A use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11, before 4.12.4 used in a AC DC configuration. A Samba LDAP user could use this flaw to crash samba.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Jul 6, 2020 |
| Debian | — | Upgrade samba | Nov 24, 2020 | Jul 6, 2020 |
| Freebsd | — | Upgrade samba410Upgrade samba412Upgrade samba411 | Jul 5, 2020 | Jul 2, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Jul 28, 2020 | Jul 6, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-libsUpgrade samba-clientUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade sambaUpgrade libwbclientUpgrade libsmbclientUpgrade samba-libsUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-pythonUpgrade samba-client-libs | Feb 22, 2021 | Jul 6, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-libsUpgrade libsmbclientUpgrade samba-commonUpgrade samba-clientUpgrade libwbclientUpgrade samba-common-libsUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade samba-common-tools | Sep 28, 2020 | Jul 6, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-clientUpgrade samba-common-libsUpgrade libwbclientUpgrade samba-pythonUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade samba-client-libsUpgrade sambaUpgrade libsmbclient | Nov 2, 2020 | Jul 6, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-dc-libsUpgrade samba-winbindUpgrade samba-testUpgrade samba-pidlUpgrade samba-commonUpgrade ctdbUpgrade sambaUpgrade python3-sambaUpgrade samba-krb5-printingUpgrade libwbclientUpgrade ctdb-testsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade python2-samba-testUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-client-libsUpgrade samba-libsUpgrade python2-sambaUpgrade python3-samba-testUpgrade samba-winbind-modulesUpgrade samba-test-libs | Dec 15, 2020 | Jul 6, 2020 |
| Samba | — | Upgrade to Samba 4.12.4 or later.Upgrade to Samba 4.11.11 or later.Upgrade to Samba 4.10.17 or later. | Jul 7, 2020 | Jul 6, 2020 |
| Suse | — | Upgrade libtevent-util-develUpgrade libsamdb-develUpgrade libsamba-policy0-python3-32bitUpgrade libsamba-util0-32bitUpgrade libndr-nbt0-32bitUpgrade libsamba-credentials0-32bitUpgrade libdcerpc-samr0Upgrade libndr-krb5pac0-32bitUpgrade samba-clientUpgrade libsamdb0-32bitUpgrade libsamba-policy0-32bitUpgrade libsmbclient0Upgrade samba-libs-python-32bitUpgrade libsamba-passdb0Upgrade libsamba-policy-python-develUpgrade libdcerpc-binding0-32bitUpgrade libsmbclient-develUpgrade samba-libsUpgrade libndr-standard0Upgrade ctdbUpgrade libsamba-credentials0Upgrade libwbclient0Upgrade libdcerpc0Upgrade samba-ad-dc-32bitUpgrade samba-testUpgrade libndr-standard-develUpgrade libsamba-errors0-32bitUpgrade libnetapi-develUpgrade libsamba-hostconfig0Upgrade libnetapi0-32bitUpgrade libsamba-hostconfig-develUpgrade samba-client-32bitUpgrade samba-libs-pythonUpgrade libsamba-policy0-python3Upgrade ldb-toolsUpgrade libldb1Upgrade libsamba-passdb-develUpgrade samba-libs-32bitUpgrade libsamba-policy-python3-develUpgrade python3-ldbUpgrade samba-dsdb-modulesUpgrade libndr-nbt0Upgrade libndr1Upgrade libdcerpc-samr0-32bitUpgrade libsmbconf-develUpgrade ctdb-testsUpgrade samba-core-develUpgrade python-ldb-develUpgrade libndr0-32bitUpgrade samba-winbind-32bitUpgrade libndr-standard0-32bitUpgrade samba-pythonUpgrade libnetapi0Upgrade samba-cephUpgrade libndr-krb5pac0Upgrade libdcerpc0-32bitUpgrade samba-pidlUpgrade libndr-krb5pac-develUpgrade samba-python3Upgrade libndr1-32bitUpgrade libsamba-policy0Upgrade libsamdb0Upgrade libdcerpc-binding0Upgrade libnetapi-devel-32bitUpgrade sambaUpgrade ctdb-pcp-pmdaUpgrade libldb2-32bitUpgrade samba-libs-python3Upgrade libwbclient-develUpgrade libtevent-util0Upgrade libsamba-policy-develUpgrade libsmbclient0-32bitUpgrade libsmbconf0Upgrade samba-ad-dcUpgrade libsamba-credentials-develUpgrade libsamba-errors-develUpgrade samba-libs-python3-32bitUpgrade libsmbldap2-32bitUpgrade samba-winbindUpgrade libndr-develUpgrade libsamba-util0Upgrade libwbclient0-32bitUpgrade libsmbconf0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-errors0Upgrade libndr-nbt-develUpgrade libldb1-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-passdb0-32bitUpgrade libtevent-util0-32bitUpgrade libndr0Upgrade libldb-develUpgrade python3-ldb-32bitUpgrade samba-docUpgrade python3-ldb-develUpgrade libsamba-util-develUpgrade libdcerpc-develUpgrade python-ldbUpgrade libsmbldap2Upgrade libldb2Upgrade libsmbldap-devel | Jul 18, 2020 | Jul 2, 2020 |
| Ubuntu | — | Upgrade sambaUpgrade samba (Ubuntu Pro) | Aug 5, 2020 | Jul 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub