A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ldb-toolsUpgrade libldbUpgrade python3-ldbUpgrade libldb-devel | May 4, 2022 | Jul 7, 2020 |
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Jul 7, 2020 |
| Centos_linux | — | Upgrade python3-ldbUpgrade ldb-toolsUpgrade python3-ldb-debuginfoUpgrade libldb-develUpgrade libldbUpgrade libldb-debuginfoUpgrade libldb-debugsourceUpgrade ldb-tools-debuginfo | Nov 5, 2020 | Jul 7, 2020 |
| Debian | — | Upgrade sambaUpgrade ldb | Nov 24, 2020 | Jul 7, 2020 |
| Freebsd | — | Upgrade samba412Upgrade samba410Upgrade samba411 | Jul 5, 2020 | Jul 2, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Jul 28, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-winbindUpgrade samba-libsUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-client-libsUpgrade samba-pythonUpgrade libwbclient | Sep 16, 2021 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-common-libsUpgrade samba-commonUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-libsUpgrade samba-winbindUpgrade sambaUpgrade samba-pythonUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-winbind-modules | Apr 30, 2021 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-libsUpgrade sambaUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba-commonUpgrade libwbclientUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-clientUpgrade libsmbclientUpgrade samba-winbind-clients | Nov 2, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libsmbclientUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade python2-samba-testUpgrade python3-samba-testUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade samba-winbindUpgrade sambaUpgrade ctdb-testsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade python2-sambaUpgrade libwbclientUpgrade samba-libsUpgrade samba-test-libsUpgrade samba-commonUpgrade ctdbUpgrade python3-sambaUpgrade samba-krb5-printingUpgrade samba-testUpgrade samba-pidl | Dec 15, 2020 | Jul 7, 2020 |
| Oracle_linux | — | Upgrade libldbUpgrade python3-ldbUpgrade ldb-toolsUpgrade libldb-devel | Nov 12, 2020 | Jul 2, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Jul 7, 2020 |
| Redhat_linux | — | Upgrade libldb-debuginfoUpgrade libldb-develUpgrade python3-ldb-debuginfoUpgrade python3-ldbUpgrade libldb-debugsourceUpgrade libldbNo solution existsUpgrade ldb-toolsUpgrade ldb-tools-debuginfo | Nov 5, 2020 | Jul 7, 2020 |
| Samba | — | Upgrade to Samba 4.11.11 or later.Upgrade to Samba 4.12.4 or later.Upgrade to Samba 4.10.17 or later. | Jul 7, 2020 | Jul 7, 2020 |
| Suse | — | Upgrade samba-pythonUpgrade libndr-krb5pac0-32bitUpgrade libsamba-policy0-python3-32bitUpgrade libsamba-policy0-32bitUpgrade ctdb-pcp-pmdaUpgrade python-ldb-develUpgrade libdcerpc0Upgrade libwbclient-develUpgrade libndr-standard0Upgrade libnetapi-devel-32bitUpgrade samba-ad-dcUpgrade libnetapi-develUpgrade libnetapi0-32bitUpgrade libsmbclient0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade sambaUpgrade samba-ad-dc-32bitUpgrade samba-core-develUpgrade libsamba-credentials-develUpgrade libsamba-errors0-32bitUpgrade libdcerpc-binding0Upgrade libsmbclient0Upgrade samba-libs-python3-32bitUpgrade samba-winbind-32bitUpgrade libwbclient0-32bitUpgrade libsamba-errors-develUpgrade libldb2Upgrade libsamdb-develUpgrade libndr-develUpgrade libsamba-policy-develUpgrade libsmbldap2Upgrade samba-winbindUpgrade samba-libs-python3Upgrade samba-libs-pythonUpgrade samba-clientUpgrade python-ldbUpgrade libsamdb0Upgrade libsamba-errors0Upgrade libndr-nbt-develUpgrade libsmbconf-develUpgrade libsamdb0-32bitUpgrade libdcerpc-samr0-32bitUpgrade libtevent-util0Upgrade samba-libs-32bitUpgrade libsamba-util-develUpgrade libsamba-policy-python-develUpgrade libldb-develUpgrade libldb1-32bitUpgrade libndr-nbt0Upgrade libsamba-credentials0-32bitUpgrade python3-ldb-develUpgrade libndr0-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-passdb0Upgrade python3-ldb-32bitUpgrade samba-docUpgrade libsamba-policy-python3-develUpgrade libdcerpc0-32bitUpgrade libsamba-util0Upgrade ctdbUpgrade libsamba-hostconfig-develUpgrade libldb2-32bitUpgrade ldb-toolsUpgrade libndr0Upgrade libndr1Upgrade libndr1-32bitUpgrade samba-cephUpgrade libdcerpc-samr0Upgrade libsamba-util0-32bitUpgrade libndr-standard0-32bitUpgrade libsmbconf0-32bitUpgrade samba-dsdb-modulesUpgrade libsmbconf0Upgrade libsamba-hostconfig0Upgrade libsmbclient-develUpgrade libndr-krb5pac-develUpgrade ctdb-testsUpgrade libndr-standard-develUpgrade libndr-krb5pac0Upgrade samba-libsUpgrade libnetapi0Upgrade samba-testUpgrade python-ldb-32bitUpgrade libsmbldap2-32bitUpgrade samba-python3Upgrade libsmbldap-develUpgrade libsamba-credentials0Upgrade libndr-nbt0-32bitUpgrade python3-ldbUpgrade libdcerpc-binding0-32bitUpgrade libtevent-util-develUpgrade samba-libs-python-32bitUpgrade libsamba-passdb-develUpgrade samba-pidlUpgrade libsamba-passdb0-32bitUpgrade libsamba-policy0-python3Upgrade libdcerpc-develUpgrade libwbclient0Upgrade libtevent-util0-32bitUpgrade libsamba-policy0Upgrade libldb1Upgrade samba-client-32bit | Jul 18, 2020 | Jul 2, 2020 |
| Ubuntu | — | Upgrade sambaUpgrade samba (Ubuntu Pro) | Aug 5, 2020 | Jul 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub