CVE-2015-5330: Infoleak
First published: Thu Nov 12 2015(Updated: )
It was reported that when adding an LDB DN to the database, that if a \00 (null byte) is used, remote memory can be read due to a combination of talloc_strdup() and a length assignment. Upstream bug: <a href="https://bugzilla.samba.org/show_bug.cgi?id=11599">https://bugzilla.samba.org/show_bug.cgi?id=11599</a>
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Samba Samba | =4.0.0 | |
| Samba Samba | =4.0.1 | |
| Samba Samba | =4.0.2 | |
| Samba Samba | =4.0.3 | |
| Samba Samba | =4.0.4 | |
| Samba Samba | =4.0.5 | |
| Samba Samba | =4.0.6 | |
| Samba Samba | =4.0.7 | |
| Samba Samba | =4.0.8 | |
| Samba Samba | =4.0.9 | |
| Samba Samba | =4.0.10 | |
| Samba Samba | =4.0.11 | |
| Samba Samba | =4.0.12 | |
| Samba Samba | =4.0.13 | |
| Samba Samba | =4.0.14 | |
| Samba Samba | =4.0.15 | |
| Samba Samba | =4.0.16 | |
| Samba Samba | =4.0.17 | |
| Samba Samba | =4.0.18 | |
| Samba Samba | =4.0.19 | |
| Samba Samba | =4.0.20 | |
| Samba Samba | =4.0.21 | |
| Samba Samba | =4.0.22 | |
| Samba Samba | =4.0.23 | |
| Samba Samba | =4.0.24 | |
| Samba Samba | =4.1.0 | |
| Samba Samba | =4.1.1 | |
| Samba Samba | =4.1.2 | |
| Samba Samba | =4.1.3 | |
| Samba Samba | =4.1.4 | |
| Samba Samba | =4.1.5 | |
| Samba Samba | =4.1.6 | |
| Samba Samba | =4.1.7 | |
| Samba Samba | =4.1.8 | |
| Samba Samba | =4.1.9 | |
| Samba Samba | =4.1.10 | |
| Samba Samba | =4.1.11 | |
| Samba Samba | =4.1.12 | |
| Samba Samba | =4.1.13 | |
| Samba Samba | =4.1.14 | |
| Samba Samba | =4.1.15 | |
| Samba Samba | =4.1.16 | |
| Samba Samba | =4.1.17 | |
| Samba Samba | =4.1.18 | |
| Samba Samba | =4.1.19 | |
| Samba Samba | =4.1.20 | |
| Samba Samba | =4.1.21 | |
| Samba Samba | =4.2.0 | |
| Samba Samba | =4.2.1 | |
| Samba Samba | =4.2.2 | |
| Samba Samba | =4.2.3 | |
| Samba Samba | =4.2.4 | |
| Samba Samba | =4.2.5 | |
| Samba Samba | =4.2.6 | |
| Samba Samba | =4.3.0 | |
| Samba Samba | =4.3.1 | |
| Samba Samba | =4.3.2 | |
| redhat/libldb | <1.1.24 | 1.1.24 |
| redhat/samba | <4.1.22 | 4.1.22 |
| redhat/samba | <4.2.7 | 4.2.7 |
| redhat/samba | <4.3.3 | 4.3.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00017.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html
- http://www.debian.org/security/2016/dsa-3433
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/79734
- http://www.securitytracker.com/id/1034493
- http://www.ubuntu.com/usn/USN-2855-1
- http://www.ubuntu.com/usn/USN-2855-2
- http://www.ubuntu.com/usn/USN-2856-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1281326
- https://git.samba.org/?p=samba.git;a=commit;h=0454b95657846fcecf0f51b6f1194faac02518bd
- https://git.samba.org/?p=samba.git;a=commit;h=538d305de91e34a2938f5f219f18bf0e1918763f
- https://git.samba.org/?p=samba.git;a=commit;h=7f51ec8c4ed9ba1f53d722e44fb6fb3cde933b72
- https://git.samba.org/?p=samba.git;a=commit;h=a118d4220ed85749c07fb43c1229d9e2fecbea6b
- https://git.samba.org/?p=samba.git;a=commit;h=ba5dbda6d0174a59d221c45cca52ecd232820d48
- https://git.samba.org/?p=samba.git;a=commit;h=f36cb71c330a52106e36028b3029d952257baf15
- https://security.gentoo.org/glsa/201612-47
- https://www.samba.org/samba/security/CVE-2015-5330.html
- https://bugzilla.samba.org/show_bug.cgi?id=11599
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1292070
- https://access.redhat.com/security/cve/CVE-2015-5330
- https://git.samba.org/?p=samba.git;a=commitdiff;h=7f51ec8c4ed9ba1f53d722e44fb6fb3cde933b72
- https://git.samba.org/?p=samba.git;a=commitdiff;h=0454b95657846fcecf0f51b6f1194faac02518bd
- https://git.samba.org/?p=samba.git;a=commitdiff;h=f36cb71c330a52106e36028b3029d952257baf15
- https://git.samba.org/?p=samba.git;a=commitdiff;h=ba5dbda6d0174a59d221c45cca52ecd232820d48
- https://git.samba.org/?p=samba.git;a=commitdiff;h=a118d4220ed85749c07fb43c1229d9e2fecbea6b
- https://git.samba.org/?p=samba.git;a=commitdiff;h=538d305de91e34a2938f5f219f18bf0e1918763f
- https://rhn.redhat.com/errata/RHSA-2016-0009.html
- https://rhn.redhat.com/errata/RHSA-2016-0006.html
- https://rhn.redhat.com/errata/RHSA-2016-0014.html
- https://rhn.redhat.com/errata/RHSA-2016-0016.html
- https://rhn.redhat.com/errata/RHSA-2016-0015.html
- https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=f36cb71c330a52106e36028b3029d952257baf15
- https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=ba5dbda6d0174a59d221c45cca52ecd232820d48
- https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=a118d4220ed85749c07fb43c1229d9e2fecbea6b
- https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=0454b95657846fcecf0f51b6f1194faac02518bd
- https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=538d305de91e34a2938f5f219f18bf0e1918763f
- https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=7f51ec8c4ed9ba1f53d722e44fb6fb3cde933b72
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/references
- agent/weakness
- agent/author
- agent/event
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2015-5330
- agent/software-canonical-lookup
- agent/tags
- agent/trending
- vendor/samba
- canonical/samba samba
- version/samba samba/4.0.0
- version/samba samba/4.0.1
- version/samba samba/4.0.2
- version/samba samba/4.0.3
- version/samba samba/4.0.4
- version/samba samba/4.0.5
- version/samba samba/4.0.6
- version/samba samba/4.0.7
- version/samba samba/4.0.8
- version/samba samba/4.0.9
- version/samba samba/4.0.10
- version/samba samba/4.0.11
- version/samba samba/4.0.12
- version/samba samba/4.0.13
- version/samba samba/4.0.14
- version/samba samba/4.0.15
- version/samba samba/4.0.16
- version/samba samba/4.0.17
- version/samba samba/4.0.18
- version/samba samba/4.0.19
- version/samba samba/4.0.20
- version/samba samba/4.0.21
- version/samba samba/4.0.22
- version/samba samba/4.0.23
- version/samba samba/4.0.24
- version/samba samba/4.1.0
- version/samba samba/4.1.1
- version/samba samba/4.1.2
- version/samba samba/4.1.3
- version/samba samba/4.1.4
- version/samba samba/4.1.5
- version/samba samba/4.1.6
- version/samba samba/4.1.7
- version/samba samba/4.1.8
- version/samba samba/4.1.9
- version/samba samba/4.1.10
- version/samba samba/4.1.11
- version/samba samba/4.1.12
- version/samba samba/4.1.13
- version/samba samba/4.1.14
- version/samba samba/4.1.15
- version/samba samba/4.1.16
- version/samba samba/4.1.17
- version/samba samba/4.1.18
- version/samba samba/4.1.19
- version/samba samba/4.1.20
- version/samba samba/4.1.21
- version/samba samba/4.2.0
- version/samba samba/4.2.1
- version/samba samba/4.2.2
- version/samba samba/4.2.3
- version/samba samba/4.2.4
- version/samba samba/4.2.5
- version/samba samba/4.2.6
- version/samba samba/4.3.0
- version/samba samba/4.3.1
- version/samba samba/4.3.2
- package-manager/redhat