A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ldb-toolsUpgrade libldbUpgrade python3-ldbUpgrade libldb-devel | May 4, 2022 | Jul 7, 2020 |
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Jul 7, 2020 |
| Centos_linux | — | Upgrade libldb-develUpgrade libldb-debuginfoUpgrade ldb-tools-debuginfoUpgrade libldb-debugsourceUpgrade libldbUpgrade python3-ldb-debuginfoUpgrade ldb-toolsUpgrade python3-ldb | Nov 5, 2020 | Jul 7, 2020 |
| Debian | — | Upgrade sambaUpgrade ldb | Nov 24, 2020 | Jul 7, 2020 |
| Freebsd | — | Upgrade samba412Upgrade samba410Upgrade samba411 | Jul 5, 2020 | Jul 2, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Jul 28, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-pythonUpgrade samba-commonUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-clientUpgrade sambaUpgrade samba-winbind-modules | Sep 16, 2021 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-common-libsUpgrade samba-commonUpgrade libsmbclientUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-pythonUpgrade samba-libsUpgrade sambaUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-common-tools | Apr 30, 2021 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade libsmbclientUpgrade samba-commonUpgrade sambaUpgrade samba-libsUpgrade samba-common-libsUpgrade samba-winbindUpgrade libwbclientUpgrade samba-python | Nov 2, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-pidlUpgrade samba-testUpgrade libwbclientUpgrade samba-krb5-printingUpgrade samba-libsUpgrade samba-test-libsUpgrade python3-sambaUpgrade python2-sambaUpgrade samba-commonUpgrade ctdbUpgrade python3-samba-testUpgrade samba-winbindUpgrade samba-dc-libsUpgrade ctdb-testsUpgrade samba-winbind-clientsUpgrade sambaUpgrade samba-winbind-krb5-locatorUpgrade python2-samba-testUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade libsmbclient | Dec 15, 2020 | Jul 7, 2020 |
| Oracle_linux | — | Upgrade libldbUpgrade ldb-toolsUpgrade libldb-develUpgrade python3-ldb | Nov 12, 2020 | Jul 2, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Jul 7, 2020 |
| Redhat_linux | — | Upgrade ldb-toolsNo solution existsUpgrade libldbUpgrade ldb-tools-debuginfoUpgrade libldb-debugsourceUpgrade libldb-debuginfoUpgrade python3-ldbUpgrade libldb-develUpgrade python3-ldb-debuginfo | Nov 5, 2020 | Jul 7, 2020 |
| Samba | — | Upgrade to Samba 4.10.17 or later.Upgrade to Samba 4.12.4 or later.Upgrade to Samba 4.11.11 or later. | Jul 7, 2020 | Jul 7, 2020 |
| Suse | — | Upgrade python-ldb-32bitUpgrade libtevent-util-develUpgrade libdcerpc-samr0Upgrade ctdb-testsUpgrade libndr-krb5pac-develUpgrade libndr-krb5pac0Upgrade libndr1-32bitUpgrade libnetapi0Upgrade ldb-toolsUpgrade libndr1Upgrade libsmbclient-develUpgrade samba-testUpgrade libsmbconf0-32bitUpgrade samba-pidlUpgrade libtevent-util0-32bitUpgrade libsamba-policy0-python3Upgrade libndr-standard-develUpgrade libndr0Upgrade libndr-nbt0-32bitUpgrade samba-dsdb-modulesUpgrade samba-libs-python-32bitUpgrade samba-libsUpgrade libldb2-32bitUpgrade samba-client-32bitUpgrade libndr-standard0-32bitUpgrade libdcerpc-develUpgrade libldb1Upgrade libdcerpc-binding0-32bitUpgrade libsamba-util0-32bitUpgrade libsamba-policy0Upgrade samba-cephUpgrade libwbclient0Upgrade libsamba-hostconfig0Upgrade samba-python3Upgrade libsmbldap2-32bitUpgrade libsamba-passdb-develUpgrade python3-ldbUpgrade libsmbldap-develUpgrade libsamba-credentials0Upgrade libsamba-passdb0-32bitUpgrade libsamba-hostconfig-develUpgrade libsmbconf0Upgrade libndr-krb5pac0-32bitUpgrade python3-ldb-develUpgrade libsamba-credentials-develUpgrade samba-ad-dcUpgrade libdcerpc-samr0-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-util0Upgrade libndr0-32bitUpgrade libsamba-errors0Upgrade libsamdb0Upgrade samba-libs-pythonUpgrade libndr-nbt-develUpgrade samba-core-develUpgrade samba-libs-python3-32bitUpgrade libdcerpc-binding0Upgrade libldb2Upgrade samba-clientUpgrade libsamba-policy0-32bitUpgrade samba-pythonUpgrade libndr-develUpgrade libsmbclient0Upgrade libwbclient0-32bitUpgrade libsamba-errors-develUpgrade libsamdb-develUpgrade libsamba-policy0-python3-32bitUpgrade libnetapi-devel-32bitUpgrade libsmbclient0-32bitUpgrade samba-docUpgrade python3-ldb-32bitUpgrade samba-libs-32bitUpgrade libtevent-util0Upgrade libsamba-passdb0Upgrade libsamba-policy-python3-develUpgrade libwbclient-develUpgrade libsamba-errors0-32bitUpgrade libldb1-32bitUpgrade libndr-standard0Upgrade libsmbldap2Upgrade samba-winbindUpgrade libndr-nbt0Upgrade libsamdb0-32bitUpgrade samba-libs-python3Upgrade libsamba-policy-python-develUpgrade libsamba-policy-develUpgrade libldb-develUpgrade libsamba-credentials0-32bitUpgrade libdcerpc0Upgrade python-ldbUpgrade libnetapi0-32bitUpgrade libnetapi-develUpgrade libdcerpc0-32bitUpgrade ctdb-pcp-pmdaUpgrade ctdbUpgrade sambaUpgrade python-ldb-develUpgrade samba-ad-dc-32bitUpgrade libsmbconf-develUpgrade samba-winbind-32bitUpgrade libsamba-util-develUpgrade libsamba-hostconfig0-32bit | Jul 18, 2020 | Jul 2, 2020 |
| Ubuntu | — | Upgrade sambaUpgrade samba (Ubuntu Pro) | Aug 5, 2020 | Jul 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub