba-policy0-python3-64bitUpgrade python3-ldb-develUpgrade samba-client-32bitUpgrade samba-python3Upgrade samba-ldb-ldapUpgrade python3-ldbUpgrade samba-testUpgrade samba-libs-python3-32bitUpgrade samba-devel-32bitUpgrade libsamba-policy-python3-develUpgrade samba-client-libs-32bitUpgrade samba-ad-dc-libs-32bitUpgrade python3-ldb-32bitUpgrade samba-client-libsUpgrade samba-ad-dc | Oct 26, 2022 | Aug 25, 2022 |
| Ubuntu | — | Upgrade samba | Aug 2, 2022 | Jul 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub