A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of the LDAP server process handling the request. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libldbUpgrade python3-ldbUpgrade libldb-develUpgrade ldb-tools | May 4, 2022 | May 12, 2021 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | May 12, 2021 |
| Amazon Linux Ami 2 | — | Upgrade pyldb-develUpgrade ldb-toolsUpgrade libldb-debuginfoUpgrade pyldbUpgrade libldbUpgrade libldb-devel | Apr 23, 2021 | Apr 23, 2021 |
| Amazon_linux | — | Upgrade libldb | Apr 22, 2021 | Mar 24, 2021 |
| Centos_linux | — | Upgrade ldb-toolsUpgrade python3-ldbUpgrade libldbUpgrade pyldb-develUpgrade libldb-develUpgrade libldb-debuginfoUpgrade pyldbUpgrade libldb-debugsourceUpgrade python3-ldb-debuginfoUpgrade ldb-tools-debuginfo | Apr 7, 2021 | Apr 6, 2021 |
| Debian | — | Upgrade sambaUpgrade ldb | Apr 1, 2021 | Apr 1, 2021 |
| Freebsd | — | Upgrade samba411Upgrade samba414Upgrade samba413Upgrade samba412 | Mar 28, 2021 | Mar 28, 2021 |
| Gentoo Linux | — | Upgrade net-fs/samba. | May 28, 2021 | May 12, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade sambaUpgrade samba-commonUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-libsUpgrade libwbclient | Sep 16, 2021 | May 12, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade samba-common-libsUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade sambaUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-commonUpgrade samba-client | Apr 30, 2021 | Apr 30, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-libsUpgrade libwbclientUpgrade samba-commonUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade samba-pythonUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade sambaUpgrade samba-client | Jul 19, 2021 | May 12, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sambaUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade python3-samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade python2-sambaUpgrade libwbclientUpgrade samba-krb5-printingUpgrade samba-commonUpgrade ctdbUpgrade samba-libsUpgrade samba-test-libsUpgrade python3-sambaUpgrade samba-client-libsUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-common-libsUpgrade ctdb-testsUpgrade samba-dc-libsUpgrade samba-testUpgrade samba-pidlUpgrade python2-samba-test | Jun 28, 2021 | May 12, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-libsUpgrade libwbclientUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-winbindUpgrade sambaUpgrade samba-common | Jul 2, 2021 | May 12, 2021 |
| Oracle_linux | — | Upgrade ldb-toolsUpgrade pyldbUpgrade libldb-develUpgrade python3-ldbUpgrade pyldb-develUpgrade libldb | Apr 8, 2021 | Mar 24, 2021 |
| Redhat_linux | — | Upgrade python3-ldbUpgrade ldb-toolsNo solution existsUpgrade pyldbUpgrade ldb-tools-debuginfoUpgrade python3-ldb-debuginfoUpgrade libldbUpgrade libldb-debuginfoUpgrade libldb-debugsourceUpgrade libldb-develUpgrade pyldb-devel | Apr 7, 2021 | Apr 6, 2021 |
| Samba | — | Upgrade to Samba 4.14.1 or later.Upgrade to Samba 4.12.13 or later.Upgrade to Samba 4.13.6 or later. | May 12, 2021 | May 12, 2021 |
| Suse | — | Upgrade python3-ldb-develUpgrade python-ldb-develUpgrade libtevent-util-develUpgrade krb5-plugin-preauth-spakeUpgrade libndr-standard0-32bitUpgrade libwbclient0-32bitUpgrade libsmbconf0Upgrade libdcerpc-samr0-32bitUpgrade libndr0Upgrade krb5-32bitUpgrade tevent-manUpgrade libsamba-policy0Upgrade libsamba-errors0Upgrade tdb-toolsUpgrade libsmbldap2-32bitUpgrade sssd-ldapUpgrade libldb2Upgrade krb5-clientUpgrade samba-libs-python3-64bitUpgrade samba-ad-dc-libsUpgrade libtevent-develUpgrade libndr-krb5pac0-32bitUpgrade libdcerpc-develUpgrade libsamba-passdb0-32bitUpgrade krb5-mini-develUpgrade libsss_simpleifp0Upgrade libapparmor1Upgrade python3-sss_nss_idmapUpgrade libsmbldap-develUpgrade libsamba-hostconfig0-32bitUpgrade libtalloc-develUpgrade samba-ad-dcUpgrade libldb2-32bitUpgrade samba-winbind-libsUpgrade sssd-winbind-idmapUpgrade samba-python3Upgrade libnetapi-develUpgrade samba-core-develUpgrade libnetapi0Upgrade apparmor-profilesUpgrade libtevent-util0Upgrade samba-libs-32bitUpgrade krb5-miniUpgrade samba-libsUpgrade libsmbclient-develUpgrade krb5-develUpgrade libsamdb0Upgrade libsamba-util-develUpgrade samba-cephUpgrade krb5-plugin-preauth-pkinitUpgrade libldb-develUpgrade apparmor-utilsUpgrade krb5-devel-32bitUpgrade samba-client-64bitUpgrade samba-pythonUpgrade samba-client-libsUpgrade ctdbUpgrade sssd-proxyUpgrade libndr0-32bitUpgrade python3-tallocUpgrade sssd-dbusUpgrade libldb1-32bitUpgrade apparmor-docsUpgrade python3-talloc-32bitUpgrade libsamba-policy0-python3-32bitUpgrade ctdb-testsUpgrade samba-dsdb-modulesUpgrade ctdb-pcp-pmdaUpgrade sssd-krb5Upgrade sssdUpgrade libipa_hbac0Upgrade libtdb1-32bitUpgrade python3-ldb-32bitUpgrade samba-libs-python3Upgrade libndr1Upgrade sambaUpgrade python3-tevent-32bitUpgrade libwbclient0Upgrade libdcerpc-binding0Upgrade sssd-toolsUpgrade libndr-nbt0Upgrade libsamba-errors-develUpgrade sssd-commonUpgrade python3-ipa_hbacUpgrade libtevent-util0-32bitUpgrade libwbclient-develUpgrade libsmbconf0-32bitUpgrade samba-winbindUpgrade libnetapi-devel-32bitUpgrade libsmbconf-develUpgrade python3-tdbUpgrade samba-ad-dc-libs-32bitUpgrade libsamba-hostconfig0Upgrade samba-docUpgrade apparmor-parser-langUpgrade libsamba-hostconfig-develUpgrade samba-winbind-32bitUpgrade libtalloc2Upgrade libsamba-policy0-python3Upgrade samba-develUpgrade apparmor-abstractionsUpgrade samba-toolUpgrade python3-teventUpgrade libndr-krb5pac-develUpgrade libsss_idmap-develUpgrade libsamba-passdb-develUpgrade python3-talloc-develUpgrade samba-libs-64bitUpgrade libsss_certmap0Upgrade libsamba-passdb0Upgrade libdcerpc-binding0-32bitUpgrade samba-libs-pythonUpgrade samba-gpupdateUpgrade sssd-wbclient-develUpgrade libsamba-policy-develUpgrade libsamba-credentials0-32bitUpgrade libapparmor1-32bitUpgrade libtdb-develUpgrade sssd-adUpgrade libndr-nbt-develUpgrade libtalloc2-32bitUpgrade python-ldbUpgrade samba-devel-32bitUpgrade libsamdb0-32bitUpgrade libndr-nbt0-32bitUpgrade libdcerpc-samr-develUpgrade krb5-plugin-kdb-ldapUpgrade libsamba-errors0-32bitUpgrade samba-client-libs-32bitUpgrade sssd-krb5-commonUpgrade libtdb1Upgrade libsss_nss_idmap-develUpgrade krb5-serverUpgrade samba-winbind-libs-32bitUpgrade samba-ad-dc-32bitUpgrade python3-apparmorUpgrade samba-ldb-ldapUpgrade python3-tdb-32bitUpgrade pam_apparmorUpgrade libdcerpc0-32bitUpgrade pam_apparmor-32bitUpgrade libsamba-util0Upgrade libnetapi0-32bitUpgrade apparmor-utils-langUpgrade perl-apparmorUpgrade samba-testUpgrade ldb-toolsUpgrade libsamba-credentials-develUpgrade libsamba-credentials0Upgrade libsss_certmap-develUpgrade libipa_hbac-develUpgrade python3-sss-murmurUpgrade libldb1Upgrade libsss_idmap0Upgrade python3-ldbUpgrade sssd-wbclientUpgrade libsss_nss_idmap0Upgrade libtevent0Upgrade libsmbldap2Upgrade apparmor-parserUpgrade libndr-develUpgrade libsss_simpleifp-develUpgrade libsamdb-develUpgrade python3-sssd-configUpgrade apache2-mod_apparmorUpgrade libsamba-policy0-python3-64bitUpgrade libndr-standard0Upgrade libsamba-policy-python3-develUpgrade libsmbclient0-32bitUpgrade samba-client-32bitUpgrade libnfsidmap-sssUpgrade krb5Upgrade libapparmor-develUpgrade samba-clientUpgrade sssd-ipaUpgrade libtevent0-32bitUpgrade libsmbclient0Upgrade libndr1-32bitUpgrade libdcerpc0Upgrade samba-libs-python3-32bitUpgrade libsamba-util0-32bitUpgrade talloc-manUpgrade krb5-plugin-preauth-otpUpgrade libdcerpc-samr0Upgrade ruby-apparmorUpgrade libndr-standard-develUpgrade libndr-krb5pac0 | Mar 25, 2021 | Mar 24, 2021 |
| Ubuntu | — | Upgrade libldb1 (Ubuntu Pro)Upgrade libldb1Upgrade libldb2 | Mar 25, 2021 | Mar 24, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub