Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2020-4568

Опубликовано: 10 нояб. 2020
Источник: oracle-oval
Платформа: Oracle Linux 8

Описание

ELSA-2020-4568: libldb security, bug fix, and enhancement update (MODERATE)

[2.1.3-2]

  • Resolves: rhbz#1849615 - Fix CVE-2020-10730 use-after-free

[2.1.3-1]

  • Resolves: rhbz#1817567 - Rebase libldb to 2.1.3 for samba

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

ldb-tools

2.1.3-2.el8

libldb

2.1.3-2.el8

libldb-devel

2.1.3-2.el8

python3-ldb

2.1.3-2.el8

Oracle Linux x86_64

ldb-tools

2.1.3-2.el8

libldb

2.1.3-2.el8

libldb-devel

2.1.3-2.el8

python3-ldb

2.1.3-2.el8

Связанные CVE

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 5 лет назад

A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability.

CVSS3: 6.5
redhat
больше 5 лет назад

A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability.

CVSS3: 6.5
nvd
больше 5 лет назад

A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability.

CVSS3: 6.5
debian
больше 5 лет назад

A NULL pointer dereference, or possible use-after-free flaw was found ...

suse-cvrf
больше 5 лет назад

Security update for ldb