A flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba handles certain requests as an Active Directory Domain Controller LDAP server, an unauthorized user can cause a stack overflow leading to a denial of service. The highest threat from this vulnerability is to system availability. This issue affects all samba versions before 4.10.15, before 4.11.8 and before 4.12.2.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | May 6, 2020 |
| Debian | — | Upgrade samba | Nov 24, 2020 | May 6, 2020 |
| Freebsd | — | Upgrade samba410Upgrade samba411Upgrade samba412 | Apr 30, 2020 | Apr 29, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Jul 28, 2020 | May 6, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libwbclientUpgrade samba-winbindUpgrade python2-samba-testUpgrade python2-sambaUpgrade sambaUpgrade ctdb-testsUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade python3-sambaUpgrade python3-samba-testUpgrade libsmbclientUpgrade ctdbUpgrade samba-pidlUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-dc-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-libsUpgrade samba-commonUpgrade samba-krb5-printingUpgrade samba-clientUpgrade samba-testUpgrade samba-test-libsUpgrade samba-winbind-clients | Aug 31, 2020 | May 6, 2020 |
| Oracle Solaris | — | Upgrade system/network/ldap/openldap to version 2.4.50.0.0-11.4.22.0.1.69.4 on Solaris 11.4Upgrade service/network/ldap/openldap to version 2.4.50.0.0-11.4.22.0.1.69.4 on Solaris 11.4 | Jan 19, 2021 | May 6, 2020 |
| Samba | — | Upgrade to Samba 4.12.2 or later.Upgrade to Samba 4.10.15 or later.Upgrade to Samba 4.11.8 or later. | Jun 3, 2020 | May 6, 2020 |
| Suse | — | Upgrade samba-libs-python3-32bitUpgrade python3-ldbUpgrade libndr-krb5pac0Upgrade python3-ldb-develUpgrade libldb-develUpgrade libndr-develUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-passdb0Upgrade samba-python3Upgrade libsamba-policy-python3-develUpgrade libsamba-policy0-32bitUpgrade libndr1-32bitUpgrade samba-core-develUpgrade samba-clientUpgrade libdcerpc0Upgrade libtevent-util0-32bitUpgrade samba-dsdb-modulesUpgrade libsamba-errors0Upgrade libdcerpc-binding0-32bitUpgrade libndr-nbt0-32bitUpgrade libndr-nbt-develUpgrade libdcerpc-samr0Upgrade libwbclient-develUpgrade libndr-standard0-32bitUpgrade libsamdb0Upgrade libsmbclient0-32bitUpgrade libsamba-policy-develUpgrade libndr-krb5pac-develUpgrade libsamdb0-32bitUpgrade libsamba-passdb0-32bitUpgrade libsamba-policy0Upgrade libdcerpc0-32bitUpgrade samba-ad-dc-32bitUpgrade samba-testUpgrade libwbclient0-32bitUpgrade libldb1Upgrade libsamba-hostconfig-develUpgrade samba-ad-dcUpgrade ctdb-testsUpgrade libsamdb-develUpgrade libnetapi0-32bitUpgrade libnetapi-devel-32bitUpgrade ctdb-pcp-pmdaUpgrade libdcerpc-samr-develUpgrade python-ldb-develUpgrade libsamba-passdb-develUpgrade libndr-krb5pac0-32bitUpgrade libdcerpc-develUpgrade samba-libsUpgrade libsamba-credentials0-32bitUpgrade samba-winbindUpgrade samba-libs-pythonUpgrade libdcerpc-binding0Upgrade libsmbldap-develUpgrade samba-cephUpgrade libldb2Upgrade libsamba-util-develUpgrade python-ldbUpgrade samba-docUpgrade libsamba-policy-python-develUpgrade libsmbconf0Upgrade libndr-standard-develUpgrade libtevent-util-develUpgrade samba-libs-python-32bitUpgrade libsamba-policy0-python3-32bitUpgrade libsamba-credentials-develUpgrade libsmbconf-develUpgrade libsmbclient-develUpgrade libsamba-errors0-32bitUpgrade libsmbldap2-32bitUpgrade libtevent-util0Upgrade libsamba-credentials0Upgrade samba-libs-python3Upgrade samba-libs-32bitUpgrade libndr-standard0Upgrade libdcerpc-samr0-32bitUpgrade ctdbUpgrade ldb-toolsUpgrade libndr0Upgrade libsamba-policy0-python3Upgrade libsmbldap2Upgrade libndr0-32bitUpgrade libwbclient0Upgrade samba-pidlUpgrade samba-pythonUpgrade libldb2-32bitUpgrade libndr-nbt0Upgrade samba-winbind-32bitUpgrade libsamba-util0Upgrade libsamba-hostconfig0Upgrade libnetapi-develUpgrade libsamba-util0-32bitUpgrade samba-client-32bitUpgrade libldb1-32bitUpgrade libnetapi0Upgrade libsamba-errors-develUpgrade libndr1Upgrade libsmbclient0Upgrade sambaUpgrade python3-ldb-32bitUpgrade libsmbconf0-32bit | Apr 29, 2020 | Apr 28, 2020 |
| Ubuntu | — | Upgrade sambaUpgrade samba (Ubuntu Pro) | Apr 29, 2020 | Apr 28, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub