ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string lengths, which allows remote attackers to obtain sensitive information from daemon heap memory by sending crafted packets and then reading (1) an error message or (2) a database value.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sambaUpgrade ldb | Aug 30, 2017 | Dec 29, 2015 |
| Centos_linux | — | Upgrade samba-winbind-clientsUpgrade samba-test-libsUpgrade samba-vfs-glusterfsUpgrade samba4-pythonUpgrade samba4-dcUpgrade samba-libsUpgrade samba-dc-libsUpgrade libwbclientUpgrade samba4Upgrade sambaUpgrade ctdb-develUpgrade libldbUpgrade samba-develUpgrade samba-pythonUpgrade samba4-winbind-clientsUpgrade samba-dcUpgrade samba-commonUpgrade ctdbUpgrade samba-pidlUpgrade libsmbclient-develUpgrade samba-winbindUpgrade samba4-winbindUpgrade samba4-clientUpgrade samba-common-libsUpgrade libldb-develUpgrade samba-clientUpgrade samba4-commonUpgrade samba-testUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba-common-toolsUpgrade ctdb-testsUpgrade samba4-testUpgrade samba4-winbind-krb5-locatorUpgrade samba4-dc-libsUpgrade ldb-toolsUpgrade samba-winbind-modulesUpgrade samba-winbind-krb5-locatorUpgrade pyldb-develUpgrade libwbclient-develUpgrade samba4-libsUpgrade samba4-develUpgrade samba4-swatUpgrade samba-test-develUpgrade pyldbUpgrade samba4-pidl | Jul 6, 2016 | Dec 29, 2015 |
| Debian | — | Upgrade sambaUpgrade ldb | Jan 4, 2016 | Dec 29, 2015 |
| Freebsd | — | Upgrade samba4Upgrade samba36Upgrade ldbUpgrade samba43Upgrade samba41Upgrade samba42 | Dec 10, 2025 | Dec 19, 2015 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Dec 29, 2015 |
| Oracle_linux | — | Upgrade libldbUpgrade pyldbUpgrade ldb-toolsUpgrade libldb-develUpgrade pyldb-devel | May 3, 2019 | Dec 29, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 16, 2015 |
| Samba | — | Upgrade to Samba version 4.3.3Upgrade to Samba version 4.2.7Upgrade to Samba version 4.1.22 | Mar 24, 2016 | Dec 29, 2015 |
| Suse | — | Upgrade libsamba-hostconfig-develUpgrade libwbclient0-32bitUpgrade libsmbclient-develUpgrade libsmbclient-raw-develUpgrade libtalloc2Upgrade samba-python3Upgrade libsamba-passdb0Upgrade libsmbclient-raw0-32bitUpgrade samba-docUpgrade samba-libs-python3-32bitUpgrade libndr-krb5pac0Upgrade libtalloc2-32bitUpgrade libldb1Upgrade libtevent0Upgrade libwbclient0-x86Upgrade samba-32bitUpgrade samba-winbind-32bitUpgrade samba-pythonUpgrade libtevent-util0-32bitUpgrade libtalloc2-x86Upgrade libdcerpc-binding0Upgrade samba-libsUpgrade libndr-standard0-32bitUpgrade samba-core-develUpgrade libtalloc-develUpgrade libldb1-32bitUpgrade libsamba-util-develUpgrade libwbclient-develUpgrade libsamba-passdb0-32bitUpgrade samba-cephUpgrade libsamba-credentials0Upgrade libpdb-develUpgrade libsamba-hostconfig0-32bitUpgrade libtdb1-x86Upgrade libtevent0-x86Upgrade samba-testUpgrade libsmbldap2-32bitUpgrade libtevent0-32bitUpgrade libdcerpc-develUpgrade libwbclient0Upgrade samba-winbindUpgrade libndr-nbt0Upgrade samba-libs-python3Upgrade libdcerpc-atsvc0Upgrade samba-dsdb-modulesUpgrade libsamba-policy0Upgrade python3-ldb-develUpgrade sambaUpgrade samba-test-develUpgrade libldb2-32bitUpgrade tdb-toolsUpgrade ldapsmbUpgrade libsamba-policy0-python3Upgrade libgensec0-32bitUpgrade libndr-krb5pac-develUpgrade pytalloc-develUpgrade libdcerpc-samr0Upgrade libsmbldap-develUpgrade libdcerpc0Upgrade libregistry-develUpgrade libtevent-develUpgrade libnetapi0Upgrade samba-winbind-x86Upgrade libgensec-develUpgrade libsamba-passdb-develUpgrade libpdb0Upgrade libsmbclient0Upgrade samba-x86Upgrade pytallocUpgrade libnetapi-develUpgrade libsmbsharemodes0Upgrade libldb2Upgrade libdcerpc-samr-develUpgrade libsamba-credentials0-32bitUpgrade libsamba-policy-develUpgrade libsmbldap2Upgrade libgensec0Upgrade libsamba-util0-32bitUpgrade samba-clientUpgrade ctdbUpgrade python3-ldbUpgrade libdcerpc-binding0-32bitUpgrade libsmbclient0-x86Upgrade libndr-standard0Upgrade libndr1-32bitUpgrade libsmbclient0-32bitUpgrade libsmbclient-raw0Upgrade samba-client-x86Upgrade libpdb0-32bitUpgrade libsmbldap0Upgrade samba-client-32bitUpgrade pyldbUpgrade libdcerpc0-32bitUpgrade libtevent-util-develUpgrade libdcerpc-atsvc-develUpgrade libsamba-errors0-32bitUpgrade libtdb1Upgrade libtevent-util0Upgrade pytalloc-32bitUpgrade libsamba-errors-develUpgrade libtdb1-32bitUpgrade libnetapi0-32bitUpgrade libndr0Upgrade libsamba-credentials-develUpgrade python-ldbUpgrade libsmbconf-develUpgrade libndr-develUpgrade ldb-toolsUpgrade libsamba-util0Upgrade libsamba-errors0Upgrade libndr0-32bitUpgrade libsmbsharemodes-develUpgrade libsamdb0-32bitUpgrade samba-libs-32bitUpgrade python-ldb-develUpgrade libsmbldap0-32bitUpgrade libndr1Upgrade pyldb-develUpgrade libsamba-hostconfig0Upgrade libldb-develUpgrade libsamdb-develUpgrade libndr-nbt-develUpgrade libtdb-develUpgrade libsamba-policy-python3-develUpgrade samba-krb-printingUpgrade libndr-nbt0-32bitUpgrade libsmbconf0Upgrade libndr-standard-develUpgrade libsamdb0Upgrade libregistry0Upgrade samba-kdcUpgrade libsmbconf0-32bitUpgrade samba-develUpgrade libndr-krb5pac0-32bit | Jan 4, 2016 | Dec 18, 2015 |
| Ubuntu | — | Upgrade sambaUpgrade libldb1 | Feb 2, 2016 | Dec 29, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub