Summary
Douglas Bagnall discovered that ldb, when used with Samba, incorrectly
handled certain LDAP attributes. A remote attacker could possibly use this
issue to cause the LDAP server to crash, resulting in a denial of service.
(CVE-2021-20277)
Douglas Bagnall discovered that ldb, when used with Samba, incorrectly
handled certain DN strings. A remote attacker could use this issue to
cause the LDAP server to crash, resulting in a denial of service, or
possibly execute arbitrary code. (CVE-2020-27840)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | ldb | 2:1.1.24-1ubuntu3.2 |
| Ubuntu · 18.04 LTS 18.04:LTS | ldb | 2:1.2.3-1ubuntu0.2 |
| Ubuntu · 20.04 LTS 20.04:LTS | ldb | 2:2.0.10-0ubuntu0.20.04.3 |
Vulnerabilities 2
-
Unscored —
A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause i…
-
Unscored —
A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bou…