Summary
Andrei Popa discovered that Samba incorrectly handled certain LDAP queries.
A remote attacker could use this issue to cause Samba to crash, resulting
in a denial of service, or possibly execute arbitrary code. This issue only
affected Ubuntu 19.10 and Ubuntu 20.04 LTS. (CVE-2020-10700)
It was discovered that Samba incorrectly handled certain LDAP queries. A
remote attacker could possibly use this issue to cause Samba to consume
resources, resulting in a denial of service. (CVE-2020-10704)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | samba | 2:4.3.11+dfsg-0ubuntu0.16.04.26 |
| Ubuntu · 18.04 LTS 18.04:LTS | samba | 2:4.7.6+dfsg~ubuntu-0ubuntu2.16 |
| Ubuntu · 20.04 LTS 20.04:LTS | samba | 2:4.11.6+dfsg-0ubuntu1.1 |
Vulnerabilities 2
-
High 7.5
A flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba handles certain reques…
-
Medium 5.3
A use-after-free flaw was found in the way samba AD DC LDAP servers, handled 'Paged Results' control is combined with t…