A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-ldbUpgrade libldb-develUpgrade libldbUpgrade ldb-tools | May 4, 2022 | Jul 7, 2020 |
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Jul 7, 2020 |
| Centos_linux | — | Upgrade libldbUpgrade python3-ldb-debuginfoUpgrade libldb-debuginfoUpgrade libldb-develUpgrade ldb-tools-debuginfoUpgrade libldb-debugsourceUpgrade ldb-toolsUpgrade python3-ldb | Nov 5, 2020 | Jul 7, 2020 |
| Debian | — | Upgrade sambaUpgrade ldb | Nov 24, 2020 | Jul 7, 2020 |
| Freebsd | — | Upgrade samba411Upgrade samba412Upgrade samba410 | Jul 5, 2020 | Jul 2, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Jul 28, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-client-libsUpgrade samba-pythonUpgrade samba-commonUpgrade libwbclientUpgrade samba-clientUpgrade samba-common-toolsUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade libsmbclient | Sep 16, 2021 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-winbind-clientsUpgrade libwbclientUpgrade samba-libsUpgrade samba-client-libsUpgrade samba-winbindUpgrade sambaUpgrade samba-clientUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-common | Apr 30, 2021 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsmbclientUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade sambaUpgrade libwbclientUpgrade samba-pythonUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba-commonUpgrade samba-libs | Nov 2, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-krb5-printingUpgrade samba-test-libsUpgrade samba-pidlUpgrade samba-commonUpgrade samba-testUpgrade samba-libsUpgrade ctdbUpgrade python3-sambaUpgrade libwbclientUpgrade python2-sambaUpgrade samba-client-libsUpgrade ctdb-testsUpgrade python2-samba-testUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-dc-libsUpgrade python3-samba-testUpgrade samba-clientUpgrade samba-winbindUpgrade samba-winbind-krb5-locatorUpgrade sambaUpgrade samba-common-libsUpgrade samba-winbind-modules | Dec 15, 2020 | Jul 7, 2020 |
| Oracle_linux | — | Upgrade libldbUpgrade libldb-develUpgrade ldb-toolsUpgrade python3-ldb | Nov 12, 2020 | Jul 2, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Jul 7, 2020 |
| Redhat_linux | — | No solution existsUpgrade ldb-tools-debuginfoUpgrade ldb-toolsUpgrade libldbUpgrade python3-ldb-debuginfoUpgrade libldb-debugsourceUpgrade libldb-debuginfoUpgrade python3-ldbUpgrade libldb-devel | Nov 5, 2020 | Jul 7, 2020 |
| Samba | — | Upgrade to Samba 4.10.17 or later.Upgrade to Samba 4.12.4 or later.Upgrade to Samba 4.11.11 or later. | Jul 7, 2020 | Jul 7, 2020 |
| Suse | — | Upgrade libsamba-credentials0-32bitUpgrade libsamba-errors-develUpgrade libsmbldap2Upgrade libldb2Upgrade samba-libs-32bitUpgrade libsamba-policy-python-develUpgrade samba-core-develUpgrade libsamba-errors0Upgrade libsamdb0Upgrade libldb-develUpgrade samba-libs-python3Upgrade samba-ad-dcUpgrade libndr-standard0Upgrade libsamdb-develUpgrade libsamba-errors0-32bitUpgrade samba-winbindUpgrade samba-winbind-32bitUpgrade libsmbconf-develUpgrade libsamba-credentials-develUpgrade libsamba-policy0-python3-32bitUpgrade libdcerpc0-32bitUpgrade libnetapi-devel-32bitUpgrade libsmbclient0-32bitUpgrade libsamba-util-develUpgrade libdcerpc-binding0Upgrade libtevent-util0Upgrade libwbclient-develUpgrade sambaUpgrade libsamba-hostconfig0-32bitUpgrade samba-ad-dc-32bitUpgrade python3-ldb-develUpgrade libsmbclient0Upgrade libsamba-passdb0Upgrade libsamba-policy-develUpgrade libnetapi0-32bitUpgrade ctdbUpgrade libndr-nbt-develUpgrade libdcerpc0Upgrade libndr0-32bitUpgrade libsamba-policy-python3-develUpgrade samba-clientUpgrade python-ldb-develUpgrade libsamdb0-32bitUpgrade libndr-nbt0Upgrade libsamba-policy0-32bitUpgrade samba-pythonUpgrade python-ldbUpgrade samba-libs-pythonUpgrade libdcerpc-samr-develUpgrade libndr-develUpgrade libwbclient0-32bitUpgrade libsamba-util0Upgrade ctdb-pcp-pmdaUpgrade samba-docUpgrade samba-libs-python3-32bitUpgrade libndr-krb5pac0-32bitUpgrade libnetapi-develUpgrade libdcerpc-samr0-32bitUpgrade libldb1-32bitUpgrade python3-ldb-32bitUpgrade samba-python3Upgrade samba-testUpgrade libsmbconf0-32bitUpgrade libdcerpc-samr0Upgrade libndr-standard-develUpgrade libndr0Upgrade libwbclient0Upgrade libsamba-passdb0-32bitUpgrade libdcerpc-binding0-32bitUpgrade python-ldb-32bitUpgrade libsamba-hostconfig0Upgrade samba-libsUpgrade libnetapi0Upgrade ctdb-testsUpgrade libsmbldap2-32bitUpgrade libldb2-32bitUpgrade libndr-krb5pac-develUpgrade libndr-krb5pac0Upgrade ldb-toolsUpgrade libsamba-policy0Upgrade libsamba-util0-32bitUpgrade libsamba-policy0-python3Upgrade samba-client-32bitUpgrade samba-cephUpgrade libsamba-credentials0Upgrade libldb1Upgrade libsmbldap-develUpgrade libndr-nbt0-32bitUpgrade libdcerpc-develUpgrade libtevent-util-develUpgrade libndr1Upgrade libndr-standard0-32bitUpgrade samba-libs-python-32bitUpgrade samba-dsdb-modulesUpgrade libndr1-32bitUpgrade libsamba-passdb-develUpgrade libtevent-util0-32bitUpgrade python3-ldbUpgrade libsmbclient-develUpgrade libsamba-hostconfig-develUpgrade samba-pidlUpgrade libsmbconf0 | Jul 18, 2020 | Jul 2, 2020 |
| Ubuntu | — | Upgrade sambaUpgrade samba (Ubuntu Pro) | Aug 5, 2020 | Jul 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub