186 matches found
Samba LDB security vulnerability
Samba is the standard Windows interoperability program suite for Linux and Unix. A security vulnerability exists in Samba ldb that stems from the LDAP Server MaxQueryDuration value not being enforced. An attacker could use this vulnerability to trigger a denial of service via LDAP Server...
PT-2022-36947
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the following functions: cli sigopts handler, readdb parse ldb subsignature, and...
PT-2022-36948
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 8 crash has been reported. The crash involves the following functions: cli bcomp freemeta, cli bcomp addpatt, and readdb parse...
clamav:clamav_dbload_LDB_fuzzer: Heap-buffer-overflow in cli_bcomp_freemeta
Project: https://github.com/Cisco-Talos/clamav.git Detailed Report: https://oss-fuzz.com/testcase?key=6653358552776704 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadLDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Addres...
PT-2022-36941
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 2 crash has been reported. The crash involves the functions cli ac addsig, cli add content match pattern, and readdb parse ldb...
clamav:clamav_dbload_LDB_fuzzer: Heap-use-after-free in init_tdb
Detailed Report: https://oss-fuzz.com/testcase?key=6129967345303552 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadLDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x6020000003b0 Crash State: inittdb loadoneldb...
clamav:clamav_dbload_LDB_fuzzer: Heap-buffer-overflow in cli_sigopts_handler
Detailed Report: https://oss-fuzz.com/testcase?key=6613330503008256 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadLDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6160000005da Crash State: clisigoptshandler...
clamav:clamav_dbload_LDB_fuzzer: Heap-buffer-overflow in cli_ac_addsig
Detailed Report: https://oss-fuzz.com/testcase?key=4727276976078848 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadLDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x609000001312 Crash State: cliacaddsig...
PT-2022-36858
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A heap-buffer-overflow READ 8 crash has been reported. The crash involves the functions cli bcomp freemeta, cli bcomp addpatt, and readdb parse ldb...
clamav:clamav_dbload_LDB_fuzzer: Heap-buffer-overflow in cli_bcomp_freemeta
Detailed Report: https://oss-fuzz.com/testcase?key=4841809124130816 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadLDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x602000000438 Crash State: clibcompfreemeta...
SUSE-SU-2022:0361-1 Security update for ldb, samba
This update for ldb, samba fixes the following issues: Changes in ldb: + CVE-2020-25718: An RODC can issue forge administrator tickets to other servers; bsc1192246 + CVE-2021-3738: Fixed a crash in dsdb stack bsc1192215 Release ldb 2.2.2 + Corrected python behaviour for 'in' for LDAP attributes...
Mageia: Security Advisory (MGASA-2020-0205)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2020-0289)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2016-0094)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2019-0152)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
clamav:clamav_dbload_LDB_fuzzer: Heap-buffer-overflow in cli_sigopts_handler
Detailed Report: https://oss-fuzz.com/testcase?key=6202726181109760 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavdbloadLDBfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x603000000bc9 Crash State: clisigoptshandler loadoneldb...
clamav:clamav_dbload_LDB_fuzzer: Heap-buffer-overflow in cli_ac_addsig
Detailed Report: https://oss-fuzz.com/testcase?key=5427764210040832 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavdbloadLDBfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x603000000682 Crash State: cliacaddsig cliparseadd...
MGASA-2021-0585 Updated samba packages fix security vulnerability
Multiple security issues affecting ldb, samba and sssd. See references for details...
Updated samba packages fix security vulnerability
Multiple security issues affecting ldb, samba and sssd. See references for details...
SUSE: Security Advisory (SUSE-SU-2021:3647-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...