A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libldb-develUpgrade python3-ldbUpgrade libldbUpgrade ldb-tools | May 4, 2022 | Jul 7, 2020 |
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Jul 7, 2020 |
| Centos_linux | — | Upgrade libldb-develUpgrade libldbUpgrade python3-ldb-debuginfoUpgrade libldb-debugsourceUpgrade libldb-debuginfoUpgrade ldb-tools-debuginfoUpgrade python3-ldbUpgrade ldb-tools | Nov 5, 2020 | Jul 7, 2020 |
| Debian | — | Upgrade ldbUpgrade samba | Nov 24, 2020 | Jul 7, 2020 |
| Freebsd | — | Upgrade samba410Upgrade samba412Upgrade samba411 | Jul 5, 2020 | Jul 2, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Jul 28, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-winbind-clientsUpgrade sambaUpgrade samba-clientUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-pythonUpgrade libwbclientUpgrade samba-common | Sep 16, 2021 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-commonUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-libsUpgrade samba-client-libsUpgrade samba-pythonUpgrade libwbclientUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-clientUpgrade samba-common-tools | Apr 30, 2021 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-clientUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-libsUpgrade samba-winbindUpgrade samba-commonUpgrade samba-common-libsUpgrade sambaUpgrade libwbclientUpgrade samba-python | Nov 2, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-winbind-krb5-locatorUpgrade python2-samba-testUpgrade sambaUpgrade samba-common-toolsUpgrade libsmbclientUpgrade python3-samba-testUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade ctdb-testsUpgrade samba-clientUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade samba-test-libsUpgrade samba-testUpgrade samba-krb5-printingUpgrade python3-sambaUpgrade samba-commonUpgrade ctdbUpgrade python2-sambaUpgrade samba-libsUpgrade libwbclientUpgrade samba-pidl | Dec 15, 2020 | Jul 7, 2020 |
| Oracle_linux | — | Upgrade python3-ldbUpgrade libldb-develUpgrade ldb-toolsUpgrade libldb | Nov 12, 2020 | Jul 2, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Jul 7, 2020 |
| Redhat_linux | — | No solution existsUpgrade ldb-toolsUpgrade ldb-tools-debuginfoUpgrade libldbUpgrade libldb-debuginfoUpgrade python3-ldb-debuginfoUpgrade python3-ldbUpgrade libldb-develUpgrade libldb-debugsource | Nov 5, 2020 | Jul 7, 2020 |
| Samba | — | Upgrade to Samba 4.11.11 or later.Upgrade to Samba 4.12.4 or later.Upgrade to Samba 4.10.17 or later. | Jul 7, 2020 | Jul 7, 2020 |
| Suse | — | Upgrade libsamba-errors0Upgrade libndr-krb5pac0-32bitUpgrade libndr-nbt0Upgrade libsmbclient0Upgrade libsamba-policy-python3-develUpgrade samba-libs-pythonUpgrade libsamba-policy0-python3-32bitUpgrade libsamba-policy0-32bitUpgrade python3-ldb-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libndr0-32bitUpgrade python3-ldb-develUpgrade libldb1-32bitUpgrade samba-ad-dc-32bitUpgrade samba-pythonUpgrade libsmbconf-develUpgrade libsamba-util0Upgrade libsamba-passdb0Upgrade libdcerpc-samr-develUpgrade samba-libs-python3-32bitUpgrade libsamba-util-develUpgrade sambaUpgrade samba-winbind-32bitUpgrade libsamdb0-32bitUpgrade samba-libs-python3Upgrade libsmbclient0-32bitUpgrade libldb-develUpgrade libtevent-util0Upgrade libsamba-credentials0-32bitUpgrade libsamba-policy-python-develUpgrade libsamba-policy-develUpgrade libsmbldap2Upgrade libnetapi-devel-32bitUpgrade libdcerpc-binding0Upgrade libldb2Upgrade libwbclient0-32bitUpgrade libndr-develUpgrade libwbclient-develUpgrade samba-winbindUpgrade samba-libs-32bitUpgrade libndr-nbt-develUpgrade samba-ad-dcUpgrade libndr-standard0Upgrade libsamba-errors0-32bitUpgrade libdcerpc-samr0-32bitUpgrade samba-docUpgrade libsamba-errors-develUpgrade ctdb-pcp-pmdaUpgrade libdcerpc0-32bitUpgrade ctdbUpgrade libnetapi-develUpgrade samba-clientUpgrade python-ldb-develUpgrade python-ldbUpgrade libnetapi0-32bitUpgrade libsamdb-develUpgrade libsamdb0Upgrade samba-core-develUpgrade libdcerpc0Upgrade libsamba-credentials-develUpgrade libdcerpc-binding0-32bitUpgrade libndr0Upgrade samba-python3Upgrade samba-client-32bitUpgrade libtevent-util0-32bitUpgrade libsamba-policy0-python3Upgrade python-ldb-32bitUpgrade libsmbclient-develUpgrade libndr-standard-develUpgrade libnetapi0Upgrade libndr-krb5pac-develUpgrade libsmbldap-develUpgrade samba-testUpgrade libsmbconf0Upgrade libsamba-passdb-develUpgrade samba-pidlUpgrade libsmbconf0-32bitUpgrade libndr-nbt0-32bitUpgrade python3-ldbUpgrade libndr1Upgrade libtevent-util-develUpgrade samba-dsdb-modulesUpgrade samba-libs-python-32bitUpgrade libndr1-32bitUpgrade libndr-standard0-32bitUpgrade libsamba-passdb0-32bitUpgrade ctdb-testsUpgrade libsamba-hostconfig-develUpgrade libdcerpc-samr0Upgrade libsamba-credentials0Upgrade ldb-toolsUpgrade samba-libsUpgrade libsamba-hostconfig0Upgrade samba-cephUpgrade libsmbldap2-32bitUpgrade libsamba-util0-32bitUpgrade libldb2-32bitUpgrade libndr-krb5pac0Upgrade libwbclient0Upgrade libsamba-policy0Upgrade libdcerpc-develUpgrade libldb1 | Jul 18, 2020 | Jul 2, 2020 |
| Ubuntu | — | Upgrade samba (Ubuntu Pro)Upgrade samba | Aug 5, 2020 | Jul 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub