SUSE-SU-2021:0945-1 Security update for ldb

This update for ldb fixes the following issues: - CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad DNs bsc1183572. - CVE-2021-20277: Fixed an out of bounds read in ldbhandlerfold bsc1183574...

SUSE-SU-2021:0944-1 Security update for ldb

This update for ldb fixes the following issues: - CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad DNs bsc1183572. - CVE-2021-20277: Fixed an out of bounds read in ldbhandlerfold bsc1183574...

CVE-2020-27840

A flaw was found in samba. Spaces used in a string around a domain name DN, while supposed to be ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory, resulting in a crash. The highest threat from this vulnerability is to system availability...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : ldb vulnerabilities (USN-4888-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4888-1 advisory. Douglas Bagnall discovered that ldb, when used with Samba, incorrectly handled certain LDAP attributes. A remote attacker could...

The vulnerability of the Synology Router Manager operating system’s LDB service allows a hacker to execute arbitrary commands.

The vulnerability of the Synology Router Manager operating system’s LDB service is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of the ldb microprogramming software services for Qualcomm’s IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA4531, QCA9531, and QCA9980 products exists due to insufficient verification of input data. This allows attackers to execute arbitrary codes.

The vulnerability of the ldb microprogramming software for Qualcomm’s IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA4531, QCA9531, and QCA9980 products exists due to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

openSUSE Security Update : ldb / samba (openSUSE-2020-1313)

"This update for ldb, samba fixes the following issues : Changes in samba : - Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; bso14364 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

openSUSE: Security Advisory for ldb, (openSUSE-SU-2020:1313-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:1313-1 Security update for ldb, samba

This update for ldb, samba fixes the following issues: Changes in samba: - Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; bso14364; bsc1173159 + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each;...

openSUSE Security Update : ldb (openSUSE-2020-1121)

This update for ldb fixes the following issues : - CVE-2020-10730: Fixed a null de-reference in AD DC LDAP server when ASQ and VLV combined bsc1173159. This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks...

openSUSE: Security Advisory for ldb (openSUSE-SU-2020:1121-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:1121-1 Security update for ldb

This update for ldb fixes the following issues: - CVE-2020-10730: Fixed a null de-reference in AD DC LDAP server when ASQ and VLV combined bsc1173159. This update was imported from the SUSE:SLE-15-SP1:Update update project...

Security update for ldb (moderate)

openSUSE Security Update: Security update for ldb Announcement ID: openSUSE-SU-2020:1121-1 Rating: moderate References: 1173159 Cross-References: CVE-2020-10730 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for ldb fixes th...

SUSE-SU-2020:2067-1 Security update for ldb

This update for ldb fixes the following issues: - CVE-2020-10730: Fixed a null de-reference in AD DC LDAP server when ASQ and VLV combined bsc1173159...

openSUSE: Security Advisory for ldb, (openSUSE-SU-2020:1023-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : ldb / samba (openSUSE-2020-1023)

"This update for ldb, samba fixes the following issues : Changes in samba : - Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; bso14364 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

OPENSUSE-SU-2020:1023-1 Security update for ldb, samba

This update for ldb, samba fixes the following issues: Changes in samba: - Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; bso14364; bsc1173159 + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each;...

SUSE SLED15 / SLES15 Security Update : ldb, samba (SUSE-SU-2020:1948-1)

"This update for ldb, samba fixes the following issues : Changes in samba: Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; bso14364 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

SUSE-SU-2020:1948-1 Security update for ldb, samba

This update for ldb, samba fixes the following issues: Changes in samba: - Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; bso14364; bsc1173159 + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each;...

Updated samba packages fix security vulnerabilities

Updated samba packages fix security vulnerabilities: A client combining the 'ASQ' and 'Paged Results' LDAP controls can cause a use-after-free in Samba's AD DC LDAP server CVE-2020-10700. A deeply nested filter in an un-authenticated LDAP search can exhaust the LDAP server's stack memory causing ...