A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ldb-toolsUpgrade libldbUpgrade libldb-develUpgrade python3-ldb | May 4, 2022 | Jul 7, 2020 |
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Jul 7, 2020 |
| Centos_linux | — | Upgrade ldb-toolsUpgrade python3-ldbUpgrade libldb-debugsourceUpgrade libldbUpgrade libldb-debuginfoUpgrade ldb-tools-debuginfoUpgrade libldb-develUpgrade python3-ldb-debuginfo | Nov 5, 2020 | Jul 7, 2020 |
| Debian | — | Upgrade ldbUpgrade samba | Nov 24, 2020 | Jul 7, 2020 |
| Freebsd | — | Upgrade samba412Upgrade samba410Upgrade samba411 | Jul 5, 2020 | Jul 2, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Jul 28, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-libsUpgrade samba-clientUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade sambaUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba-commonUpgrade libwbclient | Sep 16, 2021 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-commonUpgrade libsmbclientUpgrade samba-common-libsUpgrade libwbclientUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade sambaUpgrade samba-client-libsUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-libsUpgrade samba-python | Apr 30, 2021 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-client-libsUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-common-libsUpgrade sambaUpgrade samba-commonUpgrade samba-pythonUpgrade samba-libsUpgrade libwbclient | Nov 2, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sambaUpgrade python2-samba-testUpgrade samba-winbind-clientsUpgrade ctdb-testsUpgrade samba-winbind-krb5-locatorUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-clientUpgrade python3-samba-testUpgrade samba-dc-libsUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-libsUpgrade samba-test-libsUpgrade python3-sambaUpgrade libwbclientUpgrade python2-sambaUpgrade ctdbUpgrade samba-pidlUpgrade samba-commonUpgrade samba-testUpgrade samba-krb5-printing | Dec 15, 2020 | Jul 7, 2020 |
| Oracle_linux | — | Upgrade libldbUpgrade libldb-develUpgrade python3-ldbUpgrade ldb-tools | Nov 12, 2020 | Jul 2, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Jul 7, 2020 |
| Redhat_linux | — | Upgrade libldb-debuginfoUpgrade python3-ldb-debuginfoUpgrade libldb-debugsourceUpgrade python3-ldbUpgrade libldb-develUpgrade ldb-tools-debuginfoUpgrade libldbNo solution existsUpgrade ldb-tools | Nov 5, 2020 | Jul 7, 2020 |
| Samba | — | Upgrade to Samba 4.11.11 or later.Upgrade to Samba 4.10.17 or later.Upgrade to Samba 4.12.4 or later. | Jul 7, 2020 | Jul 7, 2020 |
| Suse | — | Upgrade libsamba-passdb0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libsmbconf0-32bitUpgrade samba-dsdb-modulesUpgrade libsmbldap2-32bitUpgrade ctdb-testsUpgrade ldb-toolsUpgrade libsmbclient-develUpgrade libndr0Upgrade libndr-krb5pac-develUpgrade libnetapi0Upgrade samba-testUpgrade libsamba-hostconfig0Upgrade samba-libsUpgrade libndr-krb5pac0Upgrade libdcerpc-samr0Upgrade python3-ldbUpgrade libsamba-policy0Upgrade libdcerpc-develUpgrade libldb1Upgrade libndr-nbt0-32bitUpgrade libwbclient0Upgrade samba-cephUpgrade libsamba-util0-32bitUpgrade libsamba-credentials0Upgrade libsmbconf0Upgrade samba-client-32bitUpgrade libtevent-util0-32bitUpgrade libsamba-hostconfig-develUpgrade python-ldb-32bitUpgrade libldb2-32bitUpgrade libndr-standard-develUpgrade samba-python3Upgrade samba-pidlUpgrade libndr1Upgrade libsamba-policy0-python3Upgrade libsamba-passdb-develUpgrade samba-libs-python-32bitUpgrade libndr1-32bitUpgrade libtevent-util-develUpgrade libndr-standard0-32bitUpgrade libsmbldap-develUpgrade libsamba-credentials0-32bitUpgrade libndr-nbt-develUpgrade samba-core-develUpgrade sambaUpgrade libsamba-util-develUpgrade samba-docUpgrade libldb1-32bitUpgrade libdcerpc-samr-develUpgrade samba-libs-pythonUpgrade python3-ldb-32bitUpgrade python-ldbUpgrade samba-clientUpgrade ctdb-pcp-pmdaUpgrade libldb-develUpgrade samba-winbindUpgrade libsamdb0-32bitUpgrade libsamba-policy-develUpgrade libsamba-policy-python-develUpgrade samba-ad-dcUpgrade libdcerpc0Upgrade libsamba-errors0-32bitUpgrade libnetapi-devel-32bitUpgrade python-ldb-develUpgrade libdcerpc0-32bitUpgrade libnetapi0-32bitUpgrade ctdbUpgrade samba-libs-python3Upgrade libwbclient-develUpgrade libsmbldap2Upgrade libsamba-policy0-python3-32bitUpgrade samba-libs-python3-32bitUpgrade libndr-nbt0Upgrade libnetapi-develUpgrade libsmbclient0-32bitUpgrade libsamba-errors0Upgrade libdcerpc-samr0-32bitUpgrade libsamba-credentials-develUpgrade samba-pythonUpgrade libldb2Upgrade libndr-krb5pac0-32bitUpgrade libsmbclient0Upgrade libndr-develUpgrade libsamba-errors-develUpgrade libsamdb-develUpgrade libwbclient0-32bitUpgrade libsamdb0Upgrade libdcerpc-binding0Upgrade libndr-standard0Upgrade libsmbconf-develUpgrade libsamba-hostconfig0-32bitUpgrade python3-ldb-develUpgrade libtevent-util0Upgrade libsamba-util0Upgrade libsamba-policy-python3-develUpgrade libsamba-policy0-32bitUpgrade libndr0-32bitUpgrade samba-libs-32bitUpgrade libsamba-passdb0Upgrade samba-winbind-32bitUpgrade samba-ad-dc-32bit | Jul 18, 2020 | Jul 2, 2020 |
| Ubuntu | — | Upgrade sambaUpgrade samba (Ubuntu Pro) | Aug 5, 2020 | Jul 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub