A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ldb-toolsUpgrade libldbUpgrade python3-ldbUpgrade libldb-devel | May 4, 2022 | Jul 7, 2020 |
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Jul 7, 2020 |
| Centos_linux | — | Upgrade python3-ldbUpgrade ldb-toolsUpgrade libldb-debuginfoUpgrade libldb-debugsourceUpgrade libldbUpgrade python3-ldb-debuginfoUpgrade libldb-develUpgrade ldb-tools-debuginfo | Nov 5, 2020 | Jul 7, 2020 |
| Debian | — | Upgrade sambaUpgrade ldb | Nov 24, 2020 | Jul 7, 2020 |
| Freebsd | — | Upgrade samba411Upgrade samba412Upgrade samba410 | Jul 5, 2020 | Jul 2, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Jul 28, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-winbindUpgrade sambaUpgrade samba-common-libsUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-pythonUpgrade samba-common | Sep 16, 2021 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-commonUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade sambaUpgrade samba-libsUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-pythonUpgrade libwbclient | Apr 30, 2021 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-commonUpgrade libwbclientUpgrade samba-winbindUpgrade sambaUpgrade samba-libsUpgrade samba-common-libsUpgrade samba-pythonUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-client-libs | Nov 2, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-commonUpgrade python2-sambaUpgrade ctdbUpgrade samba-krb5-printingUpgrade libwbclientUpgrade samba-test-libsUpgrade samba-testUpgrade samba-pidlUpgrade samba-libsUpgrade python3-sambaUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade python3-samba-testUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade ctdb-testsUpgrade sambaUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade python2-samba-test | Dec 15, 2020 | Jul 7, 2020 |
| Oracle_linux | — | Upgrade libldbUpgrade ldb-toolsUpgrade libldb-develUpgrade python3-ldb | Nov 12, 2020 | Jul 2, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Jul 7, 2020 |
| Redhat_linux | — | Upgrade libldb-develUpgrade libldb-debuginfoUpgrade libldb-debugsourceUpgrade python3-ldb-debuginfoUpgrade python3-ldbUpgrade ldb-tools-debuginfoUpgrade ldb-toolsUpgrade libldbNo solution exists | Nov 5, 2020 | Jul 7, 2020 |
| Samba | — | Upgrade to Samba 4.11.11 or later.Upgrade to Samba 4.10.17 or later.Upgrade to Samba 4.12.4 or later. | Jul 7, 2020 | Jul 7, 2020 |
| Suse | — | Upgrade samba-cephUpgrade ldb-toolsUpgrade libndr-standard-develUpgrade libsmbconf0-32bitUpgrade libsmbclient-develUpgrade libsamba-hostconfig0Upgrade samba-testUpgrade libndr-krb5pac0Upgrade libsmbconf0Upgrade libsamba-passdb-develUpgrade python-ldb-32bitUpgrade libndr-nbt0-32bitUpgrade samba-libsUpgrade samba-libs-python-32bitUpgrade libndr-standard0-32bitUpgrade libndr-krb5pac-develUpgrade libldb1Upgrade libnetapi0Upgrade samba-python3Upgrade libndr1-32bitUpgrade ctdb-testsUpgrade samba-client-32bitUpgrade libsamba-policy0-python3Upgrade libndr1Upgrade libtevent-util0-32bitUpgrade libsmbldap-develUpgrade libsamba-credentials0Upgrade libdcerpc-develUpgrade libsamba-policy0Upgrade libwbclient0Upgrade python3-ldbUpgrade libdcerpc-binding0-32bitUpgrade libndr0Upgrade libsamba-passdb0-32bitUpgrade libsmbldap2-32bitUpgrade libdcerpc-samr0Upgrade libsamba-util0-32bitUpgrade samba-dsdb-modulesUpgrade libldb2-32bitUpgrade samba-pidlUpgrade libtevent-util-develUpgrade libsamba-hostconfig-develUpgrade libsamba-policy-python-develUpgrade libwbclient0-32bitUpgrade libldb2Upgrade libdcerpc0Upgrade samba-core-develUpgrade samba-clientUpgrade libsamba-credentials-develUpgrade libsamdb0Upgrade libsamdb-develUpgrade libsamba-errors-develUpgrade libndr-nbt-develUpgrade python-ldb-develUpgrade libsamba-util0Upgrade libdcerpc0-32bitUpgrade libsamba-credentials0-32bitUpgrade libsamba-policy-develUpgrade libsamdb0-32bitUpgrade samba-ad-dcUpgrade samba-libs-python3Upgrade samba-winbind-32bitUpgrade python3-ldb-develUpgrade libsamba-passdb0Upgrade samba-libs-32bitUpgrade libtevent-util0Upgrade samba-libs-pythonUpgrade samba-winbindUpgrade libsamba-hostconfig0-32bitUpgrade libldb-develUpgrade libsmbclient0Upgrade libsamba-policy0-32bitUpgrade libsamba-errors0Upgrade samba-libs-python3-32bitUpgrade libsamba-util-develUpgrade libsamba-policy0-python3-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsmbconf-develUpgrade sambaUpgrade ctdb-pcp-pmdaUpgrade python-ldbUpgrade ctdbUpgrade samba-pythonUpgrade libwbclient-develUpgrade libsmbldap2Upgrade libsmbclient0-32bitUpgrade libsamba-errors0-32bitUpgrade libndr-standard0Upgrade libnetapi-devel-32bitUpgrade libndr0-32bitUpgrade samba-docUpgrade libsamba-policy-python3-develUpgrade libdcerpc-samr-develUpgrade libnetapi-develUpgrade python3-ldb-32bitUpgrade libnetapi0-32bitUpgrade samba-ad-dc-32bitUpgrade libldb1-32bitUpgrade libdcerpc-samr0-32bitUpgrade libndr-nbt0Upgrade libdcerpc-binding0Upgrade libndr-devel | Jul 18, 2020 | Jul 2, 2020 |
| Ubuntu | — | Upgrade samba (Ubuntu Pro)Upgrade samba | Aug 5, 2020 | Jul 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub