A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-ldbUpgrade python-ldb-devel-commonUpgrade ldb-toolsUpgrade python3-ldb-develUpgrade libldb-develUpgrade libldb | Nov 15, 2022 | Aug 25, 2022 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Aug 25, 2022 |
| Amazon_linux | — | Upgrade samba | Dec 10, 2022 | Jul 29, 2022 |
| Amazon_linux_2023 | — | Upgrade python3-ldb-debuginfoUpgrade samba-vfs-iouringUpgrade python3-samba-develUpgrade samba-libsUpgrade samba-krb5-printingUpgrade samba-dcerpc-debuginfoUpgrade libnetapi-develUpgrade libnetapi-debuginfoUpgrade samba-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade samba-client-libsUpgrade python3-ldbUpgrade samba-ldb-ldap-modules-debuginfoUpgrade ldb-tools-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-testUpgrade samba-dc-libs-debuginfoUpgrade samba-test-libsUpgrade python-ldb-devel-commonUpgrade ldb-toolsUpgrade samba-test-libs-debuginfoUpgrade libldbUpgrade samba-common-tools-debuginfoUpgrade samba-debugsourceUpgrade libwbclientUpgrade python3-sambaUpgrade samba-commonUpgrade samba-common-libs-debuginfoUpgrade samba-pidlUpgrade samba-test-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-clientUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade libsmbclient-debuginfoUpgrade python3-samba-testUpgrade libldb-debugsourceUpgrade sambaUpgrade python3-ldb-develUpgrade libldb-develUpgrade samba-dcerpcUpgrade libsmbclient-develUpgrade samba-usersharesUpgrade samba-dc-libsUpgrade libldb-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-common-libsUpgrade samba-client-debuginfoUpgrade samba-common-toolsUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winbind-modulesUpgrade samba-winbind-clients-debuginfoUpgrade python3-samba-debuginfoUpgrade libnetapiUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade libwbclient-develUpgrade libsmbclientUpgrade samba-devel | Feb 17, 2025 | Jul 27, 2022 |
| Centos_linux | — | Upgrade libldb-debuginfoUpgrade python3-ldb-debuginfoUpgrade python3-ldbUpgrade libldb-debugsourceUpgrade libldb-develUpgrade ldb-toolsUpgrade libldbUpgrade ldb-tools-debuginfo | Nov 9, 2022 | Aug 25, 2022 |
| Debian | — | Upgrade samba | Nov 4, 2022 | Aug 25, 2022 |
| Freebsd | — | Upgrade samba412Upgrade samba413 | Nov 4, 2022 | Oct 11, 2022 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade samba-common-toolsUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-commonUpgrade sambaUpgrade samba-libsUpgrade libwbclient | Nov 3, 2022 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-sambaUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade samba-common-libsUpgrade samba-winbindUpgrade python3-samba-testUpgrade samba-commonUpgrade samba-winbind-krb5-locatorUpgrade sambaUpgrade samba-winbind-modulesUpgrade python2-samba-testUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-pidlUpgrade ctdb-testsUpgrade samba-testUpgrade python3-sambaUpgrade samba-libsUpgrade libwbclientUpgrade samba-test-libsUpgrade samba-krb5-printingUpgrade ctdb | Dec 9, 2022 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-common-toolsUpgrade samba-clientUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade sambaUpgrade libwbclientUpgrade samba-libsUpgrade libsmbclient | Nov 15, 2022 | Aug 25, 2022 |
| Oracle_linux | — | Upgrade python3-ldb-develUpgrade libldb-develUpgrade libldbUpgrade python3-ldbUpgrade ldb-toolsUpgrade python-ldb-devel-common | Nov 16, 2022 | Jul 27, 2022 |
| Redhat_linux | — | Upgrade libldb-debuginfoUpgrade libldb-debugsourceUpgrade python3-ldb-develUpgrade libldb-develUpgrade python3-ldbUpgrade ldb-tools-debuginfoUpgrade python3-ldb-debuginfoUpgrade libldbUpgrade ldb-toolsNo solution existsUpgrade python-ldb-devel-common | Nov 9, 2022 | Aug 25, 2022 |
| Rocky_linux | — | Upgrade python-ldb-devel-commonUpgrade libldb-debugsourceUpgrade libldb-debuginfoUpgrade libldb-develUpgrade python3-ldb-debuginfoUpgrade ldb-tools-debuginfoUpgrade python3-ldbUpgrade ldb-toolsUpgrade python3-ldb-develUpgrade libldb | Mar 12, 2024 | Aug 25, 2022 |
| Samba | — | Upgrade to Samba version 4.16.4Upgrade to Samba version 4.15.9Upgrade to Samba version 4.14.14 | Jul 29, 2022 | Jul 29, 2022 |
| Suse | — | Upgrade samba-dsdb-modulesUpgrade samba-ad-dcUpgrade samba-libs-64bitUpgrade samba-winbind-libs-32bitUpgrade python3-ldb-develUpgrade samba-client-libsUpgrade libsamba-policy-python3-develUpgrade samba-ad-dc-libs-32bitUpgrade samba-devel-32bitUpgrade samba-libs-python3-64bitUpgrade samba-libs-python3-32bitUpgrade samba-gpupdateUpgrade ldb-toolsUpgrade samba-toolUpgrade samba-python3Upgrade samba-testUpgrade samba-client-libs-32bitUpgrade samba-ldb-ldapUpgrade libsamba-policy0-python3-64bitUpgrade samba-client-32bitUpgrade samba-clientUpgrade python3-ldb-32bitUpgrade samba-winbind-libsUpgrade python3-ldbUpgrade samba-libs-python3Upgrade samba-develUpgrade libsamba-policy0-python3Upgrade libsamba-policy0-python3-32bitUpgrade samba-cephUpgrade ctdbUpgrade ctdb-pcp-pmdaUpgrade samba-client-64bitUpgrade samba-winbindUpgrade samba-docUpgrade sambaUpgrade samba-libs-32bitUpgrade libldb2Upgrade samba-ad-dc-libsUpgrade libldb-develUpgrade libldb2-32bitUpgrade libsamba-policy-develUpgrade samba-libs | Oct 26, 2022 | Aug 25, 2022 |
| Ubuntu | — | Upgrade samba | Aug 2, 2022 | Jul 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub