A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.10. An authenticated user, having read permissions on the LDAP server, could use this flaw to cause denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade sambaUpgrade ldb | Mar 12, 2019 | Mar 6, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-clientUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-commonUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba-winbindUpgrade python3-samba-testUpgrade ctdb-testsUpgrade samba-dc-libsUpgrade samba-winbind-modulesUpgrade python2-sambaUpgrade python3-sambaUpgrade samba-libsUpgrade samba-pidlUpgrade samba-testUpgrade samba-test-libsUpgrade python2-samba-testUpgrade ctdbUpgrade samba-krb5-printingUpgrade samba-client-libsUpgrade libwbclient | Jan 3, 2020 | Mar 6, 2019 |
| Suse | — | Upgrade libndr-krb5pac-develUpgrade libwbclient0-32bitUpgrade libsamba-errors0Upgrade libsamba-passdb-develUpgrade libndr0-32bitUpgrade libsamba-errors-develUpgrade libsamba-hostconfig-develUpgrade libsamba-hostconfig0-32bitUpgrade ldb-toolsUpgrade libsamba-policy-python3-develUpgrade libndr-krb5pac0Upgrade libsamdb-develUpgrade libsmbldap2Upgrade libsmbconf-develUpgrade python-ldb-develUpgrade libndr-standard0Upgrade samba-clientUpgrade python3-ldbUpgrade python3-ldb-develUpgrade libnetapi0-32bitUpgrade libsamba-passdb0-32bitUpgrade libsamba-passdb0Upgrade samba-client-32bitUpgrade libndr-develUpgrade libndr-nbt0-32bitUpgrade samba-core-develUpgrade libsamba-util0Upgrade samba-python3Upgrade libwbclient-develUpgrade samba-libs-python3-32bitUpgrade python3-ldb-32bitUpgrade libdcerpc-binding0-32bitUpgrade samba-dsdb-modulesUpgrade libdcerpc0Upgrade libsamdb0-32bitUpgrade libdcerpc-samr0Upgrade libldb1Upgrade libndr1-32bitUpgrade libndr-standard0-32bitUpgrade libldb-develUpgrade libndr-standard-develUpgrade python-ldb-32bitUpgrade samba-docUpgrade libnetapi0Upgrade libtevent-util0Upgrade libsmbldap2-32bitUpgrade libndr1Upgrade libsmbconf0Upgrade python-ldbUpgrade libdcerpc-binding0Upgrade libldb1-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-policy0-python3Upgrade libdcerpc0-32bitUpgrade samba-libsUpgrade libsamba-util0-32bitUpgrade libwbclient0Upgrade libndr-nbt-develUpgrade libsmbclient-develUpgrade samba-winbindUpgrade libsamba-policy-develUpgrade ctdbUpgrade libtevent-util0-32bitUpgrade sambaUpgrade libsamba-credentials0Upgrade libsamba-errors0-32bitUpgrade libndr-krb5pac0-32bitUpgrade samba-libs-python3Upgrade libsamba-util-develUpgrade libldb2-32bitUpgrade samba-winbind-32bitUpgrade libnetapi-develUpgrade libsmbldap-develUpgrade libsamba-hostconfig0Upgrade libsamba-credentials-develUpgrade libdcerpc-develUpgrade libldb2Upgrade libsmbclient0Upgrade libsmbconf0-32bitUpgrade libsmbclient0-32bitUpgrade libndr0Upgrade libtevent-util-develUpgrade libsamdb0Upgrade libsamba-credentials0-32bitUpgrade libndr-nbt0Upgrade samba-libs-32bitUpgrade samba-ceph | Apr 6, 2019 | Mar 6, 2019 |
| Ubuntu | — | Upgrade libldb1 | Mar 2, 2020 | Feb 26, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub