A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ldb-toolsUpgrade libldbUpgrade python3-ldbUpgrade libldb-devel | May 4, 2022 | Jul 7, 2020 |
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Jul 7, 2020 |
| Centos_linux | — | Upgrade python3-ldb-debuginfoUpgrade libldbUpgrade libldb-develUpgrade libldb-debugsourceUpgrade ldb-tools-debuginfoUpgrade libldb-debuginfoUpgrade python3-ldbUpgrade ldb-tools | Nov 5, 2020 | Jul 7, 2020 |
| Debian | — | Upgrade sambaUpgrade ldb | Nov 24, 2020 | Jul 7, 2020 |
| Freebsd | — | Upgrade samba411Upgrade samba410Upgrade samba412 | Jul 5, 2020 | Jul 2, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Jul 28, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libwbclientUpgrade samba-commonUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade samba-clientUpgrade samba-winbindUpgrade libsmbclientUpgrade sambaUpgrade samba-common-libsUpgrade samba-common-tools | Sep 16, 2021 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-client-libsUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade libwbclientUpgrade samba-libsUpgrade sambaUpgrade samba-clientUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-common | Apr 30, 2021 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-pythonUpgrade sambaUpgrade samba-libsUpgrade samba-commonUpgrade samba-winbindUpgrade libwbclientUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade samba-client | Nov 2, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-krb5-printingUpgrade python2-sambaUpgrade samba-libsUpgrade libwbclientUpgrade ctdbUpgrade samba-pidlUpgrade samba-test-libsUpgrade samba-commonUpgrade samba-testUpgrade python3-sambaUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade samba-clientUpgrade python2-samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-dc-libsUpgrade python3-samba-testUpgrade libsmbclientUpgrade samba-winbindUpgrade sambaUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade ctdb-tests | Dec 15, 2020 | Jul 7, 2020 |
| Oracle_linux | — | Upgrade python3-ldbUpgrade libldb-develUpgrade ldb-toolsUpgrade libldb | Nov 12, 2020 | Jul 2, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Jul 7, 2020 |
| Redhat_linux | — | Upgrade libldb-develUpgrade python3-ldbUpgrade libldb-debugsourceUpgrade libldb-debuginfoUpgrade python3-ldb-debuginfoUpgrade ldb-toolsNo solution existsUpgrade ldb-tools-debuginfoUpgrade libldb | Nov 5, 2020 | Jul 7, 2020 |
| Samba | — | Upgrade to Samba 4.12.4 or later.Upgrade to Samba 4.10.17 or later.Upgrade to Samba 4.11.11 or later. | Jul 7, 2020 | Jul 7, 2020 |
| Suse | — | Upgrade libsmbldap2Upgrade libldb-develUpgrade libsamba-policy-python-develUpgrade samba-libs-python3Upgrade libdcerpc-binding0Upgrade libsamba-credentials0-32bitUpgrade libsamba-policy-develUpgrade samba-winbindUpgrade libnetapi-devel-32bitUpgrade libwbclient-develUpgrade python3-ldb-develUpgrade libtevent-util0Upgrade libndr0-32bitUpgrade samba-libs-32bitUpgrade libsamba-errors-develUpgrade libsamba-policy-python3-develUpgrade libsmbclient0Upgrade libsamba-passdb0Upgrade libsamba-util0Upgrade samba-ad-dcUpgrade libndr-nbt-develUpgrade samba-libs-python3-32bitUpgrade ctdb-pcp-pmdaUpgrade libsamdb0Upgrade libnetapi-develUpgrade libldb2Upgrade libdcerpc0Upgrade libdcerpc0-32bitUpgrade libsamba-credentials-develUpgrade python-ldbUpgrade python-ldb-develUpgrade libnetapi0-32bitUpgrade samba-core-develUpgrade libsamdb-develUpgrade libsmbconf-develUpgrade libsamba-util-develUpgrade libsamba-hostconfig0-32bitUpgrade samba-ad-dc-32bitUpgrade samba-winbind-32bitUpgrade samba-clientUpgrade libndr-nbt0Upgrade sambaUpgrade libsamdb0-32bitUpgrade samba-libs-pythonUpgrade libdcerpc-samr-develUpgrade libndr-standard0Upgrade python3-ldb-32bitUpgrade libndr-krb5pac0-32bitUpgrade samba-pythonUpgrade libdcerpc-samr0-32bitUpgrade ctdbUpgrade libndr-develUpgrade libsamba-errors0Upgrade libwbclient0-32bitUpgrade libsamba-errors0-32bitUpgrade libsamba-policy0-python3-32bitUpgrade samba-docUpgrade libsmbclient0-32bitUpgrade libsamba-policy0-32bitUpgrade libldb1-32bitUpgrade libsamba-passdb-develUpgrade libndr-nbt0-32bitUpgrade libsamba-credentials0Upgrade samba-cephUpgrade libdcerpc-samr0Upgrade libsamba-util0-32bitUpgrade samba-libs-python-32bitUpgrade libtevent-util-develUpgrade libndr1Upgrade libndr1-32bitUpgrade samba-dsdb-modulesUpgrade libndr-standard0-32bitUpgrade libldb2-32bitUpgrade python3-ldbUpgrade libsmbldap2-32bitUpgrade libndr0Upgrade libldb1Upgrade libsamba-policy0Upgrade samba-client-32bitUpgrade libsamba-hostconfig-develUpgrade libsmbconf0-32bitUpgrade libtevent-util0-32bitUpgrade libwbclient0Upgrade ctdb-testsUpgrade libsamba-policy0-python3Upgrade libsmbldap-develUpgrade libdcerpc-develUpgrade libsamba-hostconfig0Upgrade libsmbconf0Upgrade samba-pidlUpgrade libsamba-passdb0-32bitUpgrade libdcerpc-binding0-32bitUpgrade ldb-toolsUpgrade samba-testUpgrade libndr-krb5pac-develUpgrade libnetapi0Upgrade samba-libsUpgrade libndr-krb5pac0Upgrade libsmbclient-develUpgrade libndr-standard-develUpgrade samba-python3Upgrade python-ldb-32bit | Jul 18, 2020 | Jul 2, 2020 |
| Ubuntu | — | Upgrade sambaUpgrade samba (Ubuntu Pro) | Aug 5, 2020 | Jul 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub