A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libldbUpgrade ldb-toolsUpgrade python3-ldbUpgrade libldb-devel | May 4, 2022 | Jul 7, 2020 |
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Jul 7, 2020 |
| Centos_linux | — | Upgrade libldb-develUpgrade libldb-debuginfoUpgrade ldb-tools-debuginfoUpgrade python3-ldb-debuginfoUpgrade libldbUpgrade libldb-debugsourceUpgrade python3-ldbUpgrade ldb-tools | Nov 5, 2020 | Jul 7, 2020 |
| Debian | — | Upgrade ldbUpgrade samba | Nov 24, 2020 | Jul 7, 2020 |
| Freebsd | — | Upgrade samba411Upgrade samba410Upgrade samba412 | Jul 5, 2020 | Jul 2, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Jul 28, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-toolsUpgrade samba-common-libsUpgrade sambaUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-pythonUpgrade samba-common | Sep 16, 2021 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-commonUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-libsUpgrade libwbclientUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-clientUpgrade sambaUpgrade samba-winbind-clients | Apr 30, 2021 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libwbclientUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-libsUpgrade sambaUpgrade samba-winbindUpgrade samba-pythonUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-winbind-clients | Nov 2, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-sambaUpgrade samba-krb5-printingUpgrade samba-testUpgrade samba-test-libsUpgrade ctdbUpgrade python2-sambaUpgrade samba-libsUpgrade samba-commonUpgrade samba-pidlUpgrade libwbclientUpgrade python3-samba-testUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade ctdb-testsUpgrade sambaUpgrade samba-winbind-krb5-locatorUpgrade python2-samba-testUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-dc-libs | Dec 15, 2020 | Jul 7, 2020 |
| Oracle_linux | — | Upgrade libldb-develUpgrade ldb-toolsUpgrade python3-ldbUpgrade libldb | Nov 12, 2020 | Jul 2, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Jul 7, 2020 |
| Redhat_linux | — | Upgrade libldb-develUpgrade libldb-debuginfoUpgrade python3-ldbUpgrade python3-ldb-debuginfoUpgrade libldb-debugsourceUpgrade ldb-toolsUpgrade libldbUpgrade ldb-tools-debuginfoNo solution exists | Nov 5, 2020 | Jul 7, 2020 |
| Samba | — | Upgrade to Samba 4.11.11 or later.Upgrade to Samba 4.10.17 or later.Upgrade to Samba 4.12.4 or later. | Jul 7, 2020 | Jul 7, 2020 |
| Suse | — | Upgrade samba-pythonUpgrade libndr-nbt0Upgrade samba-libs-python3Upgrade libsmbclient0Upgrade libsamba-policy0-32bitUpgrade samba-winbindUpgrade samba-libs-pythonUpgrade samba-libs-python3-32bitUpgrade libldb1-32bitUpgrade libwbclient0-32bitUpgrade samba-winbind-32bitUpgrade libsamba-credentials-develUpgrade python3-ldb-32bitUpgrade libndr-develUpgrade samba-docUpgrade libsamba-hostconfig0-32bitUpgrade libsmbconf-develUpgrade samba-ad-dc-32bitUpgrade libndr-nbt-develUpgrade libsamdb0Upgrade samba-core-develUpgrade libdcerpc-samr0-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-policy-python3-develUpgrade libtevent-util0Upgrade libsamba-util-develUpgrade libldb-develUpgrade sambaUpgrade libsmbldap2Upgrade libndr0-32bitUpgrade libsamba-util0Upgrade libsamba-passdb0Upgrade samba-libs-32bitUpgrade libsamba-errors-develUpgrade libsamba-policy-python-develUpgrade libsamba-policy-develUpgrade samba-clientUpgrade python3-ldb-develUpgrade python-ldb-develUpgrade libnetapi-develUpgrade libldb2Upgrade libsamdb-develUpgrade libsamba-credentials0-32bitUpgrade ctdbUpgrade libdcerpc0Upgrade libdcerpc-binding0Upgrade libwbclient-develUpgrade libdcerpc0-32bitUpgrade libsamba-policy0-python3-32bitUpgrade ctdb-pcp-pmdaUpgrade libndr-krb5pac0-32bitUpgrade libnetapi-devel-32bitUpgrade python-ldbUpgrade libnetapi0-32bitUpgrade libsamba-errors0Upgrade samba-ad-dcUpgrade libsamba-errors0-32bitUpgrade libndr-standard0Upgrade libsamdb0-32bitUpgrade libsmbclient0-32bitUpgrade samba-testUpgrade python3-ldbUpgrade libsamba-passdb-develUpgrade libtevent-util0-32bitUpgrade libndr0Upgrade samba-dsdb-modulesUpgrade libndr-nbt0-32bitUpgrade libsmbldap-develUpgrade libsamba-hostconfig-develUpgrade samba-pidlUpgrade libndr-standard0-32bitUpgrade libsmbconf0Upgrade libsmbldap2-32bitUpgrade samba-libs-python-32bitUpgrade libsamba-passdb0-32bitUpgrade samba-cephUpgrade libsamba-util0-32bitUpgrade samba-python3Upgrade libdcerpc-samr0Upgrade libtevent-util-develUpgrade libndr1-32bitUpgrade libsamba-credentials0Upgrade libsmbconf0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libldb2-32bitUpgrade libndr-krb5pac-develUpgrade libndr1Upgrade samba-libsUpgrade libsmbclient-develUpgrade libsamba-hostconfig0Upgrade libndr-krb5pac0Upgrade ldb-toolsUpgrade ctdb-testsUpgrade python-ldb-32bitUpgrade libnetapi0Upgrade libndr-standard-develUpgrade libsamba-policy0Upgrade libsamba-policy0-python3Upgrade libldb1Upgrade libdcerpc-develUpgrade samba-client-32bitUpgrade libwbclient0 | Jul 18, 2020 | Jul 2, 2020 |
| Ubuntu | — | Upgrade samba (Ubuntu Pro)Upgrade samba | Aug 5, 2020 | Jul 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub