Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is related to an attacker using the paged search control. The attacker must have directory read access in order to attempt an exploit.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Jun 24, 2019 | Jun 19, 2019 |
| Samba | — | Upgrade to Samba version 4.10.5 | Jun 21, 2019 | Jun 19, 2019 |
| Suse | — | Upgrade libndr-standard-develUpgrade samba-cephUpgrade libdcerpc-samr0Upgrade libwbclient0Upgrade samba-client-32bitUpgrade libsmbldap-develUpgrade libndr-standard0-32bitUpgrade libsamba-hostconfig0Upgrade libsamba-util0-32bitUpgrade libtevent-util-develUpgrade samba-dsdb-modulesUpgrade libsamba-passdb-develUpgrade samba-libsUpgrade libsamdb-develUpgrade libsmbclient-develUpgrade libsamba-credentials0Upgrade samba-libs-32bitUpgrade libdcerpc-binding0-32bitUpgrade libsamba-hostconfig-develUpgrade libsamdb0-32bitUpgrade libsamba-util-develUpgrade libndr-krb5pac0-32bitUpgrade libsamba-policy0-python3Upgrade libndr0Upgrade libsamba-policy-develUpgrade libdcerpc-samr-develUpgrade libsamba-errors0-32bitUpgrade libsamba-credentials-develUpgrade libdcerpc0Upgrade libtevent-util0Upgrade libsamba-util0Upgrade samba-libs-python3-32bitUpgrade libnetapi-develUpgrade libwbclient-develUpgrade libsamba-passdb0-32bitUpgrade samba-winbind-32bitUpgrade libsmbconf0-32bitUpgrade libtevent-util0-32bitUpgrade libndr1-32bitUpgrade libwbclient0-32bitUpgrade libndr-krb5pac-develUpgrade sambaUpgrade samba-winbindUpgrade libsamba-errors-develUpgrade libsmbldap2Upgrade libndr-nbt0Upgrade libndr-nbt0-32bitUpgrade libsmbldap2-32bitUpgrade libndr-develUpgrade libndr0-32bitUpgrade samba-libs-python3Upgrade samba-docUpgrade libsamba-policy-python3-develUpgrade libsamdb0Upgrade libndr-krb5pac0Upgrade libsamba-credentials0-32bitUpgrade libsamba-errors0Upgrade libsamba-hostconfig0-32bitUpgrade libsmbclient0-32bitUpgrade libsmbconf-develUpgrade ctdbUpgrade libdcerpc-binding0Upgrade libsamba-passdb0Upgrade libsmbclient0Upgrade libnetapi0Upgrade libnetapi0-32bitUpgrade samba-clientUpgrade libndr-standard0Upgrade libsmbconf0Upgrade libndr-nbt-develUpgrade samba-python3Upgrade libdcerpc-develUpgrade libdcerpc0-32bitUpgrade libndr1Upgrade samba-core-devel | Dec 19, 2019 | Jun 19, 2019 |
| Ubuntu | — | Upgrade samba | Mar 2, 2020 | Jun 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub