Not rated
CVE-2020-10730 A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before…
Description
A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| samba | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- www.samba.org www.samba.org
- FEDORA-2020-5131d30947 lists.fedoraproject.org
- openSUSE-SU-2020:0984 lists.opensuse.org
- openSUSE-SU-2020:1023 lists.opensuse.org
- GLSA-202007-15 security.gentoo.org
- openSUSE-SU-2020:1121 lists.opensuse.org
- openSUSE-SU-2020:1313 lists.opensuse.org
- [debian-lts-announce] 20201123 [SECURITY] [DLA 2463-1] samba security update lists.debian.org
- DSA-4884 www.debian.org
Timeline
- Published
- Last modified
Other CVEs of samba
The 40 CVEs of samba →
CVE-2023-4154
A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active…
7.5
High
CVE-2023-0922
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset…
5.9
Medium
CVE-2023-0225
A flaw was found in Samba
4.3
Medium
CVE-2023-0614
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was…
7.7
High