A flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba handles certain requests as an Active Directory Domain Controller LDAP server, an unauthorized user can cause a stack overflow leading to a denial of service. The highest threat from this vulnerability is to system availability. This issue affects all samba versions before 4.10.15, before 4.11.8 and before 4.12.2.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | May 6, 2020 |
| Debian | — | Upgrade samba | Nov 24, 2020 | May 6, 2020 |
| Freebsd | — | Upgrade samba412Upgrade samba411Upgrade samba410 | Apr 30, 2020 | Apr 29, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Jul 28, 2020 | May 6, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-dc-libsUpgrade samba-testUpgrade samba-common-libsUpgrade samba-krb5-printingUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade samba-clientUpgrade samba-pidlUpgrade samba-winbindUpgrade samba-client-libsUpgrade ctdb-testsUpgrade python3-samba-testUpgrade libsmbclientUpgrade ctdbUpgrade python3-sambaUpgrade sambaUpgrade python2-sambaUpgrade python2-samba-testUpgrade libwbclientUpgrade samba-winbind-modules | Aug 31, 2020 | May 6, 2020 |
| Oracle Solaris | — | Upgrade service/network/ldap/openldap to version 2.4.50.0.0-11.4.22.0.1.69.4 on Solaris 11.4Upgrade system/network/ldap/openldap to version 2.4.50.0.0-11.4.22.0.1.69.4 on Solaris 11.4 | Jan 19, 2021 | May 6, 2020 |
| Samba | — | Upgrade to Samba 4.11.8 or later.Upgrade to Samba 4.10.15 or later.Upgrade to Samba 4.12.2 or later. | Jun 3, 2020 | May 6, 2020 |
| Suse | — | Upgrade libdcerpc-develUpgrade libndr1Upgrade samba-client-32bitUpgrade libndr-krb5pac0-32bitUpgrade libwbclient0Upgrade samba-winbind-32bitUpgrade libnetapi-develUpgrade libsamba-util0Upgrade libsamba-policy0-python3-32bitUpgrade libsmbconf-develUpgrade samba-winbindUpgrade samba-libs-python-32bitUpgrade libsamba-credentials-develUpgrade libsamba-util0-32bitUpgrade libsmbconf0Upgrade libndr-standard-develUpgrade libsmbclient0Upgrade libndr0-32bitUpgrade samba-libs-pythonUpgrade libdcerpc-samr0-32bitUpgrade libsmbclient-develUpgrade ldb-toolsUpgrade libsmbldap2-32bitUpgrade samba-pythonUpgrade ctdbUpgrade libtevent-util0Upgrade libsamba-hostconfig0Upgrade samba-libs-32bitUpgrade libsamba-policy0-python3Upgrade libldb1-32bitUpgrade libsmbldap2Upgrade libndr0Upgrade libsamba-passdb-develUpgrade python-ldbUpgrade libsamba-util-develUpgrade python3-ldb-32bitUpgrade samba-cephUpgrade libsmbconf0-32bitUpgrade sambaUpgrade libtevent-util-develUpgrade libdcerpc-binding0Upgrade samba-libsUpgrade libsamba-credentials0-32bitUpgrade libsamba-errors-develUpgrade libndr-nbt0Upgrade libldb2Upgrade libldb2-32bitUpgrade samba-docUpgrade libsamba-policy-python-develUpgrade samba-pidlUpgrade libndr-standard0Upgrade libsamba-errors0-32bitUpgrade samba-libs-python3Upgrade python-ldb-develUpgrade libsmbldap-develUpgrade libnetapi0Upgrade libsamba-credentials0Upgrade libndr-krb5pac0Upgrade samba-clientUpgrade libwbclient0-32bitUpgrade samba-testUpgrade samba-python3Upgrade libwbclient-develUpgrade libsmbclient0-32bitUpgrade libsamdb0-32bitUpgrade libndr-krb5pac-develUpgrade ctdb-testsUpgrade libsamba-policy-develUpgrade python3-ldb-develUpgrade libsamba-errors0Upgrade libsamba-hostconfig-develUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-passdb0Upgrade libndr1-32bitUpgrade samba-ad-dcUpgrade ctdb-pcp-pmdaUpgrade libldb1Upgrade samba-core-develUpgrade libsamba-policy0-32bitUpgrade libsamdb-develUpgrade libndr-develUpgrade libldb-develUpgrade libsamba-policy-python3-develUpgrade libdcerpc-samr-develUpgrade libnetapi0-32bitUpgrade libnetapi-devel-32bitUpgrade python3-ldbUpgrade libdcerpc0-32bitUpgrade libsamba-policy0Upgrade samba-libs-python3-32bitUpgrade libsamba-passdb0-32bitUpgrade libdcerpc-samr0Upgrade libndr-standard0-32bitUpgrade libtevent-util0-32bitUpgrade samba-ad-dc-32bitUpgrade samba-dsdb-modulesUpgrade libndr-nbt0-32bitUpgrade libdcerpc0Upgrade libsamdb0Upgrade libndr-nbt-develUpgrade libdcerpc-binding0-32bit | Apr 29, 2020 | Apr 28, 2020 |
| Ubuntu | — | Upgrade sambaUpgrade samba (Ubuntu Pro) | Apr 29, 2020 | Apr 28, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub