Security fix for the ALT Linux 10 package samba version 4.10.5-alt1

July 31, 2019 Evgeny Sinelnikov 4.10.5-alt1 - Update to latest security release - Security fixes: + CVE-2019-12435 Samba AD DC Denial of Service in DNS management server dnsserver + CVE-2019-12436 Samba AD DC LDAP server crash paged searches...

Samba AD DC LDAP server crash (paged searches)

Description A user with read access to the LDAP server can crash the LDAP server process. Depending on the Samba version and the choice of process model, this may crash only the user's own connection. Specifically, while in Samba 4.10 the default is for one process per connected client,...

Server: crash with multiple simple paged result searches

slapd aka ns-slapd in 389 Directory Server 1.2.7.5 aka Red Hat Directory Server 8.2.x or dirsrv does not properly handle simple paged result searches, which allows remote attackers to cause a denial of service daemon crash or possibly have unspecified other impact via multiple search requests...