A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libldbUpgrade ldb-toolsUpgrade python3-ldb-develUpgrade libldb-develUpgrade python-ldb-devel-commonUpgrade python3-ldb | Nov 15, 2022 | Aug 25, 2022 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Aug 25, 2022 |
| Amazon_linux | — | Upgrade samba | Dec 10, 2022 | Jul 29, 2022 |
| Amazon_linux_2023 | — | Upgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-test-libs-debuginfoUpgrade libldbUpgrade samba-libsUpgrade samba-test-libsUpgrade python3-samba-develUpgrade libnetapi-develUpgrade samba-vfs-iouringUpgrade samba-krb5-printingUpgrade samba-debuginfoUpgrade samba-testUpgrade samba-dcerpc-debuginfoUpgrade python-ldb-devel-commonUpgrade python3-ldbUpgrade ldb-tools-debuginfoUpgrade samba-pidlUpgrade libwbclient-debuginfoUpgrade libnetapi-debuginfoUpgrade samba-client-libsUpgrade python3-ldb-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade samba-test-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade samba-commonUpgrade samba-common-tools-debuginfoUpgrade ldb-toolsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-common-libs-debuginfoUpgrade libwbclientUpgrade samba-debugsourceUpgrade python3-sambaUpgrade libsmbclient-debuginfoUpgrade libnetapiUpgrade python3-ldb-develUpgrade samba-develUpgrade python3-samba-testUpgrade samba-winbind-debuginfoUpgrade libldb-debugsourceUpgrade samba-client-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-common-toolsUpgrade sambaUpgrade samba-krb5-printing-debuginfoUpgrade samba-common-libsUpgrade samba-usersharesUpgrade samba-dc-libsUpgrade samba-client-libs-debuginfoUpgrade samba-clientUpgrade libldb-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-dcerpcUpgrade samba-winbind-krb5-locatorUpgrade libsmbclient-develUpgrade libldb-develUpgrade python3-samba-debuginfoUpgrade samba-winbindUpgrade libwbclient-develUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade libsmbclient | Feb 17, 2025 | Jul 27, 2022 |
| Centos_linux | — | Upgrade libldbUpgrade ldb-tools-debuginfoUpgrade ldb-toolsUpgrade libldb-develUpgrade python3-ldbUpgrade python3-ldb-debuginfoUpgrade libldb-debuginfoUpgrade libldb-debugsource | Nov 9, 2022 | Aug 25, 2022 |
| Debian | — | Upgrade samba | Nov 4, 2022 | Aug 25, 2022 |
| Freebsd | — | Upgrade samba412Upgrade samba413 | Nov 4, 2022 | Oct 11, 2022 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade samba-libsUpgrade samba-commonUpgrade sambaUpgrade libwbclientUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-client | Nov 3, 2022 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-test-libsUpgrade samba-krb5-printingUpgrade samba-testUpgrade ctdbUpgrade samba-client-libsUpgrade ctdb-testsUpgrade samba-pidlUpgrade samba-libsUpgrade libwbclientUpgrade python3-sambaUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-commonUpgrade samba-dc-libsUpgrade samba-common-toolsUpgrade python2-sambaUpgrade samba-winbindUpgrade python3-samba-testUpgrade sambaUpgrade samba-winbind-modulesUpgrade python2-samba-testUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade libsmbclient | Dec 9, 2022 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-winbindUpgrade libwbclientUpgrade sambaUpgrade samba-libsUpgrade libsmbclientUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-common | Nov 15, 2022 | Aug 25, 2022 |
| Oracle_linux | — | Upgrade ldb-toolsUpgrade python-ldb-devel-commonUpgrade python3-ldbUpgrade libldbUpgrade python3-ldb-develUpgrade libldb-devel | Nov 16, 2022 | Jul 27, 2022 |
| Redhat_linux | — | No solution existsUpgrade libldbUpgrade python3-ldb-debuginfoUpgrade ldb-toolsUpgrade python-ldb-devel-commonUpgrade ldb-tools-debuginfoUpgrade libldb-debuginfoUpgrade libldb-develUpgrade libldb-debugsourceUpgrade python3-ldbUpgrade python3-ldb-devel | Nov 9, 2022 | Aug 25, 2022 |
| Rocky_linux | — | Upgrade python-ldb-devel-commonUpgrade libldb-develUpgrade libldb-debuginfoUpgrade libldb-debugsourceUpgrade ldb-tools-debuginfoUpgrade python3-ldb-develUpgrade ldb-toolsUpgrade python3-ldbUpgrade libldbUpgrade python3-ldb-debuginfo | Mar 12, 2024 | Aug 25, 2022 |
| Samba | — | Upgrade to Samba version 4.16.4Upgrade to Samba version 4.15.9Upgrade to Samba version 4.14.14 | Jul 29, 2022 | Jul 29, 2022 |
| Suse | — | Upgrade samba-ad-dc-libs-32bitUpgrade samba-testUpgrade libsamba-policy-python3-develUpgrade samba-ad-dcUpgrade samba-ldb-ldapUpgrade samba-client-libsUpgrade samba-libs-64bitUpgrade samba-client-32bitUpgrade samba-python3Upgrade python3-ldb-develUpgrade samba-clientUpgrade samba-devel-32bitUpgrade samba-winbind-libs-32bitUpgrade libsamba-policy0-python3-64bitUpgrade samba-gpupdateUpgrade ldb-toolsUpgrade samba-libs-python3-32bitUpgrade samba-dsdb-modulesUpgrade python3-ldb-32bitUpgrade samba-winbind-libsUpgrade samba-client-libs-32bitUpgrade samba-toolUpgrade samba-libs-python3-64bitUpgrade python3-ldbUpgrade ctdb-pcp-pmdaUpgrade samba-libsUpgrade libsamba-policy0-python3-32bitUpgrade libsamba-policy-develUpgrade samba-cephUpgrade ctdbUpgrade samba-winbindUpgrade libldb-develUpgrade sambaUpgrade samba-docUpgrade libldb2Upgrade samba-ad-dc-libsUpgrade libldb2-32bitUpgrade libsamba-policy0-python3Upgrade samba-libs-32bitUpgrade samba-client-64bitUpgrade samba-libs-python3Upgrade samba-devel | Oct 26, 2022 | Aug 25, 2022 |
| Ubuntu | — | Upgrade samba | Aug 2, 2022 | Jul 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub