A flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba handles certain requests as an Active Directory Domain Controller LDAP server, an unauthorized user can cause a stack overflow leading to a denial of service. The highest threat from this vulnerability is to system availability. This issue affects all samba versions before 4.10.15, before 4.11.8 and before 4.12.2.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | May 6, 2020 |
| Debian | — | Upgrade samba | Nov 24, 2020 | May 6, 2020 |
| Freebsd | — | Upgrade samba410Upgrade samba411Upgrade samba412 | Apr 30, 2020 | Apr 29, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Jul 28, 2020 | May 6, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-pidlUpgrade python2-samba-testUpgrade libwbclientUpgrade libsmbclientUpgrade ctdbUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade sambaUpgrade python2-sambaUpgrade ctdb-testsUpgrade samba-client-libsUpgrade python3-sambaUpgrade python3-samba-testUpgrade samba-clientUpgrade samba-test-libsUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libsUpgrade samba-dc-libsUpgrade samba-libsUpgrade samba-krb5-printing | Aug 31, 2020 | May 6, 2020 |
| Oracle Solaris | — | Upgrade service/network/ldap/openldap to version 2.4.50.0.0-11.4.22.0.1.69.4 on Solaris 11.4Upgrade system/network/ldap/openldap to version 2.4.50.0.0-11.4.22.0.1.69.4 on Solaris 11.4 | Jan 19, 2021 | May 6, 2020 |
| Samba | — | Upgrade to Samba 4.11.8 or later.Upgrade to Samba 4.10.15 or later.Upgrade to Samba 4.12.2 or later. | Jun 3, 2020 | May 6, 2020 |
| Suse | — | Upgrade samba-winbind-32bitUpgrade libsmbconf-develUpgrade python3-ldb-32bitUpgrade libsmbconf0-32bitUpgrade libndr0-32bitUpgrade ldb-toolsUpgrade libndr0Upgrade libsmbclient-develUpgrade libsamba-credentials0-32bitUpgrade libldb1-32bitUpgrade libsmbldap2-32bitUpgrade samba-libs-32bitUpgrade samba-libs-python-32bitUpgrade libsamba-util0Upgrade libnetapi-develUpgrade libsamba-credentials-develUpgrade libdcerpc-binding0Upgrade libsmbldap2Upgrade libsamba-passdb-develUpgrade libsamba-policy-python-develUpgrade libdcerpc-samr0-32bitUpgrade libndr-standard0Upgrade samba-libs-pythonUpgrade samba-pythonUpgrade libtevent-util0Upgrade libndr1Upgrade libsmbclient0Upgrade samba-client-32bitUpgrade libsamba-errors-develUpgrade libsamba-policy0-python3-32bitUpgrade libwbclient0Upgrade libsmbconf0Upgrade samba-libs-python3Upgrade libsamba-credentials0Upgrade ctdbUpgrade samba-cephUpgrade libndr-standard-develUpgrade python-ldbUpgrade libtevent-util-develUpgrade libldb2Upgrade libsamba-util0-32bitUpgrade libsamba-errors0-32bitUpgrade libsamba-util-develUpgrade libndr-nbt0Upgrade libdcerpc-develUpgrade libnetapi0Upgrade libsmbldap-develUpgrade python-ldb-develUpgrade sambaUpgrade samba-libsUpgrade libndr-krb5pac0-32bitUpgrade samba-docUpgrade libldb2-32bitUpgrade samba-pidlUpgrade samba-winbindUpgrade libsamba-hostconfig0Upgrade libsamba-policy0-python3Upgrade python3-ldbUpgrade libndr-nbt0-32bitUpgrade libsamdb0Upgrade samba-clientUpgrade libdcerpc-binding0-32bitUpgrade samba-python3Upgrade libndr-nbt-develUpgrade libsamba-passdb0-32bitUpgrade ctdb-testsUpgrade libsamba-policy0Upgrade libtevent-util0-32bitUpgrade libldb1Upgrade ctdb-pcp-pmdaUpgrade libwbclient0-32bitUpgrade samba-ad-dcUpgrade libsamdb-develUpgrade libsamba-errors0Upgrade libndr-standard0-32bitUpgrade libdcerpc-samr0Upgrade libdcerpc-samr-develUpgrade libndr-krb5pac0Upgrade libdcerpc0-32bitUpgrade libndr-develUpgrade python3-ldb-develUpgrade libnetapi-devel-32bitUpgrade libnetapi0-32bitUpgrade libdcerpc0Upgrade samba-dsdb-modulesUpgrade samba-ad-dc-32bitUpgrade libsmbclient0-32bitUpgrade libndr-krb5pac-develUpgrade libsamdb0-32bitUpgrade libsamba-policy-develUpgrade libsamba-policy0-32bitUpgrade libwbclient-develUpgrade samba-core-develUpgrade samba-libs-python3-32bitUpgrade libsamba-hostconfig-develUpgrade libndr1-32bitUpgrade libsamba-policy-python3-develUpgrade libldb-develUpgrade samba-testUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-passdb0 | Apr 29, 2020 | Apr 28, 2020 |
| Ubuntu | — | Upgrade sambaUpgrade samba (Ubuntu Pro) | Apr 29, 2020 | Apr 28, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub