A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.10. An authenticated user, having read permissions on the LDAP server, could use this flaw to cause denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade sambaUpgrade ldb | Mar 12, 2019 | Mar 6, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-winbind-krb5-locatorUpgrade python3-samba-testUpgrade samba-dc-libsUpgrade ctdb-testsUpgrade sambaUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade libsmbclientUpgrade python2-sambaUpgrade python3-sambaUpgrade samba-pidlUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-libsUpgrade samba-test-libsUpgrade ctdbUpgrade python2-samba-testUpgrade samba-testUpgrade samba-krb5-printing | Jan 3, 2020 | Mar 6, 2019 |
| Suse | — | Upgrade libsmbconf0-32bitUpgrade libdcerpc0-32bitUpgrade libdcerpc-samr-develUpgrade libdcerpc-develUpgrade libsmbclient0-32bitUpgrade libsamba-credentials0-32bitUpgrade samba-libsUpgrade libndr0Upgrade libldb1-32bitUpgrade libsamba-policy-develUpgrade libnetapi0Upgrade ctdbUpgrade sambaUpgrade libtevent-util-develUpgrade samba-libs-32bitUpgrade libldb2-32bitUpgrade libsamdb0Upgrade libsamba-util0-32bitUpgrade samba-winbindUpgrade libndr-krb5pac0-32bitUpgrade libsamba-policy0-python3Upgrade libsamba-credentials-develUpgrade libwbclient0Upgrade samba-libs-python3Upgrade libsmbldap-develUpgrade libsamba-util-develUpgrade samba-winbind-32bitUpgrade libsamba-errors0-32bitUpgrade libnetapi-develUpgrade libsamba-credentials0Upgrade libsmbclient0Upgrade samba-cephUpgrade libldb2Upgrade libndr-nbt0Upgrade libsmbconf0Upgrade python-ldbUpgrade libdcerpc-binding0Upgrade libsmbldap2-32bitUpgrade libndr1Upgrade libtevent-util0Upgrade libsamba-hostconfig0Upgrade libndr-nbt-develUpgrade libsmbclient-develUpgrade samba-docUpgrade libtevent-util0-32bitUpgrade libndr-develUpgrade samba-dsdb-modulesUpgrade libldb-develUpgrade samba-libs-python3-32bitUpgrade samba-clientUpgrade libdcerpc-samr0Upgrade python3-ldbUpgrade libdcerpc0Upgrade libsamba-hostconfig-develUpgrade libndr0-32bitUpgrade libndr-krb5pac-develUpgrade libndr-krb5pac0Upgrade libsamdb0-32bitUpgrade libldb1Upgrade samba-python3Upgrade python-ldb-32bitUpgrade libndr-standard-develUpgrade libsamba-errors-develUpgrade libsamba-passdb0-32bitUpgrade python3-ldb-32bitUpgrade libdcerpc-binding0-32bitUpgrade python3-ldb-develUpgrade libnetapi0-32bitUpgrade libndr-standard0-32bitUpgrade libsamba-policy-python3-develUpgrade libndr1-32bitUpgrade samba-client-32bitUpgrade python-ldb-develUpgrade samba-core-develUpgrade libndr-standard0Upgrade libsamba-util0Upgrade libwbclient-develUpgrade libsamba-errors0Upgrade libsamba-hostconfig0-32bitUpgrade libsamdb-develUpgrade libsmbldap2Upgrade ldb-toolsUpgrade libsamba-passdb-develUpgrade libsmbconf-develUpgrade libsamba-passdb0Upgrade libwbclient0-32bitUpgrade libndr-nbt0-32bit | Apr 6, 2019 | Mar 6, 2019 |
| Ubuntu | — | Upgrade libldb1 | Mar 2, 2020 | Feb 26, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub