{
  "cveId": "CVE-2020-27840",
  "url": "https://patchblox.com/security/cve/CVE-2020-27840",
  "summary": "CVE-2020-27840 is fixed in 5 products on 1 platform, first by ldb-tools 2:1.2.3-1ubuntu0.2, released March 23, 2021. It is not reported as exploited. Patch Radar priority: High.",
  "title": "ldb-tools: A flaw was found in samba",
  "description": "A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory, resulting in a crash. The highest threat from this vulnerability is to system availability.",
  "published": "2021-03-23T17:00:00Z",
  "severity": "High",
  "epss": 0.03864,
  "epssPercentile": 0.90245,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "ldb-tools",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:1.2.3-1ubuntu0.2",
      "fix": "ldb-tools 2:1.2.3-1ubuntu0.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-ldb-tools-2-1.2.3-1ubuntu0.2",
      "released": "2021-03-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "ldb-tools",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:2.0.10-0ubuntu0.20.04.3",
      "fix": "ldb-tools 2:2.0.10-0ubuntu0.20.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-ldb-tools-2-2.0.10-0ubuntu0.20.04.3",
      "released": "2021-03-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libldb1",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:1.2.3-1ubuntu0.2",
      "fix": "libldb1 2:1.2.3-1ubuntu0.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libldb1-2-1.2.3-1ubuntu0.2",
      "released": "2021-03-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libldb2",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:2.0.10-0ubuntu0.20.04.3",
      "fix": "libldb2 2:2.0.10-0ubuntu0.20.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libldb2-2-2.0.10-0ubuntu0.20.04.3",
      "released": "2021-03-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python-ldb",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:1.2.3-1ubuntu0.2",
      "fix": "python-ldb 2:1.2.3-1ubuntu0.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-python-ldb-2-1.2.3-1ubuntu0.2",
      "released": "2021-03-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-ldb",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:2.0.10-0ubuntu0.20.04.3",
      "fix": "python3-ldb 2:2.0.10-0ubuntu0.20.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-python3-ldb-2-2.0.10-0ubuntu0.20.04.3",
      "released": "2021-03-23T17:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}