Lucene search

K
f5F5F5:K48527562
HistoryJul 18, 2022 - 12:00 a.m.

K48527562 : Samba vulnerabilities CVE-2021-20277, CVE-2017-14746, CVE-2017-15275

2022-07-1800:00:00
my.f5.com
29

8.1 High

AI Score

Confidence

High

0.916 High

EPSS

Percentile

98.9%

Security Advisory Description

A flaw was found in Samba’s libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of the LDAP server process handling the request. The highest threat from this vulnerability is to system availability.

Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request.

Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory.

Impact

There is no impact; F5 products are not affected by this vulnerability.