A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-ldbUpgrade libldb-develUpgrade ldb-toolsUpgrade libldb | May 4, 2022 | Jul 7, 2020 |
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Jul 7, 2020 |
| Centos_linux | — | Upgrade ldb-toolsUpgrade python3-ldbUpgrade python3-ldb-debuginfoUpgrade libldb-debuginfoUpgrade libldb-develUpgrade ldb-tools-debuginfoUpgrade libldb-debugsourceUpgrade libldb | Nov 5, 2020 | Jul 7, 2020 |
| Debian | — | Upgrade ldbUpgrade samba | Nov 24, 2020 | Jul 7, 2020 |
| Freebsd | — | Upgrade samba411Upgrade samba412Upgrade samba410 | Jul 5, 2020 | Jul 2, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Jul 28, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-pythonUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-commonUpgrade samba-clientUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade sambaUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba-common-tools | Sep 16, 2021 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsmbclientUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-pythonUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-libsUpgrade libwbclientUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-winbind | Apr 30, 2021 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-pythonUpgrade samba-libsUpgrade samba-winbindUpgrade samba-common-libsUpgrade libwbclientUpgrade sambaUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-clientUpgrade libsmbclientUpgrade samba-winbind-modules | Nov 2, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-winbind-modulesUpgrade ctdb-testsUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-common-toolsUpgrade python3-samba-testUpgrade samba-client-libsUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade samba-winbind-krb5-locatorUpgrade python2-samba-testUpgrade samba-libsUpgrade python2-sambaUpgrade libwbclientUpgrade samba-commonUpgrade ctdbUpgrade python3-sambaUpgrade samba-testUpgrade samba-krb5-printingUpgrade samba-pidlUpgrade samba-test-libs | Dec 15, 2020 | Jul 7, 2020 |
| Oracle_linux | — | Upgrade libldbUpgrade ldb-toolsUpgrade libldb-develUpgrade python3-ldb | Nov 12, 2020 | Jul 2, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Jul 7, 2020 |
| Redhat_linux | — | Upgrade libldbUpgrade ldb-tools-debuginfoUpgrade ldb-toolsNo solution existsUpgrade python3-ldb-debuginfoUpgrade python3-ldbUpgrade libldb-debuginfoUpgrade libldb-develUpgrade libldb-debugsource | Nov 5, 2020 | Jul 7, 2020 |
| Samba | — | Upgrade to Samba 4.10.17 or later.Upgrade to Samba 4.12.4 or later.Upgrade to Samba 4.11.11 or later. | Jul 7, 2020 | Jul 7, 2020 |
| Suse | — | Upgrade libnetapi-develUpgrade libnetapi0-32bitUpgrade python-ldb-develUpgrade ctdb-pcp-pmdaUpgrade libdcerpc0-32bitUpgrade python-ldbUpgrade libsamba-hostconfig0-32bitUpgrade ctdbUpgrade libdcerpc0Upgrade libndr0-32bitUpgrade samba-libs-python3-32bitUpgrade samba-winbind-32bitUpgrade samba-libs-pythonUpgrade libldb2Upgrade libdcerpc-samr-develUpgrade libwbclient0-32bitUpgrade python3-ldb-develUpgrade libsamba-errors-develUpgrade libsamba-util0Upgrade samba-docUpgrade libwbclient-develUpgrade samba-ad-dcUpgrade libsamba-errors0-32bitUpgrade libsmbclient0Upgrade libsamba-errors0Upgrade libtevent-util0Upgrade libsamba-passdb0Upgrade samba-libs-32bitUpgrade sambaUpgrade libsamba-policy0-32bitUpgrade samba-pythonUpgrade libndr-krb5pac0-32bitUpgrade libsamba-policy0-python3-32bitUpgrade libsamba-policy-develUpgrade libsamba-policy-python3-develUpgrade libsmbldap2Upgrade libdcerpc-samr0-32bitUpgrade python3-ldb-32bitUpgrade samba-winbindUpgrade samba-libs-python3Upgrade libldb1-32bitUpgrade libsamba-credentials0-32bitUpgrade libndr-nbt0Upgrade libldb-develUpgrade libsamba-policy-python-develUpgrade libsamdb0-32bitUpgrade samba-ad-dc-32bitUpgrade libsamba-util-develUpgrade libsmbconf-develUpgrade libsamba-credentials-develUpgrade samba-clientUpgrade libsmbclient0-32bitUpgrade libdcerpc-binding0Upgrade libndr-nbt-develUpgrade libndr-develUpgrade libndr-standard0Upgrade samba-core-develUpgrade libsamdb-develUpgrade libnetapi-devel-32bitUpgrade libsamdb0Upgrade libtevent-util0-32bitUpgrade libnetapi0Upgrade libndr1-32bitUpgrade ldb-toolsUpgrade ctdb-testsUpgrade samba-libsUpgrade libsmbldap2-32bitUpgrade libsamba-credentials0Upgrade libtevent-util-develUpgrade samba-dsdb-modulesUpgrade libndr1Upgrade libndr-standard0-32bitUpgrade samba-libs-python-32bitUpgrade libsmbconf0-32bitUpgrade samba-pidlUpgrade libsmbconf0Upgrade libndr-nbt0-32bitUpgrade python3-ldbUpgrade libdcerpc-binding0-32bitUpgrade libsamba-hostconfig-develUpgrade libsamba-passdb0-32bitUpgrade libsamba-passdb-develUpgrade libldb2-32bitUpgrade libwbclient0Upgrade libsamba-policy0Upgrade samba-client-32bitUpgrade libdcerpc-develUpgrade libldb1Upgrade libsamba-policy0-python3Upgrade samba-python3Upgrade libndr0Upgrade samba-cephUpgrade libsamba-util0-32bitUpgrade libdcerpc-samr0Upgrade libndr-krb5pac-develUpgrade libsmbldap-develUpgrade python-ldb-32bitUpgrade libsmbclient-develUpgrade samba-testUpgrade libndr-standard-develUpgrade libsamba-hostconfig0Upgrade libndr-krb5pac0 | Jul 18, 2020 | Jul 2, 2020 |
| Ubuntu | — | Upgrade sambaUpgrade samba (Ubuntu Pro) | Aug 5, 2020 | Jul 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub