A use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11, before 4.12.4 used in a AC DC configuration. A Samba LDAP user could use this flaw to crash samba.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Jul 6, 2020 |
| Debian | — | Upgrade samba | Nov 24, 2020 | Jul 6, 2020 |
| Freebsd | — | Upgrade samba411Upgrade samba410Upgrade samba412 | Jul 5, 2020 | Jul 2, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Jul 28, 2020 | Jul 6, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-libsUpgrade sambaUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade samba-winbindUpgrade libwbclientUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-common-tools | Feb 22, 2021 | Jul 6, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-winbind-clientsUpgrade sambaUpgrade samba-pythonUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-libsUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba-common | Sep 28, 2020 | Jul 6, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-winbindUpgrade samba-libsUpgrade libwbclientUpgrade samba-winbind-modulesUpgrade sambaUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-client | Nov 2, 2020 | Jul 6, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-pidlUpgrade samba-testUpgrade ctdbUpgrade sambaUpgrade samba-commonUpgrade samba-dc-libsUpgrade samba-winbindUpgrade python2-sambaUpgrade libsmbclientUpgrade samba-client-libsUpgrade ctdb-testsUpgrade samba-krb5-printingUpgrade samba-clientUpgrade samba-common-libsUpgrade python3-sambaUpgrade python2-samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade python3-samba-testUpgrade libwbclientUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-test-libs | Dec 15, 2020 | Jul 6, 2020 |
| Samba | — | Upgrade to Samba 4.10.17 or later.Upgrade to Samba 4.12.4 or later.Upgrade to Samba 4.11.11 or later. | Jul 7, 2020 | Jul 6, 2020 |
| Suse | — | Upgrade ctdbUpgrade libsamba-credentials0Upgrade libsamba-policy0-32bitUpgrade samba-libs-python-32bitUpgrade libwbclient0Upgrade libsamba-passdb0Upgrade libsamba-policy-python-develUpgrade samba-ad-dc-32bitUpgrade libndr-nbt0-32bitUpgrade libsmbclient0Upgrade libdcerpc-binding0-32bitUpgrade libndr-standard-develUpgrade libnetapi-develUpgrade libsamba-errors0-32bitUpgrade python3-ldbUpgrade libsamba-policy-python3-develUpgrade libndr-standard0Upgrade samba-testUpgrade libndr-krb5pac0-32bitUpgrade libldb1Upgrade libsamba-policy0-python3Upgrade samba-libs-32bitUpgrade libsamba-hostconfig-develUpgrade libsamba-passdb-develUpgrade samba-dsdb-modulesUpgrade samba-client-32bitUpgrade libdcerpc0Upgrade libsamba-hostconfig0Upgrade libtevent-util-develUpgrade libdcerpc-samr0Upgrade libsamba-policy0-python3-32bitUpgrade samba-libsUpgrade libsmbclient-develUpgrade samba-libs-pythonUpgrade libnetapi0-32bitUpgrade libsamdb0-32bitUpgrade libsamba-credentials0-32bitUpgrade ldb-toolsUpgrade samba-clientUpgrade libsamba-util0-32bitUpgrade libsamdb-develUpgrade python-ldbUpgrade samba-docUpgrade samba-cephUpgrade libwbclient-develUpgrade libdcerpc0-32bitUpgrade python3-ldb-develUpgrade libdcerpc-develUpgrade libndr-standard0-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-passdb0-32bitUpgrade libsamba-util0Upgrade libwbclient0-32bitUpgrade libndr-nbt0Upgrade libdcerpc-binding0Upgrade libndr0-32bitUpgrade libsmbldap2-32bitUpgrade libldb1-32bitUpgrade libsamba-errors0Upgrade libndr-nbt-develUpgrade libsmbconf0-32bitUpgrade samba-winbind-32bitUpgrade samba-winbindUpgrade libsmbconf-develUpgrade libsmbldap-develUpgrade samba-python3Upgrade ctdb-testsUpgrade libsamdb0Upgrade libsamba-policy0Upgrade libsmbldap2Upgrade python-ldb-develUpgrade samba-core-develUpgrade libndr1Upgrade libsamba-util-develUpgrade libldb2Upgrade samba-pidlUpgrade libndr-krb5pac-develUpgrade libndr1-32bitUpgrade libldb-develUpgrade libndr-krb5pac0Upgrade libtevent-util0-32bitUpgrade libndr0Upgrade libsamba-errors-develUpgrade python3-ldb-32bitUpgrade samba-libs-python3-32bitUpgrade libsmbconf0Upgrade libdcerpc-samr0-32bitUpgrade libnetapi0Upgrade libndr-develUpgrade samba-pythonUpgrade libtevent-util0Upgrade libsamba-policy-develUpgrade libsmbclient0-32bitUpgrade libnetapi-devel-32bitUpgrade libsamba-credentials-develUpgrade libldb2-32bitUpgrade ctdb-pcp-pmdaUpgrade sambaUpgrade samba-libs-python3Upgrade samba-ad-dc | Jul 18, 2020 | Jul 2, 2020 |
| Ubuntu | — | Upgrade samba (Ubuntu Pro)Upgrade samba | Aug 5, 2020 | Jul 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub