CVE-2020-10760

A use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11, before 4.12.4 used in a AC DC configuration. A Samba LDAP user could use this flaw to crash samba.

References

Affected packages

Git / github.com/samba-team/samba

Affected ranges

Type

GIT

Repo

https://github.com/samba-team/samba

Events

Introduced

916fab083a8cb5c10365da7f3a85d0bbfde4a30e

Fixed

e88b0e44899ad462abef61d0082b10d9a4e2c9cb

Introduced

d60cf580825819f11de9e50ec4c4ce591d695ad9

Fixed

c9fa9874747bac838f60b320d201be2f6175ba8b

Introduced

21679048604ab7d74f70cc378e1dcaebbaa9d561

Fixed

6ecd05dfbc201c60346d2ae486663ae0dfc0c09c

Database specific

{
    "versions": [
        {
            "introduced": "4.5.0"
        },
        {
            "fixed": "4.10.17"
        },
        {
            "introduced": "4.11.0"
        },
        {
            "fixed": "4.11.11"
        },
        {
            "introduced": "4.12.0"
        },
        {
            "fixed": "4.12.4"
        }
    ]
}

Affected versions

ldb-2.*

ldb-2.0.10

ldb-2.0.11

ldb-2.0.12

ldb-2.0.8

ldb-2.0.9

ldb-2.1.2

ldb-2.1.3

ldb-2.1.4

samba-4.*

samba-4.11.0

samba-4.11.1

samba-4.11.10

samba-4.11.2

samba-4.11.3

samba-4.11.4

samba-4.11.5

samba-4.11.6

samba-4.11.7

samba-4.11.8

samba-4.11.9

samba-4.12.0

samba-4.12.1

samba-4.12.2

samba-4.12.3

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "18.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "19.10"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "20.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "31"
            }
        ]
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-10760.json"