Out-of-Bounds Memory Write Vulnerability in Samba's libldb
CVE-2021-20277

7.5HIGH

Key Information:

Vendor

Samba

Status
Samba
Vendor
CVE Published:
12 May 2021
đź”” Create Samba Vulnerability Alert

What is CVE-2021-20277?

A flaw in Samba's libldb allows multiple consecutive leading spaces in an LDAP attribute, resulting in an out-of-bounds memory write. This can cause the LDAP server process to crash, significantly impacting system availability and disrupting services reliant on LDAP functionality.

Affected Version(s)

samba samba 4.14.1, samba 4.13.6, samba 4.12.13

References

https://security.netapp.com/advisory/ntap-20210326-0007/
x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/package-ann...
vendor-advisoryx_refsource_FEDORA
https://lists.debian.org/debian-lts-announce/2021/03/msg0...
mailing-listx_refsource_MLIST

EPSS Score

6% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.