The ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles certain zero values, which allows remote attackers to cause a denial of service (infinite loop) via crafted packets.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ldbUpgrade samba | Aug 30, 2017 | Dec 29, 2015 |
| Centos_linux | — | Upgrade ldb-toolsUpgrade libldb-develUpgrade pyldb-develUpgrade libldbUpgrade pyldb | Jul 6, 2016 | Dec 29, 2015 |
| Debian | — | Upgrade ldbUpgrade samba | Jan 4, 2016 | Dec 29, 2015 |
| Freebsd | — | Upgrade samba36Upgrade samba4Upgrade ldbUpgrade samba41Upgrade samba43Upgrade samba42 | Dec 10, 2025 | Dec 19, 2015 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Dec 29, 2015 |
| Oracle_linux | — | Upgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba-test-develUpgrade samba-test-libsUpgrade pyldbUpgrade samba4Upgrade samba-dc-libsUpgrade samba4-pidlUpgrade samba4-libsUpgrade samba-common-toolsUpgrade samba-testUpgrade samba4-commonUpgrade ldb-toolsUpgrade samba4-clientUpgrade samba-clientUpgrade samba-common-libsUpgrade samba4-swatUpgrade samba-libsUpgrade samba4-testUpgrade samba-commonUpgrade samba-winbindUpgrade samba-pidlUpgrade samba-dcUpgrade samba4-pythonUpgrade samba-vfs-glusterfsUpgrade samba4-winbind-krb5-locatorUpgrade samba4-dc-libsUpgrade libldb-develUpgrade samba4-winbindUpgrade sambaUpgrade libldbUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba-pythonUpgrade pyldb-develUpgrade libsmbclient-develUpgrade samba-winbind-modulesUpgrade samba4-dcUpgrade libwbclientUpgrade samba-develUpgrade samba4-winbind-clientsUpgrade libwbclient-develUpgrade samba4-devel | Oct 16, 2024 | Dec 29, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 16, 2015 |
| Samba | — | Upgrade to Samba version 4.3.3Upgrade to Samba version 4.1.22Upgrade to Samba version 4.2.7 | Mar 24, 2016 | Dec 29, 2015 |
| Suse | — | Upgrade libgensec-develUpgrade libsamba-credentials0-32bitUpgrade libsamba-policy0-python3Upgrade libdcerpc-binding0-32bitUpgrade libsmbclient0Upgrade libtevent0-32bitUpgrade libndr-standard0-32bitUpgrade python3-ldbUpgrade libsmbsharemodes-develUpgrade libtdb-develUpgrade libldb1Upgrade libsamba-policy-python3-develUpgrade libsamba-passdb0Upgrade libndr-standard-develUpgrade libsamba-hostconfig-develUpgrade tdb-toolsUpgrade libdcerpc-samr0Upgrade libtalloc2Upgrade samba-test-develUpgrade libsamba-errors0-32bitUpgrade samba-kdcUpgrade libndr1-32bitUpgrade pytallocUpgrade libsamba-passdb-develUpgrade libdcerpc-atsvc-develUpgrade samba-libsUpgrade libsamdb0-32bitUpgrade libregistry0Upgrade libsamdb-develUpgrade python-ldb-develUpgrade samba-libs-python3-32bitUpgrade ldb-toolsUpgrade libndr-develUpgrade libsamba-util0-32bitUpgrade samba-clientUpgrade libtdb1Upgrade libtalloc-develUpgrade libregistry-develUpgrade samba-dsdb-modulesUpgrade libnetapi0-32bitUpgrade libndr-standard0Upgrade libtevent0Upgrade libsmbclient-raw0Upgrade libndr-nbt0-32bitUpgrade libtalloc2-32bitUpgrade samba-client-32bitUpgrade libgensec0-32bitUpgrade libdcerpc0Upgrade pyldbUpgrade libsamba-credentials0Upgrade libtevent-util-develUpgrade libsmbclient-raw-develUpgrade libsamba-errors-develUpgrade pytalloc-develUpgrade libldb2Upgrade libldb-develUpgrade libsmbconf0-32bitUpgrade libsmbldap-develUpgrade libndr-krb5pac-develUpgrade pytalloc-32bitUpgrade libpdb0-32bitUpgrade libsamba-util0Upgrade libwbclient0-32bitUpgrade libsamdb0Upgrade pyldb-develUpgrade samba-32bitUpgrade libndr0Upgrade libndr-krb5pac0Upgrade libsmbldap0-32bitUpgrade libpdb-develUpgrade libsmbconf-develUpgrade samba-core-develUpgrade libsamba-policy0Upgrade samba-pythonUpgrade libpdb0Upgrade libsamba-util-develUpgrade libsmbldap0Upgrade libwbclient0Upgrade libsmbconf0Upgrade libsamba-hostconfig0Upgrade libsamba-credentials-develUpgrade python3-ldb-develUpgrade libtevent-develUpgrade libndr-krb5pac0-32bitUpgrade libnetapi-develUpgrade sambaUpgrade libwbclient-develUpgrade python-ldbUpgrade samba-docUpgrade libndr0-32bitUpgrade samba-winbindUpgrade libtevent-util0Upgrade libldb2-32bitUpgrade samba-libs-python3Upgrade libsamba-policy-develUpgrade samba-python3Upgrade libdcerpc-samr-develUpgrade libsamba-errors0Upgrade libsmbclient-develUpgrade libdcerpc-binding0Upgrade libsmbldap2Upgrade libtevent-util0-32bitUpgrade libtdb1-32bitUpgrade libsmbclient0-32bitUpgrade libsmbsharemodes0Upgrade samba-cephUpgrade libsamba-hostconfig0-32bitUpgrade libndr-nbt-develUpgrade libgensec0Upgrade libndr1Upgrade libsmbldap2-32bitUpgrade libsmbclient-raw0-32bitUpgrade libndr-nbt0Upgrade libnetapi0Upgrade libdcerpc-develUpgrade libldb1-32bitUpgrade samba-winbind-32bitUpgrade ctdbUpgrade samba-libs-32bitUpgrade libdcerpc0-32bitUpgrade libdcerpc-atsvc0Upgrade libsamba-passdb0-32bit | Jan 4, 2016 | Dec 18, 2015 |
| Ubuntu | — | Upgrade sambaUpgrade libldb1 | Feb 2, 2016 | Dec 29, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub