A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-ldb-toolsalma-upgrade-libldbalma-upgrade-libldb-develalma-upgrade-python-ldb-devel-commonalma-upgrade-python3-ldbalma-upgrade-python3-ldb-devel | Nov 15, 2022 | Aug 25, 2022 | |
| Alpine Linux | alpine-linux-upgrade-samba | Mar 26, 2024 | Aug 25, 2022 | |
| Amazon_linux | — | amazon-linux-upgrade-samba | Dec 10, 2022 | Jul 29, 2022 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-ldb-toolsamazon-linux-2023-upgrade-ldb-tools-debuginfoamazon-linux-2023-upgrade-libldbamazon-linux-2023-upgrade-libldb-debuginfoamazon-linux-2023-upgrade-libldb-debugsourceamazon-linux-2023-upgrade-libldb-develamazon-linux-2023-upgrade-libnetapiamazon-linux-2023-upgrade-libnetapi-debuginfoamazon-linux-2023-upgrade-libnetapi-develamazon-linux-2023-upgrade-libsmbclientamazon-linux-2023-upgrade-libsmbclient-debuginfoamazon-linux-2023-upgrade-libsmbclient-develamazon-linux-2023-upgrade-libwbclientamazon-linux-2023-upgrade-libwbclient-debuginfoamazon-linux-2023-upgrade-libwbclient-develamazon-linux-2023-upgrade-python3-ldbamazon-linux-2023-upgrade-python3-ldb-debuginfoamazon-linux-2023-upgrade-python3-ldb-develamazon-linux-2023-upgrade-python3-sambaamazon-linux-2023-upgrade-python3-samba-debuginfoamazon-linux-2023-upgrade-python3-samba-develamazon-linux-2023-upgrade-python3-samba-testamazon-linux-2023-upgrade-python-ldb-devel-commonamazon-linux-2023-upgrade-sambaamazon-linux-2023-upgrade-samba-clientamazon-linux-2023-upgrade-samba-client-debuginfoamazon-linux-2023-upgrade-samba-client-libsamazon-linux-2023-upgrade-samba-client-libs-debuginfoamazon-linux-2023-upgrade-samba-commonamazon-linux-2023-upgrade-samba-common-libsamazon-linux-2023-upgrade-samba-common-libs-debuginfoamazon-linux-2023-upgrade-samba-common-toolsamazon-linux-2023-upgrade-samba-common-tools-debuginfoamazon-linux-2023-upgrade-samba-dcerpcamazon-linux-2023-upgrade-samba-dcerpc-debuginfoamazon-linux-2023-upgrade-samba-dc-libsamazon-linux-2023-upgrade-samba-dc-libs-debuginfoamazon-linux-2023-upgrade-samba-debuginfoamazon-linux-2023-upgrade-samba-debugsourceamazon-linux-2023-upgrade-samba-develamazon-linux-2023-upgrade-samba-krb5-printingamazon-linux-2023-upgrade-samba-krb5-printing-debuginfoamazon-linux-2023-upgrade-samba-ldb-ldap-modulesamazon-linux-2023-upgrade-samba-ldb-ldap-modules-debuginfoamazon-linux-2023-upgrade-samba-libsamazon-linux-2023-upgrade-samba-libs-debuginfoamazon-linux-2023-upgrade-samba-pidlamazon-linux-2023-upgrade-samba-testamazon-linux-2023-upgrade-samba-test-debuginfoamazon-linux-2023-upgrade-samba-test-libsamazon-linux-2023-upgrade-samba-test-libs-debuginfoamazon-linux-2023-upgrade-samba-usersharesamazon-linux-2023-upgrade-samba-vfs-iouringamazon-linux-2023-upgrade-samba-vfs-iouring-debuginfoamazon-linux-2023-upgrade-samba-winbindamazon-linux-2023-upgrade-samba-winbind-clientsamazon-linux-2023-upgrade-samba-winbind-clients-debuginfoamazon-linux-2023-upgrade-samba-winbind-debuginfoamazon-linux-2023-upgrade-samba-winbind-krb5-locatoramazon-linux-2023-upgrade-samba-winbind-krb5-locator-debuginfoamazon-linux-2023-upgrade-samba-winbind-modulesamazon-linux-2023-upgrade-samba-winbind-modules-debuginfo | Feb 17, 2025 | Jul 27, 2022 | |
| Centos_linux | — | centos-upgrade-ldb-toolscentos-upgrade-ldb-tools-debuginfocentos-upgrade-libldbcentos-upgrade-libldb-debuginfocentos-upgrade-libldb-debugsourcecentos-upgrade-libldb-develcentos-upgrade-python3-ldbcentos-upgrade-python3-ldb-debuginfo | Nov 9, 2022 | Aug 25, 2022 |
| Debian | debian-upgrade-samba | Nov 4, 2022 | Aug 25, 2022 | |
| Freebsd | freebsd-upgrade-package-samba412freebsd-upgrade-package-samba413 | Nov 4, 2022 | Oct 11, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-net-fs-samba | Sep 18, 2023 | Aug 25, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libsmbclienthuawei-euleros-2_0_sp10-upgrade-libwbclienthuawei-euleros-2_0_sp10-upgrade-sambahuawei-euleros-2_0_sp10-upgrade-samba-clienthuawei-euleros-2_0_sp10-upgrade-samba-commonhuawei-euleros-2_0_sp10-upgrade-samba-common-toolshuawei-euleros-2_0_sp10-upgrade-samba-libshuawei-euleros-2_0_sp10-upgrade-samba-winbindhuawei-euleros-2_0_sp10-upgrade-samba-winbind-clientshuawei-euleros-2_0_sp10-upgrade-samba-winbind-modules | Nov 3, 2022 | Aug 25, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-ctdbhuawei-euleros-2_0_sp8-upgrade-ctdb-testshuawei-euleros-2_0_sp8-upgrade-libsmbclienthuawei-euleros-2_0_sp8-upgrade-libwbclienthuawei-euleros-2_0_sp8-upgrade-python2-sambahuawei-euleros-2_0_sp8-upgrade-python2-samba-testhuawei-euleros-2_0_sp8-upgrade-python3-sambahuawei-euleros-2_0_sp8-upgrade-python3-samba-testhuawei-euleros-2_0_sp8-upgrade-sambahuawei-euleros-2_0_sp8-upgrade-samba-clienthuawei-euleros-2_0_sp8-upgrade-samba-client-libshuawei-euleros-2_0_sp8-upgrade-samba-commonhuawei-euleros-2_0_sp8-upgrade-samba-common-libshuawei-euleros-2_0_sp8-upgrade-samba-common-toolshuawei-euleros-2_0_sp8-upgrade-samba-dc-libshuawei-euleros-2_0_sp8-upgrade-samba-krb5-printinghuawei-euleros-2_0_sp8-upgrade-samba-libshuawei-euleros-2_0_sp8-upgrade-samba-pidlhuawei-euleros-2_0_sp8-upgrade-samba-testhuawei-euleros-2_0_sp8-upgrade-samba-test-libshuawei-euleros-2_0_sp8-upgrade-samba-winbindhuawei-euleros-2_0_sp8-upgrade-samba-winbind-clientshuawei-euleros-2_0_sp8-upgrade-samba-winbind-krb5-locatorhuawei-euleros-2_0_sp8-upgrade-samba-winbind-modules | Dec 9, 2022 | Aug 25, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-libsmbclienthuawei-euleros-2_0_sp9-upgrade-libwbclienthuawei-euleros-2_0_sp9-upgrade-sambahuawei-euleros-2_0_sp9-upgrade-samba-clienthuawei-euleros-2_0_sp9-upgrade-samba-commonhuawei-euleros-2_0_sp9-upgrade-samba-common-toolshuawei-euleros-2_0_sp9-upgrade-samba-libshuawei-euleros-2_0_sp9-upgrade-samba-winbindhuawei-euleros-2_0_sp9-upgrade-samba-winbind-clientshuawei-euleros-2_0_sp9-upgrade-samba-winbind-modules | Nov 15, 2022 | Aug 25, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-ldb-toolsoracle-linux-upgrade-libldboracle-linux-upgrade-libldb-develoracle-linux-upgrade-python3-ldboracle-linux-upgrade-python3-ldb-develoracle-linux-upgrade-python-ldb-devel-common | Nov 16, 2022 | Jul 27, 2022 |
| Redhat_linux | redhat-upgrade-ldb-toolsredhat-upgrade-ldb-tools-debuginforedhat-upgrade-libldbredhat-upgrade-libldb-debuginforedhat-upgrade-libldb-debugsourceredhat-upgrade-libldb-develredhat-upgrade-python-ldb-devel-commonredhat-upgrade-python3-ldbredhat-upgrade-python3-ldb-debuginforedhat-upgrade-python3-ldb-devel | Nov 9, 2022 | Aug 25, 2022 | |
| Rocky_linux | rocky-upgrade-ldb-toolsrocky-upgrade-ldb-tools-debuginforocky-upgrade-libldbrocky-upgrade-libldb-debuginforocky-upgrade-libldb-debugsourcerocky-upgrade-libldb-develrocky-upgrade-python-ldb-devel-commonrocky-upgrade-python3-ldbrocky-upgrade-python3-ldb-debuginforocky-upgrade-python3-ldb-devel | Mar 12, 2024 | Aug 25, 2022 | |
| Samba | samba-upgrade-4_14_14samba-upgrade-4_15_9samba-upgrade-4_16_4 | Jul 29, 2022 | Jul 29, 2022 | |
| Suse | — | suse-upgrade-ctdbsuse-upgrade-ctdb-pcp-pmdasuse-upgrade-ldb-toolssuse-upgrade-libldb-develsuse-upgrade-libldb2suse-upgrade-libldb2-32bitsuse-upgrade-libsamba-policy-develsuse-upgrade-libsamba-policy-python3-develsuse-upgrade-libsamba-policy0-python3suse-upgrade-libsamba-policy0-python3-32bitsuse-upgrade-libsamba-policy0-python3-64bitsuse-upgrade-python3-ldbsuse-upgrade-python3-ldb-32bitsuse-upgrade-python3-ldb-develsuse-upgrade-sambasuse-upgrade-samba-ad-dcsuse-upgrade-samba-ad-dc-libssuse-upgrade-samba-ad-dc-libs-32bitsuse-upgrade-samba-cephsuse-upgrade-samba-clientsuse-upgrade-samba-client-32bitsuse-upgrade-samba-client-64bitsuse-upgrade-samba-client-libssuse-upgrade-samba-client-libs-32bitsuse-upgrade-samba-develsuse-upgrade-samba-devel-32bitsuse-upgrade-samba-docsuse-upgrade-samba-dsdb-modulessuse-upgrade-samba-gpupdatesuse-upgrade-samba-ldb-ldapsuse-upgrade-samba-libssuse-upgrade-samba-libs-32bitsuse-upgrade-samba-libs-64bitsuse-upgrade-samba-libs-python3suse-upgrade-samba-libs-python3-32bitsuse-upgrade-samba-libs-python3-64bitsuse-upgrade-samba-python3suse-upgrade-samba-testsuse-upgrade-samba-toolsuse-upgrade-samba-winbindsuse-upgrade-samba-winbind-libssuse-upgrade-samba-winbind-libs-32bit | Oct 26, 2022 | Aug 25, 2022 |
| Ubuntu | ubuntu-upgrade-samba | Aug 2, 2022 | Jul 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub