A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libldbUpgrade ldb-toolsUpgrade libldb-develUpgrade python3-ldb | May 4, 2022 | Jul 7, 2020 |
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Jul 7, 2020 |
| Centos_linux | — | Upgrade libldbUpgrade python3-ldb-debuginfoUpgrade libldb-develUpgrade libldb-debugsourceUpgrade libldb-debuginfoUpgrade ldb-tools-debuginfoUpgrade python3-ldbUpgrade ldb-tools | Nov 5, 2020 | Jul 7, 2020 |
| Debian | — | Upgrade sambaUpgrade ldb | Nov 24, 2020 | Jul 7, 2020 |
| Freebsd | — | Upgrade samba410Upgrade samba412Upgrade samba411 | Jul 5, 2020 | Jul 2, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Jul 28, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-pythonUpgrade libwbclientUpgrade samba-commonUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade sambaUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-client | Sep 16, 2021 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sambaUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade samba-pythonUpgrade samba-winbindUpgrade samba-libsUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-common | Apr 30, 2021 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-pythonUpgrade sambaUpgrade samba-commonUpgrade samba-winbindUpgrade samba-libsUpgrade libwbclientUpgrade samba-common-libs | Nov 2, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libsmbclientUpgrade python3-samba-testUpgrade samba-dc-libsUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade ctdb-testsUpgrade sambaUpgrade python2-samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libsUpgrade samba-testUpgrade python2-sambaUpgrade python3-sambaUpgrade samba-krb5-printingUpgrade samba-libsUpgrade libwbclientUpgrade samba-test-libsUpgrade samba-commonUpgrade ctdbUpgrade samba-pidl | Dec 15, 2020 | Jul 7, 2020 |
| Oracle_linux | — | Upgrade ldb-toolsUpgrade libldb-develUpgrade python3-ldbUpgrade libldb | Nov 12, 2020 | Jul 2, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Jul 7, 2020 |
| Redhat_linux | — | Upgrade python3-ldb-debuginfoUpgrade libldb-debuginfoUpgrade python3-ldbUpgrade libldb-debugsourceUpgrade libldb-develUpgrade ldb-tools-debuginfoUpgrade libldbNo solution existsUpgrade ldb-tools | Nov 5, 2020 | Jul 7, 2020 |
| Samba | — | Upgrade to Samba 4.11.11 or later.Upgrade to Samba 4.12.4 or later.Upgrade to Samba 4.10.17 or later. | Jul 7, 2020 | Jul 7, 2020 |
| Suse | — | Upgrade libndr-krb5pac0Upgrade libsamba-passdb-develUpgrade libldb2-32bitUpgrade libndr0Upgrade samba-python3Upgrade libsmbconf0Upgrade libsmbldap2-32bitUpgrade libsmbconf0-32bitUpgrade samba-pidlUpgrade ctdb-testsUpgrade samba-dsdb-modulesUpgrade libdcerpc-binding0-32bitUpgrade libsamba-hostconfig-develUpgrade libsamba-passdb0-32bitUpgrade python3-ldbUpgrade libndr-nbt0-32bitUpgrade libsmbldap-develUpgrade samba-testUpgrade libndr1-32bitUpgrade libnetapi0Upgrade libndr-standard0-32bitUpgrade libndr-standard-develUpgrade libndr1Upgrade libtevent-util-develUpgrade libsamba-util0-32bitUpgrade libdcerpc-samr0Upgrade ldb-toolsUpgrade samba-libs-python-32bitUpgrade libsamba-hostconfig0Upgrade libsmbclient-develUpgrade libdcerpc-develUpgrade samba-libsUpgrade libsamba-policy0-python3Upgrade samba-client-32bitUpgrade libsamba-policy0Upgrade python-ldb-32bitUpgrade samba-cephUpgrade libtevent-util0-32bitUpgrade libsamba-credentials0Upgrade libwbclient0Upgrade libldb1Upgrade libndr-krb5pac-develUpgrade samba-core-develUpgrade libndr-standard0Upgrade libsmbclient0-32bitUpgrade libsamba-util-develUpgrade libsamba-hostconfig0-32bitUpgrade libsmbconf-develUpgrade libsamba-policy0-python3-32bitUpgrade samba-libs-python3-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsmbclient0Upgrade libsamba-policy0-32bitUpgrade samba-pythonUpgrade libsamba-errors0Upgrade libsamba-util0Upgrade libdcerpc-binding0Upgrade libsamba-passdb0Upgrade libsamba-policy-python3-develUpgrade samba-clientUpgrade libsamdb0Upgrade libndr-develUpgrade libndr0-32bitUpgrade libndr-nbt-develUpgrade libsamba-errors-develUpgrade samba-libs-32bitUpgrade libsamba-credentials-develUpgrade libldb2Upgrade libsamba-policy-python-develUpgrade python3-ldb-32bitUpgrade libdcerpc-samr0-32bitUpgrade libnetapi-devel-32bitUpgrade libldb1-32bitUpgrade samba-libs-pythonUpgrade samba-ad-dcUpgrade samba-docUpgrade libdcerpc-samr-develUpgrade libdcerpc0-32bitUpgrade libwbclient-develUpgrade samba-ad-dc-32bitUpgrade samba-winbindUpgrade libsamba-policy-develUpgrade samba-winbind-32bitUpgrade libsamdb0-32bitUpgrade libldb-develUpgrade libndr-nbt0Upgrade python3-ldb-develUpgrade libsmbldap2Upgrade libsamba-credentials0-32bitUpgrade libnetapi0-32bitUpgrade ctdbUpgrade python-ldbUpgrade ctdb-pcp-pmdaUpgrade libdcerpc0Upgrade libnetapi-develUpgrade sambaUpgrade python-ldb-develUpgrade libsamdb-develUpgrade libwbclient0-32bitUpgrade libsamba-errors0-32bitUpgrade libtevent-util0Upgrade samba-libs-python3 | Jul 18, 2020 | Jul 2, 2020 |
| Ubuntu | — | Upgrade sambaUpgrade samba (Ubuntu Pro) | Aug 5, 2020 | Jul 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub