AZL-45138 CVE-2022-32746 affecting package libldb for versions less than 2.7.2-1

A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl...

libldb Samba Information Disclosure

The vulnerability of the libldb library in the Samba networking software package relates to information disclosure. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data remotely...

libldb: remote memory read in the Samba LDAP server

A memory-read flaw was found in the way the libldb library processed LDB DN records with a null byte. An authenticated, remote attacker could use this flaw to read heap-memory pages from the server...