CVE-2020-27840

2021-03-24T00:00:00
ID UB:CVE-2020-27840
Type ubuntucve
Reporter ubuntu.com
Modified 2021-03-24T00:00:00

Description

A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory, resulting in a crash. The highest threat from this vulnerability is to system availability.

Bugs

  • <https://bugzilla.samba.org/show_bug.cgi?id=14595>

Notes

Author| Note
---|---
mdeslaur | This issue is actually in the ldb package, the samba package uses the system ldb library, not the included one