A flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba handles certain requests as an Active Directory Domain Controller LDAP server, an unauthorized user can cause a stack overflow leading to a denial of service. The highest threat from this vulnerability is to system availability. This issue affects all samba versions before 4.10.15, before 4.11.8 and before 4.12.2.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | May 6, 2020 |
| Debian | — | Upgrade samba | Nov 24, 2020 | May 6, 2020 |
| Freebsd | — | Upgrade samba412Upgrade samba411Upgrade samba410 | Apr 30, 2020 | Apr 29, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Jul 28, 2020 | May 6, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-commonUpgrade samba-libsUpgrade samba-dc-libsUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-testUpgrade samba-krb5-printingUpgrade samba-test-libsUpgrade libsmbclientUpgrade python3-samba-testUpgrade libwbclientUpgrade samba-pidlUpgrade python3-sambaUpgrade ctdbUpgrade ctdb-testsUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-client-libsUpgrade python2-sambaUpgrade sambaUpgrade python2-samba-test | Aug 31, 2020 | May 6, 2020 |
| Oracle Solaris | — | Upgrade system/network/ldap/openldap to version 2.4.50.0.0-11.4.22.0.1.69.4 on Solaris 11.4Upgrade service/network/ldap/openldap to version 2.4.50.0.0-11.4.22.0.1.69.4 on Solaris 11.4 | Jan 19, 2021 | May 6, 2020 |
| Samba | — | Upgrade to Samba 4.11.8 or later.Upgrade to Samba 4.12.2 or later.Upgrade to Samba 4.10.15 or later. | Jun 3, 2020 | May 6, 2020 |
| Suse | — | Upgrade ctdbUpgrade ldb-toolsUpgrade libndr-standard0Upgrade libsmbldap2-32bitUpgrade libsmbclient0Upgrade libndr1Upgrade libndr-krb5pac0-32bitUpgrade libsamba-errors0-32bitUpgrade python-ldb-develUpgrade libdcerpc-develUpgrade samba-client-32bitUpgrade libsmbclient-develUpgrade samba-docUpgrade libtevent-util-develUpgrade libwbclient0Upgrade libsmbldap-develUpgrade libnetapi0Upgrade samba-winbind-32bitUpgrade libtevent-util0Upgrade python3-ldb-32bitUpgrade samba-cephUpgrade libdcerpc-binding0Upgrade libndr-nbt0Upgrade libsamba-credentials0-32bitUpgrade libsamba-passdb-develUpgrade samba-libsUpgrade libldb2-32bitUpgrade libsamba-hostconfig0Upgrade libsamba-policy0-python3Upgrade libndr0-32bitUpgrade sambaUpgrade libldb1-32bitUpgrade libndr0Upgrade libsmbconf0-32bitUpgrade libldb2Upgrade python-ldbUpgrade libsmbconf0Upgrade libsamba-policy-python-develUpgrade libsmbldap2Upgrade samba-pidlUpgrade libndr-standard-develUpgrade libsamba-util-develUpgrade samba-libs-pythonUpgrade samba-pythonUpgrade libsamba-errors-develUpgrade samba-libs-python3Upgrade libdcerpc-samr0-32bitUpgrade libsmbconf-develUpgrade libsamba-credentials0Upgrade libsamba-util0-32bitUpgrade samba-libs-python-32bitUpgrade libsamba-util0Upgrade samba-winbindUpgrade samba-libs-32bitUpgrade libsamba-policy0-python3-32bitUpgrade libnetapi-develUpgrade libsamba-credentials-develUpgrade libndr-standard0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libnetapi-devel-32bitUpgrade libwbclient0-32bitUpgrade libsamba-passdb0-32bitUpgrade libnetapi0-32bitUpgrade libsamba-hostconfig-develUpgrade libsamba-policy0Upgrade libdcerpc-samr-develUpgrade libldb1Upgrade ctdb-pcp-pmdaUpgrade libsamdb-develUpgrade libdcerpc0Upgrade libndr-krb5pac0Upgrade python3-ldb-develUpgrade samba-ad-dcUpgrade python3-ldbUpgrade samba-libs-python3-32bitUpgrade samba-python3Upgrade ctdb-testsUpgrade libndr-nbt0-32bitUpgrade libndr-nbt-develUpgrade libsamdb0Upgrade samba-clientUpgrade libndr-develUpgrade libldb-develUpgrade libsamba-passdb0Upgrade libsamba-hostconfig0-32bitUpgrade libsamba-policy-python3-develUpgrade libsamba-policy0-32bitUpgrade libndr1-32bitUpgrade samba-testUpgrade samba-core-develUpgrade libsamdb0-32bitUpgrade libndr-krb5pac-develUpgrade libsmbclient0-32bitUpgrade libsamba-policy-develUpgrade libtevent-util0-32bitUpgrade samba-dsdb-modulesUpgrade libsamba-errors0Upgrade libwbclient-develUpgrade libdcerpc0-32bitUpgrade libdcerpc-samr0Upgrade samba-ad-dc-32bit | Apr 29, 2020 | Apr 28, 2020 |
| Ubuntu | — | Upgrade samba (Ubuntu Pro)Upgrade samba | Apr 29, 2020 | Apr 28, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub