A use-after-free flaw was found in the way samba AD DC LDAP servers, handled 'Paged Results' control is combined with the 'ASQ' control. A malicious user in a samba AD could use this flaw to cause denial of service. This issue affects all samba versions before 4.10.15, before 4.11.8 and before 4.12.2.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | May 4, 2020 |
| Debian | — | Upgrade samba | Jul 30, 2024 | May 4, 2020 |
| Freebsd | — | Upgrade samba412Upgrade samba410Upgrade samba411 | Apr 30, 2020 | Apr 29, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Jul 28, 2020 | May 4, 2020 |
| Samba | — | Upgrade to Samba 4.12.2 or later.Upgrade to Samba 4.11.8 or later.Upgrade to Samba 4.10.15 or later. | Jun 3, 2020 | May 4, 2020 |
| Suse | — | Upgrade libdcerpc0Upgrade samba-client-32bitUpgrade libsamba-passdb-develUpgrade libsamba-util0-32bitUpgrade libsamba-credentials0-32bitUpgrade libsamba-errors0Upgrade libsamba-hostconfig-develUpgrade samba-winbind-32bitUpgrade libndr-krb5pac0-32bitUpgrade libdcerpc-samr0Upgrade libsmbconf0Upgrade libnetapi0Upgrade libtevent-util0Upgrade libsamdb0Upgrade libldb1-32bitUpgrade libldb2Upgrade libsamba-errors-develUpgrade libwbclient0-32bitUpgrade sambaUpgrade samba-docUpgrade ctdb-testsUpgrade libsmbldap2-32bitUpgrade samba-python3Upgrade libldb2-32bitUpgrade libsamba-hostconfig0Upgrade libsamba-passdb0-32bitUpgrade libndr-krb5pac-develUpgrade samba-ad-dcUpgrade libwbclient-develUpgrade samba-cephUpgrade ctdbUpgrade ctdb-pcp-pmdaUpgrade python-ldb-develUpgrade libsmbclient-develUpgrade libsamba-util-develUpgrade libsamba-passdb0Upgrade libtevent-util0-32bitUpgrade libldb-develUpgrade libsmbldap-develUpgrade samba-dsdb-modulesUpgrade samba-core-develUpgrade python3-ldb-develUpgrade python3-ldb-32bitUpgrade libsmbconf0-32bitUpgrade libndr-krb5pac0Upgrade libsamba-hostconfig0-32bitUpgrade samba-winbindUpgrade libdcerpc-samr0-32bitUpgrade libndr-nbt0Upgrade libtevent-util-develUpgrade libsamba-policy0-python3-32bitUpgrade libndr1Upgrade samba-libs-python3Upgrade libnetapi-devel-32bitUpgrade samba-libs-32bitUpgrade libndr0Upgrade libdcerpc-binding0Upgrade libndr-standard0-32bitUpgrade libdcerpc-develUpgrade libwbclient0Upgrade libnetapi0-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-credentials-develUpgrade samba-ad-dc-32bitUpgrade libndr1-32bitUpgrade libsamba-errors0-32bitUpgrade libsmbldap2Upgrade samba-libs-python3-32bitUpgrade libndr-nbt0-32bitUpgrade libldb1Upgrade libsamba-policy0-python3 | Jul 21, 2020 | Apr 28, 2020 |
| Ubuntu | — | Upgrade samba | Apr 29, 2020 | Apr 28, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub