Skip to content
OpenAdvisories
Medium ELSA-2016-0009 2 CVEs

Moderate: libldb security update (Oracle Linux 7)

Published Jan 7, 2016 · Updated Jan 7, 2016

Ecosystem: Oracle Linux

Summary

[1.1.13-3.1]
- Resolves: rhbz#1290712 - CVE-2015-5330 libldb: samba: Remote memory read
in Samba LDAP server [rhel-7.2.z]
- Remove the patch from the previous commit, it doesn't fix a remotely
eploitable issue. Add patches from upstream #11636 instead.

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 7 ldb-tools 0:1.1.20-1.el7_2.2
Oracle Linux · 7 libldb 0:1.1.20-1.el7_2.2
Oracle Linux · 7 libldb-devel 0:1.1.20-1.el7_2.2
Oracle Linux · 7 pyldb 0:1.1.20-1.el7_2.2
Oracle Linux · 7 pyldb-devel 0:1.1.20-1.el7_2.2

Vulnerabilities 2

  • Unscored —
    CVE-2015-3223

    The ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x befor…

    samba samba ldb Debian Ubuntu
  • Unscored —
    CVE-2015-5330

    ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3…

    samba samba ldb Debian Ubuntu