Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is related to an attacker using the paged search control. The attacker must have directory read access in order to attempt an exploit.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Jun 24, 2019 | Jun 19, 2019 |
| Samba | — | Upgrade to Samba version 4.10.5 | Jun 21, 2019 | Jun 19, 2019 |
| Suse | — | Upgrade libsamba-hostconfig0-32bitUpgrade libndr1-32bitUpgrade libndr-develUpgrade samba-winbindUpgrade libsamba-errors-develUpgrade libdcerpc0-32bitUpgrade libndr0Upgrade libsmbclient0-32bitUpgrade libndr-krb5pac-develUpgrade libwbclient0-32bitUpgrade libdcerpc-samr-develUpgrade sambaUpgrade libsamba-errors0-32bitUpgrade libsmbldap2-32bitUpgrade libndr-standard0Upgrade libsamba-credentials-develUpgrade libdcerpc0Upgrade libnetapi0-32bitUpgrade libnetapi0Upgrade samba-clientUpgrade samba-libs-python3Upgrade ctdbUpgrade samba-libs-python3-32bitUpgrade libdcerpc-develUpgrade libwbclient-develUpgrade samba-winbind-32bitUpgrade libsmbclient0Upgrade libsmbconf0Upgrade libsmbconf0-32bitUpgrade libndr0-32bitUpgrade libdcerpc-binding0Upgrade libsamba-passdb0Upgrade libsamdb0Upgrade libsamba-passdb0-32bitUpgrade libndr-krb5pac0Upgrade libsamba-credentials0-32bitUpgrade libsamba-policy-python3-develUpgrade samba-docUpgrade samba-python3Upgrade libnetapi-develUpgrade libtevent-util0Upgrade libndr-nbt0Upgrade libsamba-util0Upgrade libndr1Upgrade libsamba-errors0Upgrade libsamba-policy-develUpgrade libsmbconf-develUpgrade libndr-nbt0-32bitUpgrade libtevent-util0-32bitUpgrade libsmbldap2Upgrade samba-core-develUpgrade libndr-nbt-develUpgrade samba-dsdb-modulesUpgrade samba-cephUpgrade libwbclient0Upgrade libsamba-passdb-develUpgrade libsamba-hostconfig-develUpgrade libdcerpc-binding0-32bitUpgrade samba-client-32bitUpgrade libsmbldap-develUpgrade samba-libs-32bitUpgrade libndr-standard0-32bitUpgrade libsamba-credentials0Upgrade libsmbclient-develUpgrade libsamba-hostconfig0Upgrade libndr-standard-develUpgrade samba-libsUpgrade libsamdb-develUpgrade libtevent-util-develUpgrade libsamba-util-develUpgrade libsamdb0-32bitUpgrade libsamba-policy0-python3Upgrade libdcerpc-samr0Upgrade libsamba-util0-32bitUpgrade libndr-krb5pac0-32bit | Dec 19, 2019 | Jun 19, 2019 |
| Ubuntu | — | Upgrade samba | Mar 2, 2020 | Jun 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub