Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
freebsdFreeBSD1F6D97DA-8F72-11EB-B3F1-005056A311D1
HistoryMar 24, 2021 - 12:00 a.m.

samba -- Multiple Vulnerabilities

2021-03-2400:00:00
vuxml.freebsd.org
20
samba
vulnerabilities
heap corruption
ldap server
ad dc

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.009

Percentile

82.7%

JSON

The Samba Team reports:

CVE-2020-27840: An anonymous attacker can crash the Samba AD DC
LDAP server by sending easily crafted DNs as
part of a bind request. More serious heap corruption
is likely also possible.
CVE-2021-20277: User-controlled LDAP filter strings against
the AD DC LDAP server may crash the LDAP server.

Related

nessus 58
openvas 49
fedora 6
osv 8
cisa 1
altlinux 1
suse 4
ubuntu 2
debian 3
gentoo 1
mageia 1
prion 2
cbl_mariner 4
redhat 6
cvelist 2
oraclelinux 2
ubuntucve 2
veracode 2
alpinelinux 2
samba 2
redhatcve 2
cve 2
debiancve 2
nvd 2
almalinux 1
amazon 2
centos 1
f5 1
rosalinux 2
nessus
nessus
EulerOS 2.0 SP5 : samba (EulerOS-SA-2021-2229)
2021-07-16 00:00:00
Debian DLA-2611-1 : ldb security update
2021-04-01 00:00:00
EulerOS Virtualization for ARM 64 3.0.6.0 : libldb (EulerOS-SA-2021-2023)
2021-06-30 00:00:00
openvas
openvas
Fedora: Security Advisory for samba (FEDORA-2021-c93a3a5d3f)
2021-04-10 00:00:00
Fedora: Security Advisory for libldb (FEDORA-2021-c93a3a5d3f)
2021-04-10 00:00:00
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2021-2066)
2021-07-01 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: libldb-2.3.0-1.fc34
2021-03-27 00:19:05
[SECURITY] Fedora 32 Update: libldb-2.1.5-1.fc32
2021-04-09 15:41:06
[SECURITY] Fedora 34 Update: samba-4.14.2-0.fc34
2021-03-27 00:19:05
osv
osv
ldb - security update
2021-03-31 00:00:00
ldb vulnerabilities
2021-03-24 18:08:35
ldb vulnerabilities
2021-03-25 15:32:21
cisa
cisa
Samba Releases Security Updates
2021-03-25 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package samba version 4.14.2-alt1
2021-03-25 00:00:00
suse
suse
Security update for ldb (important)
2021-03-25 00:00:00
Security update for samba (important)
2021-09-22 00:00:00
Security update for samba (important)
2021-05-01 00:00:00
ubuntu
ubuntu
ldb vulnerabilities
2021-03-24 00:00:00
ldb vulnerabilities
2021-03-25 00:00:00
debian
debian
[SECURITY] [DLA 2611-1] ldb security update
2021-03-31 09:22:43
[SECURITY] [DSA 4884-1] ldb security update
2021-04-02 07:54:04
[SECURITY] [DSA 4884-1] ldb security update
2021-04-02 07:54:04
gentoo
gentoo
Samba: Multiple vulnerabilities
2021-05-26 00:00:00
mageia
mageia
Updated samba and ldb packages fix security vulnerabilities
2021-06-25 17:43:41
prion
prion
Out-of-bounds
2021-05-12 15:15:00
Cross site request forgery (csrf)
2021-05-12 14:15:00
cbl_mariner
cbl_mariner
CVE-2020-27840 affecting package samba 4.12.5-6
2024-10-01 22:11:53
CVE-2021-20277 affecting package libldb for versions less than 2.7.2-1
2024-08-25 16:56:44
CVE-2020-27840 affecting package libldb for versions less than 2.7.2-1
2024-08-25 16:56:44
redhat
redhat
(RHSA-2021:1213) Important: libldb security update
2021-04-15 10:43:20
(RHSA-2021:1197) Important: libldb security update
2021-04-14 14:40:08
(RHSA-2021:2331) Important: libldb security update
2021-06-08 20:21:17
cvelist
cvelist
CVE-2021-20277
2021-05-12 13:54:05
CVE-2020-27840
2021-05-12 14:06:16
oraclelinux
oraclelinux
libldb security update
2021-04-14 00:00:00
libldb security update
2021-04-08 00:00:00
ubuntucve
ubuntucve
CVE-2020-27840
2021-03-24 00:00:00
CVE-2021-20277
2021-03-24 00:00:00
veracode
veracode
Denial Of Service (DoS)
2021-03-29 18:11:01
Denial Of Service (DoS)
2021-03-29 17:30:50
alpinelinux
alpinelinux
CVE-2020-27840
2021-05-12 15:15:07
CVE-2021-20277
2021-05-12 14:15:11
samba
samba
Heap corruption via crafted DN strings
2021-03-24 00:00:00
Out of bounds read in AD DC LDAP server
2021-03-24 00:00:00
redhatcve
redhatcve
CVE-2020-27840
2021-03-24 13:24:36
CVE-2021-20277
2021-03-24 13:34:36
cve
cve
CVE-2020-27840
2021-05-12 15:15:07
CVE-2021-20277
2021-05-12 14:15:11
debiancve
debiancve
CVE-2020-27840
2021-05-12 15:15:07
CVE-2021-20277
2021-05-12 14:15:11
nvd
nvd
CVE-2020-27840
2021-05-12 15:15:07
CVE-2021-20277
2021-05-12 14:15:11
almalinux
almalinux
Important: libldb security update
2021-04-14 14:40:08
amazon
amazon
Important: libldb
2021-04-19 17:26:00
Important: libldb
2021-04-20 17:55:00
centos
centos
ldb, libldb, pyldb security update
2021-04-10 17:14:31
f5
f5
K48527562 : Samba vulnerabilities CVE-2021-20277, CVE-2017-14746, CVE-2017-15275
2022-07-18 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2386
2024-04-02 07:01:49
Advisory ROSA-SA-2021-1967
2021-07-02 18:07:38

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.009

Percentile

82.7%

JSON
Related for 1F6D97DA-8F72-11EB-B3F1-005056A311D1
nessus58openvas49fedora6osv8cisa1altlinux1suse4ubuntu2debian3gentoo1mageia1prion2cbl_mariner4redhat6cvelist2oraclelinux2ubuntucve2veracode2alpinelinux2samba2redhatcve2cve2debiancve2nvd2almalinux1amazon2centos1f51rosalinux2