p PatchFirst

CVE-2020-10760

CVE-2020-10760

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11, before 4.12.4 used in a AC DC configuration. A Samba LDAP user could use this flaw to crash samba.

CVSS 6.5 · Medium · EPSS 2.7% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • samba

    Versions
    • All Samba versions before 4.10.17, 4.11.11, 4.12.4: Affected

    No fix published

  • samba Debian:12

    Affected ranges
    • ECOSYSTEM: < 2:4.12.5+dfsg-1

    Update to 2:4.12.5+dfsg-1

  • samba Debian:13

    Affected ranges
    • ECOSYSTEM: < 2:4.12.5+dfsg-1

    Update to 2:4.12.5+dfsg-1

  • samba Debian:14

    Affected ranges
    • ECOSYSTEM: < 2:4.12.5+dfsg-1

    Update to 2:4.12.5+dfsg-1

  • samba Ubuntu:18.04:LTS

    Versions
    • 2:4.6.7+dfsg-1ubuntu3
    • 2:4.7.1+dfsg-1ubuntu1
    • 2:4.7.3+dfsg-1ubuntu1
    • 2:4.7.4+dfsg-1ubuntu1
    • 2:4.7.6+dfsg~ubuntu-0ubuntu1
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.2
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.4
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.5
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.6
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.7
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.9
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.10
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.11
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.13
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.14
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.15
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.16
    Affected ranges
    • ECOSYSTEM: < 2:4.7.6+dfsg~ubuntu-0ubuntu2.17

    Update to 2:4.7.6+dfsg~ubuntu-0ubuntu2.17

  • samba Ubuntu:20.04:LTS

    Versions
    • 2:4.10.7+dfsg-0ubuntu2
    • 2:4.10.7+dfsg-0ubuntu3
    • 2:4.11.1+dfsg-3ubuntu1
    • 2:4.11.1+dfsg-3ubuntu2
    • 2:4.11.1+dfsg-3ubuntu4
    • 2:4.11.5+dfsg-1ubuntu1
    • 2:4.11.5+dfsg-1ubuntu2
    • 2:4.11.6+dfsg-0ubuntu1
    • 2:4.11.6+dfsg-0ubuntu1.1
    • 2:4.11.6+dfsg-0ubuntu1.2
    Affected ranges
    • ECOSYSTEM: < 2:4.11.6+dfsg-0ubuntu1.3

    Update to 2:4.11.6+dfsg-0ubuntu1.3

Original sources

Check your server →