Non notée
CVE-2020-10730 A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before…
Description
A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| samba | Versions non publiées |
Références
- bugzilla.redhat.com bugzilla.redhat.com
- www.samba.org www.samba.org
- FEDORA-2020-5131d30947 lists.fedoraproject.org
- openSUSE-SU-2020:0984 lists.opensuse.org
- openSUSE-SU-2020:1023 lists.opensuse.org
- GLSA-202007-15 security.gentoo.org
- openSUSE-SU-2020:1121 lists.opensuse.org
- openSUSE-SU-2020:1313 lists.opensuse.org
- [debian-lts-announce] 20201123 [SECURITY] [DLA 2463-1] samba security update lists.debian.org
- DSA-4884 www.debian.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de samba
Les 40 CVE de samba →
CVE-2023-4154
A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active…
7.5
Élevée
CVE-2023-0922
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset…
5.9
Moyenne
CVE-2023-0225
A flaw was found in Samba
4.3
Moyenne
CVE-2023-0614
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was…
7.7
Élevée