A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-ldb-develUpgrade libldb-develUpgrade libldbUpgrade ldb-toolsUpgrade python-ldb-devel-commonUpgrade python3-ldb | Nov 15, 2022 | Aug 25, 2022 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Aug 25, 2022 |
| Amazon_linux | — | Upgrade samba | Dec 10, 2022 | Jul 29, 2022 |
| Amazon_linux_2023 | — | Upgrade samba-vfs-iouring-debuginfoUpgrade libsmbclient-debuginfoUpgrade python3-samba-testUpgrade samba-develUpgrade samba-usersharesUpgrade samba-dcerpcUpgrade samba-client-libs-debuginfoUpgrade libldb-develUpgrade samba-winbind-krb5-locatorUpgrade python3-ldb-develUpgrade libsmbclient-develUpgrade samba-dc-libsUpgrade samba-clientUpgrade samba-libs-debuginfoUpgrade libldb-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-client-debuginfoUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-winbind-clients-debuginfoUpgrade samba-winbind-debuginfoUpgrade python3-samba-debuginfoUpgrade libldb-debugsourceUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade libnetapiUpgrade libwbclient-develUpgrade samba-client-libsUpgrade samba-pidlUpgrade samba-ldb-ldap-modulesUpgrade samba-dc-libs-debuginfoUpgrade samba-commonUpgrade samba-common-tools-debuginfoUpgrade samba-test-debuginfoUpgrade samba-testUpgrade python3-ldb-debuginfoUpgrade samba-debugsourceUpgrade python3-ldbUpgrade samba-dcerpc-debuginfoUpgrade libnetapi-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-debuginfoUpgrade libnetapi-develUpgrade libldbUpgrade samba-test-libsUpgrade samba-common-libs-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-vfs-iouringUpgrade samba-libsUpgrade samba-krb5-printingUpgrade python3-samba-develUpgrade ldb-toolsUpgrade python3-sambaUpgrade libwbclientUpgrade libwbclient-debuginfoUpgrade ldb-tools-debuginfoUpgrade python-ldb-devel-common | Feb 17, 2025 | Jul 27, 2022 |
| Centos_linux | — | Upgrade libldb-debugsourceUpgrade python3-ldb-debuginfoUpgrade python3-ldbUpgrade libldb-debuginfoUpgrade libldb-develUpgrade ldb-tools-debuginfoUpgrade libldbUpgrade ldb-tools | Nov 9, 2022 | Aug 25, 2022 |
| Debian | — | Upgrade samba | Nov 4, 2022 | Aug 25, 2022 |
| Freebsd | — | Upgrade samba412Upgrade samba413 | Nov 4, 2022 | Oct 11, 2022 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade samba-libsUpgrade samba-commonUpgrade libwbclientUpgrade sambaUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-client | Nov 3, 2022 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ctdb-testsUpgrade samba-krb5-printingUpgrade python3-sambaUpgrade samba-libsUpgrade samba-testUpgrade samba-client-libsUpgrade samba-test-libsUpgrade libwbclientUpgrade samba-pidlUpgrade ctdbUpgrade python3-samba-testUpgrade samba-clientUpgrade samba-dc-libsUpgrade python2-sambaUpgrade sambaUpgrade python2-samba-testUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-common-tools | Dec 9, 2022 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-libsUpgrade libwbclientUpgrade samba-winbindUpgrade libsmbclientUpgrade samba | Nov 15, 2022 | Aug 25, 2022 |
| Oracle_linux | — | Upgrade ldb-toolsUpgrade python-ldb-devel-commonUpgrade libldbUpgrade libldb-develUpgrade python3-ldb-develUpgrade python3-ldb | Nov 16, 2022 | Jul 27, 2022 |
| Redhat_linux | — | Upgrade ldb-toolsUpgrade python3-ldb-debuginfoUpgrade python-ldb-devel-commonUpgrade ldb-tools-debuginfoNo solution existsUpgrade libldbUpgrade libldb-debuginfoUpgrade libldb-develUpgrade libldb-debugsourceUpgrade python3-ldb-develUpgrade python3-ldb | Nov 9, 2022 | Aug 25, 2022 |
| Rocky_linux | — | Upgrade ldb-tools-debuginfoUpgrade python3-ldbUpgrade libldbUpgrade python3-ldb-develUpgrade python3-ldb-debuginfoUpgrade ldb-toolsUpgrade libldb-debugsourceUpgrade libldb-develUpgrade libldb-debuginfoUpgrade python-ldb-devel-common | Mar 12, 2024 | Aug 25, 2022 |
| Samba | — | Upgrade to Samba version 4.15.9Upgrade to Samba version 4.16.4Upgrade to Samba version 4.14.14 | Jul 29, 2022 | Jul 29, 2022 |
| Suse | — | Upgrade samba-docUpgrade libldb-develUpgrade libldb2-32bitUpgrade samba-client-64bitUpgrade libsamba-policy0-python3-32bitUpgrade samba-libsUpgrade samba-cephUpgrade libsamba-policy-develUpgrade ctdb-pcp-pmdaUpgrade ctdbUpgrade libsamba-policy0-python3Upgrade samba-ad-dc-libsUpgrade samba-develUpgrade samba-libs-32bitUpgrade libldb2Upgrade samba-winbindUpgrade samba-libs-python3Upgrade sambaUpgrade samba-libs-python3-64bitUpgrade ldb-toolsUpgrade samba-libs-64bitUpgrade samba-toolUpgrade samba-dsdb-modulesUpgrade samba-winbind-libsUpgrade samba-winbind-libs-32bitUpgrade samba-gpupdateUpgrade samba-clientUpgrade libsamba-policy0-python3-64bitUpgrade python3-ldb-develUpgrade samba-client-32bitUpgrade samba-python3Upgrade samba-ldb-ldapUpgrade python3-ldbUpgrade samba-testUpgrade samba-libs-python3-32bitUpgrade samba-devel-32bitUpgrade libsamba-policy-python3-develUpgrade samba-client-libs-32bitUpgrade samba-ad-dc-libs-32bitUpgrade python3-ldb-32bitUpgrade samba-client-libsUpgrade samba-ad-dc | Oct 26, 2022 | Aug 25, 2022 |
| Ubuntu | — | Upgrade samba | Aug 2, 2022 | Jul 29, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub