CVE-2020-10730

ldb-tools: The libldb packages provide an extensible library that implements an LDAP-like API to access remote LDAP servers, or...

CVE-2020-10730 is fixed in 22 products on 1 platform, first by ctdb 2:4.7.6+dfsg~ubuntu-0ubuntu2.17, released July 1, 2020. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
6.5
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0246
84th percentile

The libldb packages provide an extensible library that implements an LDAP-like API to access remote LDAP servers, or use local TDB databases. The following packages have been upgraded to a later upstream version: libldb (2.1.3). (BZ#1817567) Security Fix(es): * samba: NULL pointer de-reference and use-after-free in Samba AD DC LDAP Server with ASQ, VLV and paged_results (CVE-2020-10730) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
ctdb · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 ctdb 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 Jul 1, 2020
ctdb · Ubuntu 20.04 LTS (focal) 2:4.11.6+dfsg-0ubuntu1.3 ctdb 2:4.11.6+dfsg-0ubuntu1.3 Jul 1, 2020
ldb-tools · RHEL 8 0:2.1.3-2.el8 RHSA-2020:4568 Nov 4, 2020
ldb-tools · ol 8 0:2.1.3-2.el8 ELSA-2020-4568 Nov 10, 2020
libldb · RHEL 8 0:2.1.3-2.el8 RHSA-2020:4568 Nov 4, 2020
libldb · ol 8 0:2.1.3-2.el8 ELSA-2020-4568 Nov 10, 2020
libldb-devel · RHEL 8 0:2.1.3-2.el8 RHSA-2020:4568 Nov 4, 2020
libldb-devel · ol 8 0:2.1.3-2.el8 ELSA-2020-4568 Nov 10, 2020
libnss-winbind · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 libnss-winbind 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 Jul 1, 2020
libnss-winbind · Ubuntu 20.04 LTS (focal) 2:4.11.6+dfsg-0ubuntu1.3 libnss-winbind 2:4.11.6+dfsg-0ubuntu1.3 Jul 1, 2020
libpam-winbind · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 libpam-winbind 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 Jul 1, 2020
libpam-winbind · Ubuntu 20.04 LTS (focal) 2:4.11.6+dfsg-0ubuntu1.3 libpam-winbind 2:4.11.6+dfsg-0ubuntu1.3 Jul 1, 2020
libparse-pidl-perl · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 libparse-pidl-perl 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 Jul 1, 2020
libsmbclient · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 libsmbclient 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 Jul 1, 2020
libsmbclient · Ubuntu 20.04 LTS (focal) 2:4.11.6+dfsg-0ubuntu1.3 libsmbclient 2:4.11.6+dfsg-0ubuntu1.3 Jul 1, 2020
libwbclient0 · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 libwbclient0 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 Jul 1, 2020
libwbclient0 · Ubuntu 20.04 LTS (focal) 2:4.11.6+dfsg-0ubuntu1.3 libwbclient0 2:4.11.6+dfsg-0ubuntu1.3 Jul 1, 2020
python-samba · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 python-samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 Jul 1, 2020
python3-ldb · RHEL 8 0:2.1.3-2.el8 RHSA-2020:4568 Nov 4, 2020
python3-ldb · ol 8 0:2.1.3-2.el8 ELSA-2020-4568 Nov 10, 2020
python3-samba · Ubuntu 20.04 LTS (focal) 2:4.11.6+dfsg-0ubuntu1.3 python3-samba 2:4.11.6+dfsg-0ubuntu1.3 Jul 1, 2020
registry-tools · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 registry-tools 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 Jul 1, 2020
registry-tools · Ubuntu 20.04 LTS (focal) 2:4.11.6+dfsg-0ubuntu1.3 registry-tools 2:4.11.6+dfsg-0ubuntu1.3 Jul 1, 2020
samba · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 Jul 1, 2020
samba · Ubuntu 20.04 LTS (focal) 2:4.11.6+dfsg-0ubuntu1.3 samba 2:4.11.6+dfsg-0ubuntu1.3 Jul 1, 2020
samba-common · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 samba-common 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 Jul 1, 2020
samba-common · Ubuntu 20.04 LTS (focal) 2:4.11.6+dfsg-0ubuntu1.3 samba-common 2:4.11.6+dfsg-0ubuntu1.3 Jul 1, 2020
samba-common-bin · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 samba-common-bin 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 Jul 1, 2020
samba-common-bin · Ubuntu 20.04 LTS (focal) 2:4.11.6+dfsg-0ubuntu1.3 samba-common-bin 2:4.11.6+dfsg-0ubuntu1.3 Jul 1, 2020
samba-dsdb-modules · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 samba-dsdb-modules 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 Jul 1, 2020
samba-dsdb-modules · Ubuntu 20.04 LTS (focal) 2:4.11.6+dfsg-0ubuntu1.3 samba-dsdb-modules 2:4.11.6+dfsg-0ubuntu1.3 Jul 1, 2020
samba-libs · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 samba-libs 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 Jul 1, 2020
samba-libs · Ubuntu 20.04 LTS (focal) 2:4.11.6+dfsg-0ubuntu1.3 samba-libs 2:4.11.6+dfsg-0ubuntu1.3 Jul 1, 2020
samba-testsuite · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 samba-testsuite 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 Jul 1, 2020
samba-testsuite · Ubuntu 20.04 LTS (focal) 2:4.11.6+dfsg-0ubuntu1.3 samba-testsuite 2:4.11.6+dfsg-0ubuntu1.3 Jul 1, 2020
samba-vfs-modules · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 samba-vfs-modules 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 Jul 1, 2020
samba-vfs-modules · Ubuntu 20.04 LTS (focal) 2:4.11.6+dfsg-0ubuntu1.3 samba-vfs-modules 2:4.11.6+dfsg-0ubuntu1.3 Jul 1, 2020
smbclient · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 smbclient 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 Jul 1, 2020
smbclient · Ubuntu 20.04 LTS (focal) 2:4.11.6+dfsg-0ubuntu1.3 smbclient 2:4.11.6+dfsg-0ubuntu1.3 Jul 1, 2020
winbind · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 winbind 2:4.7.6+dfsg~ubuntu-0ubuntu2.17 Jul 1, 2020
winbind · Ubuntu 20.04 LTS (focal) 2:4.11.6+dfsg-0ubuntu1.3 winbind 2:4.11.6+dfsg-0ubuntu1.3 Jul 1, 2020

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.