A use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11, before 4.12.4 used in a AC DC configuration. A Samba LDAP user could use this flaw to crash samba.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Jul 6, 2020 |
| Debian | — | Upgrade samba | Nov 24, 2020 | Jul 6, 2020 |
| Freebsd | — | Upgrade samba411Upgrade samba410Upgrade samba412 | Jul 5, 2020 | Jul 2, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Jul 28, 2020 | Jul 6, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-libsUpgrade samba-winbindUpgrade libsmbclientUpgrade sambaUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade samba-pythonUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-common-tools | Feb 22, 2021 | Jul 6, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-libsUpgrade samba-client-libsUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade sambaUpgrade samba-winbindUpgrade libwbclientUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade samba-client | Sep 28, 2020 | Jul 6, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-client-libsUpgrade sambaUpgrade samba-libsUpgrade samba-pythonUpgrade libsmbclientUpgrade libwbclientUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-common-tools | Nov 2, 2020 | Jul 6, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-samba-testUpgrade samba-krb5-printingUpgrade samba-libsUpgrade python3-samba-testUpgrade samba-client-libsUpgrade samba-test-libsUpgrade samba-winbind-modulesUpgrade ctdb-testsUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade python3-sambaUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade python2-sambaUpgrade libwbclientUpgrade samba-pidlUpgrade samba-commonUpgrade samba-testUpgrade ctdbUpgrade samba-dc-libsUpgrade sambaUpgrade samba-winbind | Dec 15, 2020 | Jul 6, 2020 |
| Samba | — | Upgrade to Samba 4.10.17 or later.Upgrade to Samba 4.12.4 or later.Upgrade to Samba 4.11.11 or later. | Jul 7, 2020 | Jul 6, 2020 |
| Suse | — | Upgrade ctdb-pcp-pmdaUpgrade libndr-krb5pac0Upgrade sambaUpgrade libsamba-policy-develUpgrade libldb2-32bitUpgrade libsamba-credentials-develUpgrade libsmbclient0-32bitUpgrade libwbclient-develUpgrade samba-ad-dcUpgrade samba-cephUpgrade libdcerpc-binding0Upgrade samba-libs-python3-32bitUpgrade samba-pythonUpgrade samba-docUpgrade libndr-nbt0Upgrade libndr-standard0-32bitUpgrade libndr0-32bitUpgrade samba-winbind-32bitUpgrade python-ldbUpgrade libndr0Upgrade libldb-develUpgrade libnetapi-devel-32bitUpgrade samba-libs-python3Upgrade python3-ldb-32bitUpgrade libldb1-32bitUpgrade libwbclient0-32bitUpgrade libsmbldap2Upgrade libtevent-util0Upgrade libtevent-util0-32bitUpgrade libndr1-32bitUpgrade libsmbldap-develUpgrade libnetapi0Upgrade libsamba-policy0Upgrade samba-python3Upgrade libdcerpc-samr0-32bitUpgrade samba-core-develUpgrade libsamba-errors-develUpgrade libdcerpc0-32bitUpgrade libsmbconf-develUpgrade libsamba-passdb0-32bitUpgrade samba-pidlUpgrade libsamba-hostconfig0-32bitUpgrade python3-ldb-develUpgrade libsamba-util0Upgrade libndr-krb5pac-develUpgrade libsmbconf0-32bitUpgrade libsamdb0Upgrade python-ldb-develUpgrade libsmbldap2-32bitUpgrade libndr-nbt-develUpgrade libldb2Upgrade samba-winbindUpgrade ctdb-testsUpgrade libdcerpc-samr-develUpgrade libsamba-errors0Upgrade libndr1Upgrade libdcerpc-develUpgrade libsmbconf0Upgrade libndr-develUpgrade libsamba-util-develUpgrade libsamba-errors0-32bitUpgrade samba-libsUpgrade libsamba-policy0-32bitUpgrade libsamba-credentials0-32bitUpgrade samba-dsdb-modulesUpgrade libsamdb-develUpgrade samba-clientUpgrade libsamba-hostconfig-develUpgrade libndr-nbt0-32bitUpgrade libndr-standard-develUpgrade libsmbclient-develUpgrade samba-client-32bitUpgrade samba-testUpgrade samba-ad-dc-32bitUpgrade libsamba-policy-python-develUpgrade libsamba-credentials0Upgrade ctdbUpgrade libsamba-passdb0Upgrade samba-libs-python-32bitUpgrade python3-ldbUpgrade libsamba-policy-python3-develUpgrade samba-libs-pythonUpgrade libndr-krb5pac0-32bitUpgrade libldb1Upgrade libsamba-util0-32bitUpgrade libdcerpc0Upgrade libsamba-hostconfig0Upgrade libdcerpc-binding0-32bitUpgrade libsamba-passdb-develUpgrade libsamba-policy0-python3Upgrade libndr-standard0Upgrade ldb-toolsUpgrade samba-libs-32bitUpgrade libsmbclient0Upgrade libwbclient0Upgrade libnetapi0-32bitUpgrade libnetapi-develUpgrade libdcerpc-samr0Upgrade libsamba-policy0-python3-32bitUpgrade libtevent-util-develUpgrade libsamdb0-32bit | Jul 18, 2020 | Jul 2, 2020 |
| Ubuntu | — | Upgrade sambaUpgrade samba (Ubuntu Pro) | Aug 5, 2020 | Jul 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub