CVE-2020-27840

Published: 24 March 2021

A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory, resulting in a crash. The highest threat from this vulnerability is to system availability.

Priority

CVSS 3 base score: 7.5

Status

Package	Release	Status
ldb Launchpad, Ubuntu, Debian	Upstream	Needs triage


	Ubuntu 20.04 LTS (Focal Fossa)	Released (2:2.0.10-0ubuntu0.20.04.3)
	Ubuntu 18.04 LTS (Bionic Beaver)	Released (2:1.2.3-1ubuntu0.2)
	Ubuntu 16.04 ESM (Xenial Xerus)	Released (2:1.1.24-1ubuntu3.2)
	Ubuntu 14.04 ESM (Trusty Tahr)	Released (1:1.1.24-0ubuntu0.14.04.2+esm1)
	Patches: Upstream: https://bugzilla.samba.org/attachment.cgi?id=16460 (master) Upstream: https://bugzilla.samba.org/attachment.cgi?id=16462 (4.13) Upstream: https://bugzilla.samba.org/attachment.cgi?id=16463 (4.12) Upstream: https://bugzilla.samba.org/attachment.cgi?id=16464 (4.11)
samba Launchpad, Ubuntu, Debian	Upstream	Needs triage


	Ubuntu 20.04 LTS (Focal Fossa)	Not vulnerable (code not compiled)
	Ubuntu 18.04 LTS (Bionic Beaver)	Not vulnerable (code not compiled)
	Ubuntu 16.04 ESM (Xenial Xerus)	Not vulnerable (code not compiled)
	Ubuntu 14.04 ESM (Trusty Tahr)	Not vulnerable (code not compiled)
	Patches: Upstream: https://bugzilla.samba.org/attachment.cgi?id=16460 (master) Upstream: https://bugzilla.samba.org/attachment.cgi?id=16462 (4.13) Upstream: https://bugzilla.samba.org/attachment.cgi?id=16463 (4.12) Upstream: https://bugzilla.samba.org/attachment.cgi?id=16464 (4.11)

Notes

Author	Note
mdeslaur	This issue is actually in the ldb package, the samba package uses the system ldb library, not the included one

References

Bugs

https://bugzilla.samba.org/show_bug.cgi?id=14595

CVE-2020-27840

High

Status

Notes

References

Bugs

Join the discussion

Canonical is offering Extended Security Maintenance

Further reading