Skip to content
OpenAdvisories
High ALAS2-2021-1628 1 CVE

Important: libldb security update (Amazon Linux 2)

Published Apr 20, 2021 · Updated Apr 21, 2021

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-20277: A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of the LDAP server process handling the request. The highest threat from this vulnerability is to system availability. 1941402: CVE-2021-20277 samba: Out of bounds read in AD DC LDAP server

Fixed packages 6

ReleasePackageFixed in
Amazon Linux · 2 ldb-tools 0:1.5.4-2.amzn2
Amazon Linux · 2 libldb 0:1.5.4-2.amzn2
Amazon Linux · 2 libldb-debuginfo 0:1.5.4-2.amzn2
Amazon Linux · 2 libldb-devel 0:1.5.4-2.amzn2
Amazon Linux · 2 pyldb 0:1.5.4-2.amzn2
Amazon Linux · 2 pyldb-devel 0:1.5.4-2.amzn2

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-20277.html