UBUNTU-CVE-2021-20277

A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of the LDAP server process handling the request. The highest threat from this vulnerability is to system availability...

samba -- Multiple Vulnerabilities

The Samba Team reports: CVE-2020-27840: An anonymous attacker can crash the Samba AD DC LDAP server by sending easily crafted DNs as part of a bind request. More serious heap corruption is likely also possible. CVE-2021-20277: User-controlled LDAP filter strings against the AD DC LDAP server may...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2021-1704)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Samba 缓冲区错误漏洞

Samba is a set of free software from the Samba team that enables UNIX series operating systems to connect to the SMB/CIFS network protocol of Microsoft Windows operating systems. The program supports sharing printers, transferring data files to each other, and so on. A security vulnerability exis...

CVE-2020-27840

A flaw was found in samba. Spaces used in a string around a domain name DN, while supposed to be ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory, resulting in a crash. The highest threat from this vulnerability is to system availability...

CVE-2021-20277

A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of the LDAP server process handling the request. The highest threat from this vulnerability is to system availability...

EulerOS 2.0 SP5 : samba (EulerOS-SA-2021-1704)

According to the version of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves...

The vulnerability of the SMB1 protocol implementation in Samba network communication software lies in the use of memory after it is freed. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SMB1 protocol implementation in Samba networking software lies in the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the _krb5_extract_ticket() function in the Samba networking software package arises from a lack of authentication mechanism checks. This vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the krb5extractticket function in the Samba networking software package is related to the lack of a mechanism for verifying the authenticity of data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

The vulnerability of the Samba networking communication package lies in the fact that the operation exceeds the allowable buffer data size, allowing an attacker to gain access to confidential data.

The vulnerability of the Samba networking communication package is related to the operation that goes beyond the allowable buffer data limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data remotely...

The vulnerability of the Samba networking communication package arises from the simultaneous execution using a shared resource with incorrect synchronization. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Samba networking communication package is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service...

The vulnerability of the Kerberos protocol implementation in Samba’s network interaction software packages arises from a lack of privilege control mechanisms and access management tools. This allows attackers to induce service failures.

The vulnerability of the Kerberos protocol in Samba network communication software lies in the lack of privilege control mechanisms and access management tools. Exploiting this vulnerability allows a malicious actor to cause service failures...

The vulnerability of the SMB1 protocol implementation in Samba networking software allows a perpetrator to gain access to confidential data and compromise its integrity.

The vulnerability of the SMB1 protocol implementation in the Samba networking software package is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity...

The vulnerability of the samba networking interaction software library smbd lies in the lack of privilege control mechanisms and access management tools. This allows attackers to compromise data integrity.

The vulnerability of the samba networking interaction software library smbd is related to the lack of mechanisms for privilege control and access management. Exploiting this vulnerability allows an attacker to compromise data integrity...

The vulnerability of the Samba networking communication package is related to deficiencies in the cryptographic security mechanism. This allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the Samba networking communication package is related to deficiencies in the cryptographic security mechanism. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and compromise its integrity...

The vulnerability of the LDAP library in the Samba networking software package allows attackers to compromise data integrity due to security flaws.

The vulnerability of the LDAP library in the Samba networking software package is related to security flaws. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

The vulnerability of the clidfs.c, libsmb_server.c, and smbXcli_base.c components of the Samba network communication software package lies in the lack of a mechanism to verify input data. This allows attackers to compromise the integrity of the data.

The vulnerability of the clidfs.c, libsmbserver.c, and smbXclibase.c components of the Samba network communication software package is related to a lack of mechanisms for checking input data. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

The vulnerability of the ldb_wildcard_compare function in the Samba networking software package, related to a number processing error, allows a hacker to trigger a service failure.

The vulnerability of the ldbwildcardcompare function in the Samba networking software package is related to a number processing error. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

The vulnerability of the MS-SAMR and MS-LSAD protocols in the Samba networking software suite is related to security flaws. This allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the MS-SAMR and MS-LSAD protocols in the Samba networking software package is related to security flaws. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the NTLMSSP implementation of the Samba networking communication package is related to security flaws, allowing attackers to compromise data integrity.

The vulnerability of the NTLMSSP implementation of the Samba networking communication package is related to security flaws. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...