A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python-ldb-devel-commonUpgrade python3-ldbUpgrade ldb-toolsUpgrade libldb-develUpgrade python3-ldb-develUpgrade libldb | Nov 15, 2022 | Aug 25, 2022 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Aug 25, 2022 |
| Amazon_linux | — | Upgrade samba | Dec 10, 2022 | Jul 29, 2022 |
| Amazon_linux_2023 | — | Upgrade samba-client-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-libs-debuginfoUpgrade libnetapiUpgrade samba-client-libs-debuginfoUpgrade python3-samba-testUpgrade samba-develUpgrade libldb-develUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-dcerpcUpgrade samba-usersharesUpgrade samba-winbind-krb5-locatorUpgrade python3-ldb-develUpgrade samba-dc-libsUpgrade libsmbclientUpgrade sambaUpgrade samba-winbind-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade libldb-debugsourceUpgrade python3-samba-debuginfoUpgrade samba-winbind-modulesUpgrade libsmbclient-develUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade libwbclient-develUpgrade samba-winbind-modules-debuginfoUpgrade samba-clientUpgrade libldb-debuginfoUpgrade libnetapi-develUpgrade samba-vfs-iouringUpgrade samba-test-libsUpgrade samba-libsUpgrade python3-ldb-debuginfoUpgrade python3-samba-develUpgrade samba-dc-libs-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade samba-client-libsUpgrade libldbUpgrade samba-debuginfoUpgrade samba-test-libs-debuginfoUpgrade libnetapi-debuginfoUpgrade samba-dcerpc-debuginfoUpgrade python3-ldbUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-test-debuginfoUpgrade ldb-tools-debuginfoUpgrade samba-pidlUpgrade samba-commonUpgrade libwbclient-debuginfoUpgrade samba-testUpgrade python-ldb-devel-commonUpgrade ldb-toolsUpgrade libwbclientUpgrade python3-sambaUpgrade samba-common-tools-debuginfoUpgrade samba-debugsourceUpgrade samba-krb5-printing | Feb 17, 2025 | Jul 27, 2022 |
| Centos_linux | — | Upgrade libldb-debuginfoUpgrade libldb-debugsourceUpgrade python3-ldb-debuginfoUpgrade python3-ldbUpgrade libldb-develUpgrade ldb-toolsUpgrade libldbUpgrade ldb-tools-debuginfo | Nov 9, 2022 | Aug 25, 2022 |
| Debian | — | Upgrade samba | Nov 4, 2022 | Aug 25, 2022 |
| Freebsd | — | Upgrade samba412Upgrade samba413 | Nov 4, 2022 | Oct 11, 2022 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade samba-libsUpgrade libwbclientUpgrade samba-commonUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade libsmbclient | Nov 3, 2022 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-commonUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libsUpgrade samba-winbindUpgrade python3-samba-testUpgrade python2-sambaUpgrade python2-samba-testUpgrade sambaUpgrade samba-test-libsUpgrade samba-testUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-libsUpgrade samba-krb5-printingUpgrade python3-sambaUpgrade ctdbUpgrade ctdb-testsUpgrade samba-pidl | Dec 9, 2022 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-libsUpgrade samba | Nov 15, 2022 | Aug 25, 2022 |
| Oracle_linux | — | Upgrade ldb-toolsUpgrade python-ldb-devel-commonUpgrade python3-ldb-develUpgrade python3-ldbUpgrade libldb-develUpgrade libldb | Nov 16, 2022 | Jul 27, 2022 |
| Redhat_linux | — | Upgrade libldb-develUpgrade libldb-debugsourceUpgrade libldb-debuginfoUpgrade python3-ldb-develUpgrade python3-ldbUpgrade ldb-tools-debuginfoNo solution existsUpgrade libldbUpgrade ldb-toolsUpgrade python-ldb-devel-commonUpgrade python3-ldb-debuginfo | Nov 9, 2022 | Aug 25, 2022 |
| Rocky_linux | — | Upgrade python3-ldb-develUpgrade ldb-tools-debuginfoUpgrade libldbUpgrade python3-ldb-debuginfoUpgrade python3-ldbUpgrade ldb-toolsUpgrade libldb-debugsourceUpgrade python-ldb-devel-commonUpgrade libldb-develUpgrade libldb-debuginfo | Mar 12, 2024 | Aug 25, 2022 |
| Samba | — | Upgrade to Samba version 4.16.4Upgrade to Samba version 4.15.9Upgrade to Samba version 4.14.14 | Jul 29, 2022 | Jul 29, 2022 |
| Suse | — | Upgrade ctdb-pcp-pmdaUpgrade samba-docUpgrade libsamba-policy0-python3-32bitUpgrade samba-winbindUpgrade samba-libsUpgrade libsamba-policy0-python3Upgrade libldb-develUpgrade samba-ad-dc-libsUpgrade samba-libs-python3Upgrade libldb2-32bitUpgrade libldb2Upgrade samba-libs-32bitUpgrade samba-client-64bitUpgrade sambaUpgrade samba-develUpgrade ctdbUpgrade libsamba-policy-develUpgrade samba-cephUpgrade samba-ad-dcUpgrade samba-libs-python3-64bitUpgrade samba-devel-32bitUpgrade samba-dsdb-modulesUpgrade python3-ldb-32bitUpgrade samba-ldb-ldapUpgrade samba-client-libsUpgrade samba-testUpgrade python3-ldb-develUpgrade samba-python3Upgrade samba-client-32bitUpgrade libsamba-policy0-python3-64bitUpgrade samba-clientUpgrade samba-gpupdateUpgrade samba-winbind-libs-32bitUpgrade ldb-toolsUpgrade samba-libs-python3-32bitUpgrade samba-client-libs-32bitUpgrade samba-ad-dc-libs-32bitUpgrade libsamba-policy-python3-develUpgrade samba-toolUpgrade samba-libs-64bitUpgrade python3-ldbUpgrade samba-winbind-libs | Oct 26, 2022 | Aug 25, 2022 |
| Ubuntu | — | Upgrade samba | Aug 2, 2022 | Jul 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub