Skip to content
OpenAdvisories
Unscored USN-2856-1 2 CVEs

ldb vulnerabilities

Published Jan 5, 2016 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Thilo Uttendorfer discovered that the ldb incorrectly handled certain zero
values. A remote attacker could use this issue to cause applications using
ldb, such as Samba, to stop responding, resulting in a denial of service.
(CVE-2015-3223)

Douglas Bagnall discovered that ldb incorrectly handled certain string
lengths. A remote attacker could use this issue to possibly access
sensitive information from memory of applications using ldb, such as Samba.
(CVE-2015-5330)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS ldb 1:1.1.16-1ubuntu0.1

Vulnerabilities 2

  • Unscored —
    CVE-2015-3223

    The ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x befor…

    samba samba ldb Debian Ubuntu
  • Unscored —
    CVE-2015-5330

    ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3…

    samba samba ldb Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2015-3223
  • report
    https://ubuntu.com/security/CVE-2015-5330