PT-2020-5802 · Samba+4 · Samba+4

Andrei Popa

·

Published

2020-07-02

·

Updated

2024-06-15

·

CVE-2020-10760

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: samba versions prior to 4.10.17 samba versions prior to 4.11.11 samba versions prior to 4.12.4
Description: A use-after-free flaw was found in the samba LDAP server. This issue can be exploited by a Samba LDAP user to crash samba, resulting in a denial of service. The flaw is related to the use of memory after it has been freed.
Recommendations: For versions prior to 4.10.17, update to version 4.10.17 or later. For versions prior to 4.11.11, update to version 4.11.11 or later. For versions prior to 4.12.4, update to version 4.12.4 or later.

Exploit

Fix

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2020-2444
ALT-PU-2020-2476
BDU:2021-01765
CVE-2020-10760
DLA-2463-1
ECHO-790E-5C5E-B6AC
MGASA-2020-0289
OPENSUSE-SU-2020:0984-1
OPENSUSE-SU-2020:1023-1
OPENSUSE-SU-2020:1313-1
OPENSUSE-SU-2020_0984-1
OPENSUSE-SU-2020_1023-1
OPENSUSE-SU-2020_1313-1
OPENSUSE-SU-2024:11365-1
SUSE-SU-2020:1913-1
SUSE-SU-2020:1948-1
SUSE-SU-2020:2673-1
USN-4409-1

Affected Products

Alt Linux
Linuxmint
Samba
Suse
Ubuntu