CVE Database
/

CVE-2020-10730

Back to search

CVE-2020-10730

Published: Jul 7, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability.

VendorProductVersions

n/a

Samba

affected
All Samba versions before 4.10.17, before 4.11.11 and before 4.12.4

References

FEDORA-2020-5131d30947
vendor-advisory
x_refsource_FEDORA
openSUSE-SU-2020:0984
vendor-advisory
x_refsource_SUSE
openSUSE-SU-2020:1023
vendor-advisory
x_refsource_SUSE
GLSA-202007-15
vendor-advisory
x_refsource_GENTOO
openSUSE-SU-2020:1121
vendor-advisory
x_refsource_SUSE
openSUSE-SU-2020:1313
vendor-advisory
x_refsource_SUSE
DSA-4884
vendor-advisory
x_refsource_DEBIAN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now