Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is related to an attacker using the paged search control. The attacker must have directory read access in order to attempt an exploit.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Jun 24, 2019 | Jun 19, 2019 |
| Samba | — | Upgrade to Samba version 4.10.5 | Jun 21, 2019 | Jun 19, 2019 |
| Suse | — | Upgrade samba-libs-python3-32bitUpgrade samba-core-develUpgrade libsamba-errors0Upgrade libndr-nbt0Upgrade libtevent-util0-32bitUpgrade libndr-nbt-develUpgrade libndr1Upgrade libndr-nbt0-32bitUpgrade libsamba-credentials0-32bitUpgrade libndr-standard0Upgrade libsamba-passdb0-32bitUpgrade libdcerpc-develUpgrade libwbclient-develUpgrade libsamba-passdb0Upgrade samba-clientUpgrade libndr-develUpgrade libndr-krb5pac0Upgrade samba-docUpgrade libndr1-32bitUpgrade libsamba-policy-python3-develUpgrade libsamba-policy-develUpgrade libndr0-32bitUpgrade libdcerpc0Upgrade libndr0Upgrade libdcerpc-samr-develUpgrade libsamba-credentials-develUpgrade libsmbconf0-32bitUpgrade samba-winbindUpgrade libdcerpc0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libsmbclient0-32bitUpgrade libsamdb0Upgrade libsmbldap2-32bitUpgrade libsamba-errors0-32bitUpgrade libsmbconf-develUpgrade libsmbconf0Upgrade samba-libs-python3Upgrade sambaUpgrade libtevent-util0Upgrade samba-python3Upgrade libnetapi-develUpgrade libdcerpc-binding0Upgrade libsamba-util0Upgrade samba-winbind-32bitUpgrade libnetapi0-32bitUpgrade libsmbclient0Upgrade libwbclient0-32bitUpgrade libndr-krb5pac-develUpgrade ctdbUpgrade libsamba-errors-develUpgrade libnetapi0Upgrade libsmbldap2Upgrade libsamba-passdb-develUpgrade libtevent-util-develUpgrade libsamba-util0-32bitUpgrade samba-dsdb-modulesUpgrade libdcerpc-samr0Upgrade libndr-standard0-32bitUpgrade samba-client-32bitUpgrade libsmbldap-develUpgrade libsmbclient-develUpgrade samba-libsUpgrade libsamba-util-develUpgrade libsamba-policy0-python3Upgrade libwbclient0Upgrade libndr-krb5pac0-32bitUpgrade libndr-standard-develUpgrade samba-cephUpgrade libsamba-hostconfig0Upgrade libsamdb0-32bitUpgrade samba-libs-32bitUpgrade libsamba-credentials0Upgrade libdcerpc-binding0-32bitUpgrade libsamba-hostconfig-develUpgrade libsamdb-devel | Dec 19, 2019 | Jun 19, 2019 |
| Ubuntu | — | Upgrade samba | Mar 2, 2020 | Jun 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub