The ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles certain zero values, which allows remote attackers to cause a denial of service (infinite loop) via crafted packets.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ldbUpgrade samba | Aug 30, 2017 | Dec 29, 2015 |
| Centos_linux | — | Upgrade libldb-develUpgrade libldbUpgrade pyldb-develUpgrade pyldbUpgrade ldb-tools | Jul 6, 2016 | Dec 29, 2015 |
| Debian | — | Upgrade sambaUpgrade ldb | Jan 4, 2016 | Dec 29, 2015 |
| Freebsd | — | Upgrade samba4Upgrade samba36Upgrade ldbUpgrade samba43Upgrade samba42Upgrade samba41 | Dec 10, 2025 | Dec 19, 2015 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Dec 29, 2015 |
| Oracle_linux | — | Upgrade libsmbclient-develUpgrade samba4-dcUpgrade samba-develUpgrade samba4-winbind-clientsUpgrade samba-pythonUpgrade samba-dcUpgrade samba4-winbindUpgrade samba-commonUpgrade samba-pidlUpgrade samba-winbindUpgrade samba4-develUpgrade sambaUpgrade samba-libsUpgrade samba4-testUpgrade libwbclient-develUpgrade libldb-develUpgrade libwbclientUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade libldbUpgrade samba4-swatUpgrade pyldb-develUpgrade samba4-winbind-krb5-locatorUpgrade samba-vfs-glusterfsUpgrade samba4-dc-libsUpgrade samba4-pythonUpgrade samba4Upgrade samba-clientUpgrade samba-testUpgrade samba4-clientUpgrade samba-common-libsUpgrade pyldbUpgrade samba-dc-libsUpgrade samba-test-develUpgrade samba-common-toolsUpgrade samba4-libsUpgrade ldb-toolsUpgrade samba4-pidlUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade samba4-commonUpgrade samba-winbind-clients | Oct 16, 2024 | Dec 29, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 16, 2015 |
| Samba | — | Upgrade to Samba version 4.2.7Upgrade to Samba version 4.1.22Upgrade to Samba version 4.3.3 | Mar 24, 2016 | Dec 29, 2015 |
| Suse | — | Upgrade libldb1Upgrade libsmbclient-raw-develUpgrade libsamba-errors0-32bitUpgrade tdb-toolsUpgrade ldb-toolsUpgrade samba-dsdb-modulesUpgrade libndr-standard0Upgrade libtevent0-32bitUpgrade pytalloc-develUpgrade libtalloc2Upgrade libgensec-develUpgrade libsmbclient0Upgrade samba-clientUpgrade libtevent-util-develUpgrade libndr1-32bitUpgrade libtevent0Upgrade libsamdb0-32bitUpgrade samba-client-32bitUpgrade libsamdb-develUpgrade samba-libs-python3-32bitUpgrade libsamba-passdb-develUpgrade libdcerpc-atsvc-develUpgrade pytallocUpgrade libgensec0-32bitUpgrade libtdb1Upgrade libsamba-util0-32bitUpgrade samba-kdcUpgrade libdcerpc-binding0-32bitUpgrade python-ldb-develUpgrade libsamba-errors-develUpgrade libdcerpc0Upgrade libsamba-passdb0Upgrade libndr-standard0-32bitUpgrade libtalloc2-32bitUpgrade libsamba-hostconfig-develUpgrade libsmbsharemodes-develUpgrade libsamba-policy0-python3Upgrade python3-ldbUpgrade libdcerpc-samr0Upgrade samba-test-develUpgrade libtdb-develUpgrade libndr-standard-develUpgrade libndr-nbt0-32bitUpgrade libsamba-policy-python3-develUpgrade libsmbclient-raw0Upgrade libsamba-credentials0-32bitUpgrade libtalloc-develUpgrade libnetapi0-32bitUpgrade libsamba-credentials0Upgrade samba-libsUpgrade libndr-develUpgrade pyldbUpgrade libregistry0Upgrade libregistry-develUpgrade python-ldbUpgrade libdcerpc-samr-develUpgrade pytalloc-32bitUpgrade libsmbldap0Upgrade libdcerpc0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libwbclient0-32bitUpgrade libdcerpc-atsvc0Upgrade samba-winbind-32bitUpgrade libsmbclient0-32bitUpgrade ctdbUpgrade libsamba-policy-develUpgrade libsamba-credentials-develUpgrade libsmbldap-develUpgrade samba-libs-32bitUpgrade samba-winbindUpgrade libndr-krb5pac-develUpgrade libsmbldap2-32bitUpgrade samba-libs-python3Upgrade libtevent-develUpgrade libnetapi-develUpgrade libsmbldap0-32bitUpgrade libndr0-32bitUpgrade pyldb-develUpgrade libpdb0-32bitUpgrade libldb2Upgrade libdcerpc-develUpgrade libsmbconf0-32bitUpgrade libldb2-32bitUpgrade libtevent-util0Upgrade libwbclient-develUpgrade libsamba-util0Upgrade libndr-krb5pac0-32bitUpgrade libsamba-hostconfig0Upgrade samba-32bitUpgrade libsamdb0Upgrade libndr1Upgrade libsmbconf0Upgrade libsamba-errors0Upgrade samba-cephUpgrade libsamba-util-develUpgrade libndr-nbt-develUpgrade samba-docUpgrade libsmbclient-develUpgrade samba-python3Upgrade libldb-develUpgrade libsmbsharemodes0Upgrade libwbclient0Upgrade libsmbconf-develUpgrade libdcerpc-binding0Upgrade libndr0Upgrade libgensec0Upgrade python3-ldb-develUpgrade libpdb0Upgrade libpdb-develUpgrade libndr-krb5pac0Upgrade sambaUpgrade libtevent-util0-32bitUpgrade libsmbldap2Upgrade libtdb1-32bitUpgrade samba-pythonUpgrade libsamba-passdb0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libldb1-32bitUpgrade libndr-nbt0Upgrade samba-core-develUpgrade libnetapi0Upgrade libsamba-policy0 | Jan 4, 2016 | Dec 18, 2015 |
| Ubuntu | — | Upgrade sambaUpgrade libldb1 | Feb 2, 2016 | Dec 29, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub