CVE-2020-10730

NameCVE-2020-10730
DescriptionA NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDLA-2463-1, DSA-4884-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
ldb (PTS)jessie, jessie (lts)2:1.1.20-0+deb8u3fixed
stretch (security), stretch (lts), stretch2:1.1.27-1+deb9u2fixed
buster (security), buster, buster (lts)2:1.5.1+really1.4.6-3+deb10u1fixed
bullseye (security), bullseye2:2.2.3-2~deb11u2fixed
samba (PTS)jessie, jessie (lts)2:4.2.14+dfsg-0+deb8u16fixed
stretch (security)2:4.5.16+dfsg-1+deb9u4fixed
stretch (lts), stretch2:4.5.16+dfsg-1+deb9u5fixed
buster (security), buster, buster (lts)2:4.9.5+dfsg-5+deb10u5vulnerable
bullseye (security), bullseye2:4.13.13+dfsg-1~deb11u6fixed
bookworm (security), bookworm2:4.17.12+dfsg-0+deb12u1fixed
trixie2:4.21.2+dfsg-3fixed
sid2:4.21.2+dfsg-4fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
ldbsourcejessie(not affected)
ldbsourcestretch(not affected)
ldbsourcebuster2:1.5.1+really1.4.6-3+deb10u1DSA-4884-1
ldbsource(unstable)2:2.1.4-1
sambasourcejessie(not affected)
sambasourcestretch2:4.5.16+dfsg-1+deb9u3DLA-2463-1
sambasource(unstable)2:4.12.5+dfsg-1

Notes

[stretch] - ldb <not-affected> (Vulnerable code introduced later)
[buster] - samba <postponed> (Minor issue, fix along in next DSA)
https://www.samba.org/samba/security/CVE-2020-10730.html
https://bugzilla.samba.org/show_bug.cgi?id=14364
https://git.samba.org/?p=samba.git;a=commitdiff;h=9dd458956d7af1b4bbe505ba2ab72235e81c27d0 (for ldb)
[jessie] - ldb <not-affected> (Vulnerable code introduced later)
[jessie] - samba <not-affected> (Vulnerable code introduced in 4.5)

Search for package or bug name: Reporting problems