{"id":"CVE-2020-10745","aliases":["ALPINE-CVE-2020-10745","CLSA-2025-1762540530","DEBIAN-CVE-2020-10745","DLA-2463-1","EUVD-2020-3166","GHSA-77pj-5756-vfx3","MGASA-2020-0289","SUSE-SU-2020:14437-1","SUSE-SU-2020:1913-1","SUSE-SU-2020:1948-1","SUSE-SU-2020:2036-1","SUSE-SU-2020:2065-1","SUSE-SU-2020:2066-1","SUSE-SU-2020:2312-1","SUSE-SU-2020:2673-1","UBUNTU-CVE-2020-10745","USN-4409-1","openSUSE-SU-2020:0984-1","openSUSE-SU-2020:1023-1","openSUSE-SU-2020:1313-1","openSUSE-SU-2024:11365-1"],"status":"published","title":"A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the...","description":"A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP. This flaw allows a remote attacker could to cause the Samba server to consume excessive CPU use, resulting in a denial of service. This highest threat from this vulnerability is to system availability.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.03874,"percentile":0.90296,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2020-07-02T00:00:00Z","modified":"2026-10-26T12:00:09Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"samba","fixed_in":["4.10.17-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"samba","fixed_in":["4.11.14-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"samba","fixed_in":["4.12.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"samba","fixed_in":["4.12.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"samba","fixed_in":["4.12.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"samba","fixed_in":["4.12.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"samba","fixed_in":["4.12.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"samba","fixed_in":["4.12.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"samba","fixed_in":["4.12.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"samba","fixed_in":["4.12.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"samba","fixed_in":["4.12.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"samba","fixed_in":["4.12.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"samba","fixed_in":["4.12.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"samba","fixed_in":["4.12.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"samba","fixed_in":["4.12.5-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"samba","fixed_in":["2:4.12.5+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"samba","fixed_in":["2:4.12.5+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"samba","fixed_in":["2:4.12.5+dfsg-1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"samba","fixed_in":["3.6.3-94.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"samba-doc","fixed_in":["3.6.3-94.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"samba","fixed_in":["3.6.3-94.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"samba-doc","fixed_in":["3.6.3-94.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP5","package":"samba","fixed_in":["4.10.5+git.192.26ffbcd7231-3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"samba","fixed_in":["4.10.5+git.192.26ffbcd7231-3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"samba","fixed_in":["4.10.5+git.192.26ffbcd7231-3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"samba","fixed_in":["4.10.5+git.192.26ffbcd7231-3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15","package":"samba","fixed_in":["4.7.11+git.240.76c9942a99f-4.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"samba","fixed_in":["4.7.11+git.240.76c9942a99f-4.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"samba","fixed_in":["4.7.11+git.240.76c9942a99f-4.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"samba","fixed_in":["4.7.11+git.240.76c9942a99f-4.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"samba","fixed_in":["4.7.11+git.240.76c9942a99f-4.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"samba","fixed_in":["4.6.16+git.186.c6d77b0d5a6-3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"samba","fixed_in":["4.6.16+git.186.c6d77b0d5a6-3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"samba","fixed_in":["4.6.16+git.186.c6d77b0d5a6-3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"samba","fixed_in":["4.6.16+git.186.c6d77b0d5a6-3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"samba","fixed_in":["4.6.16+git.186.c6d77b0d5a6-3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP3","package":"samba","fixed_in":["4.6.16+git.186.c6d77b0d5a6-3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP4","package":"samba","fixed_in":["4.6.16+git.186.c6d77b0d5a6-3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"samba","fixed_in":["4.6.16+git.186.c6d77b0d5a6-3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"samba","fixed_in":["4.6.16+git.186.c6d77b0d5a6-3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"samba","fixed_in":["4.6.16+git.186.c6d77b0d5a6-3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"samba","fixed_in":["4.6.16+git.186.c6d77b0d5a6-3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"samba","fixed_in":["4.6.16+git.186.c6d77b0d5a6-3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 5","package":"samba","fixed_in":["4.6.16+git.186.c6d77b0d5a6-3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"samba","fixed_in":["4.4.2-38.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP2","package":"samba","fixed_in":["4.4.2-38.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"samba","fixed_in":["4.4.2-38.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"samba","fixed_in":["4.4.2-38.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"samba","fixed_in":["4.4.2-38.33.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"samba","fixed_in":["2:4.3.11+dfsg-0ubuntu0.14.04.20+esm7"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"samba","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.28"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"samba","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.17"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"samba","fixed_in":["2:4.11.6+dfsg-0ubuntu1.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.10.17-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.11.14-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.12.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.12.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.12.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.12.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.12.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.12.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.12.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.12.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.12.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.12.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.12.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.12.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.12.5-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"ctdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnss-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpam-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libsmbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libsmbclient-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libwbclient-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libwbclient0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"registry-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"samba-common-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"samba-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"samba-dsdb-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"samba-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"samba-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"samba-vfs-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"smbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.12.5+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.12.5+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.12.5+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.5.16+dfsg-1+deb9u3"}]}],"versions":["2:4.5.12+dfsg-1","2:4.5.12+dfsg-2","2:4.5.12+dfsg-2+deb9u1","2:4.5.12+dfsg-2+deb9u2","2:4.5.12+dfsg-2+deb9u3","2:4.5.12+dfsg-2+deb9u4","2:4.5.16+dfsg-1","2:4.5.16+dfsg-1+deb9u1","2:4.5.16+dfsg-1+deb9u2","2:4.5.8+dfsg-2","2:4.5.8+dfsg-2+deb9u1","2:4.5.8+dfsg-2+deb9u2"],"bundled":9},{"source":"osv","ecosystem":"Mageia:7","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.8-1.mga7"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:7","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.17-1.mga7"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.3-94.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"samba-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.3-94.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.3-94.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"samba-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.3-94.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5+git.343.4bc358522a9-3.38.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5+git.343.4bc358522a9-3.38.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5+git.343.4bc358522a9-3.38.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5+git.343.4bc358522a9-3.38.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.12-3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.11+git.180.2cf3b203f07-4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.11+git.180.2cf3b203f07-4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.11+git.180.2cf3b203f07-4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.5+git.192.26ffbcd7231-3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.5+git.192.26ffbcd7231-3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.5+git.192.26ffbcd7231-3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.5+git.192.26ffbcd7231-3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.11+git.240.76c9942a99f-4.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.11+git.240.76c9942a99f-4.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.11+git.240.76c9942a99f-4.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.11+git.240.76c9942a99f-4.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.11+git.240.76c9942a99f-4.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.16+git.186.c6d77b0d5a6-3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.16+git.186.c6d77b0d5a6-3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.16+git.186.c6d77b0d5a6-3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.16+git.186.c6d77b0d5a6-3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.16+git.186.c6d77b0d5a6-3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.16+git.186.c6d77b0d5a6-3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.16+git.186.c6d77b0d5a6-3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.16+git.186.c6d77b0d5a6-3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.16+git.186.c6d77b0d5a6-3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.16+git.186.c6d77b0d5a6-3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.16+git.186.c6d77b0d5a6-3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.16+git.186.c6d77b0d5a6-3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.16+git.186.c6d77b0d5a6-3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-38.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-38.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-38.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-38.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-38.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.17+git.203.862547088ca-3.14.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.8-3.5.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.17+git.203.862547088ca-3.14.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.8-3.5.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.17+git.203.862547088ca-3.14.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.8-3.5.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.17+git.203.862547088ca-3.14.1"}]}],"bundled":15},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm7"}]}],"versions":["2:3.6.18-1ubuntu3","2:4.0.10+dfsg-4ubuntu2","2:4.0.13+dfsg-1ubuntu1","2:4.1.3+dfsg-2ubuntu2","2:4.1.3+dfsg-2ubuntu3","2:4.1.3+dfsg-2ubuntu4","2:4.1.3+dfsg-2ubuntu5","2:4.1.6+dfsg-1ubuntu1","2:4.1.6+dfsg-1ubuntu2","2:4.1.6+dfsg-1ubuntu2.14.04.1","2:4.1.6+dfsg-1ubuntu2.14.04.2","2:4.1.6+dfsg-1ubuntu2.14.04.3","2:4.1.6+dfsg-1ubuntu2.14.04.4","2:4.1.6+dfsg-1ubuntu2.14.04.5","2:4.1.6+dfsg-1ubuntu2.14.04.7","2:4.1.6+dfsg-1ubuntu2.14.04.8","2:4.1.6+dfsg-1ubuntu2.14.04.9","2:4.1.6+dfsg-1ubuntu2.14.04.11","2:4.1.6+dfsg-1ubuntu2.14.04.12","2:4.1.6+dfsg-1ubuntu2.14.04.13","2:4.3.8+dfsg-0ubuntu0.14.04.2","2:4.3.9+dfsg-0ubuntu0.14.04.1","2:4.3.9+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.1","2:4.3.11+dfsg-0ubuntu0.14.04.2","2:4.3.11+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.4","2:4.3.11+dfsg-0ubuntu0.14.04.6","2:4.3.11+dfsg-0ubuntu0.14.04.7","2:4.3.11+dfsg-0ubuntu0.14.04.8","2:4.3.11+dfsg-0ubuntu0.14.04.9","2:4.3.11+dfsg-0ubuntu0.14.04.10","2:4.3.11+dfsg-0ubuntu0.14.04.11","2:4.3.11+dfsg-0ubuntu0.14.04.12","2:4.3.11+dfsg-0ubuntu0.14.04.13","2:4.3.11+dfsg-0ubuntu0.14.04.14","2:4.3.11+dfsg-0ubuntu0.14.04.16","2:4.3.11+dfsg-0ubuntu0.14.04.17","2:4.3.11+dfsg-0ubuntu0.14.04.19","2:4.3.11+dfsg-0ubuntu0.14.04.20","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm2","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm3","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.28"}]}],"versions":["2:4.1.17+dfsg-4ubuntu2","2:4.1.20+dfsg-1ubuntu1","2:4.1.20+dfsg-1ubuntu2","2:4.1.20+dfsg-1ubuntu3","2:4.1.20+dfsg-1ubuntu5","2:4.3.3+dfsg-1ubuntu1","2:4.3.3+dfsg-1ubuntu2","2:4.3.3+dfsg-1ubuntu3","2:4.3.6+dfsg-1ubuntu1","2:4.3.8+dfsg-0ubuntu1","2:4.3.9+dfsg-0ubuntu0.16.04.1","2:4.3.9+dfsg-0ubuntu0.16.04.2","2:4.3.9+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.1","2:4.3.11+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.5","2:4.3.11+dfsg-0ubuntu0.16.04.6","2:4.3.11+dfsg-0ubuntu0.16.04.7","2:4.3.11+dfsg-0ubuntu0.16.04.8","2:4.3.11+dfsg-0ubuntu0.16.04.9","2:4.3.11+dfsg-0ubuntu0.16.04.10","2:4.3.11+dfsg-0ubuntu0.16.04.11","2:4.3.11+dfsg-0ubuntu0.16.04.12","2:4.3.11+dfsg-0ubuntu0.16.04.13","2:4.3.11+dfsg-0ubuntu0.16.04.15","2:4.3.11+dfsg-0ubuntu0.16.04.16","2:4.3.11+dfsg-0ubuntu0.16.04.17","2:4.3.11+dfsg-0ubuntu0.16.04.18","2:4.3.11+dfsg-0ubuntu0.16.04.19","2:4.3.11+dfsg-0ubuntu0.16.04.20","2:4.3.11+dfsg-0ubuntu0.16.04.21","2:4.3.11+dfsg-0ubuntu0.16.04.23","2:4.3.11+dfsg-0ubuntu0.16.04.24","2:4.3.11+dfsg-0ubuntu0.16.04.25","2:4.3.11+dfsg-0ubuntu0.16.04.26","2:4.3.11+dfsg-0ubuntu0.16.04.27"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.17"}]}],"versions":["2:4.6.7+dfsg-1ubuntu3","2:4.7.1+dfsg-1ubuntu1","2:4.7.3+dfsg-1ubuntu1","2:4.7.4+dfsg-1ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu2","2:4.7.6+dfsg~ubuntu-0ubuntu2.2","2:4.7.6+dfsg~ubuntu-0ubuntu2.4","2:4.7.6+dfsg~ubuntu-0ubuntu2.5","2:4.7.6+dfsg~ubuntu-0ubuntu2.6","2:4.7.6+dfsg~ubuntu-0ubuntu2.7","2:4.7.6+dfsg~ubuntu-0ubuntu2.9","2:4.7.6+dfsg~ubuntu-0ubuntu2.10","2:4.7.6+dfsg~ubuntu-0ubuntu2.11","2:4.7.6+dfsg~ubuntu-0ubuntu2.13","2:4.7.6+dfsg~ubuntu-0ubuntu2.14","2:4.7.6+dfsg~ubuntu-0ubuntu2.15","2:4.7.6+dfsg~ubuntu-0ubuntu2.16"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.11.6+dfsg-0ubuntu1.3"}]}],"versions":["2:4.10.7+dfsg-0ubuntu2","2:4.10.7+dfsg-0ubuntu3","2:4.11.1+dfsg-3ubuntu1","2:4.11.1+dfsg-3ubuntu2","2:4.11.1+dfsg-3ubuntu4","2:4.11.5+dfsg-1ubuntu1","2:4.11.5+dfsg-1ubuntu2","2:4.11.6+dfsg-0ubuntu1","2:4.11.6+dfsg-0ubuntu1.1","2:4.11.6+dfsg-0ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm7"}]}],"versions":["2:3.6.18-1ubuntu3","2:4.0.10+dfsg-4ubuntu2","2:4.0.13+dfsg-1ubuntu1","2:4.1.3+dfsg-2ubuntu2","2:4.1.3+dfsg-2ubuntu3","2:4.1.3+dfsg-2ubuntu4","2:4.1.3+dfsg-2ubuntu5","2:4.1.6+dfsg-1ubuntu1","2:4.1.6+dfsg-1ubuntu2","2:4.1.6+dfsg-1ubuntu2.14.04.1","2:4.1.6+dfsg-1ubuntu2.14.04.2","2:4.1.6+dfsg-1ubuntu2.14.04.3","2:4.1.6+dfsg-1ubuntu2.14.04.4","2:4.1.6+dfsg-1ubuntu2.14.04.5","2:4.1.6+dfsg-1ubuntu2.14.04.7","2:4.1.6+dfsg-1ubuntu2.14.04.8","2:4.1.6+dfsg-1ubuntu2.14.04.9","2:4.1.6+dfsg-1ubuntu2.14.04.11","2:4.1.6+dfsg-1ubuntu2.14.04.12","2:4.1.6+dfsg-1ubuntu2.14.04.13","2:4.3.8+dfsg-0ubuntu0.14.04.2","2:4.3.9+dfsg-0ubuntu0.14.04.1","2:4.3.9+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.1","2:4.3.11+dfsg-0ubuntu0.14.04.2","2:4.3.11+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.4","2:4.3.11+dfsg-0ubuntu0.14.04.6","2:4.3.11+dfsg-0ubuntu0.14.04.7","2:4.3.11+dfsg-0ubuntu0.14.04.8","2:4.3.11+dfsg-0ubuntu0.14.04.9","2:4.3.11+dfsg-0ubuntu0.14.04.10","2:4.3.11+dfsg-0ubuntu0.14.04.11","2:4.3.11+dfsg-0ubuntu0.14.04.12","2:4.3.11+dfsg-0ubuntu0.14.04.13","2:4.3.11+dfsg-0ubuntu0.14.04.14","2:4.3.11+dfsg-0ubuntu0.14.04.16","2:4.3.11+dfsg-0ubuntu0.14.04.17","2:4.3.11+dfsg-0ubuntu0.14.04.19","2:4.3.11+dfsg-0ubuntu0.14.04.20","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm2","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm3","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.28"}]}],"versions":["2:4.1.17+dfsg-4ubuntu2","2:4.1.20+dfsg-1ubuntu1","2:4.1.20+dfsg-1ubuntu2","2:4.1.20+dfsg-1ubuntu3","2:4.1.20+dfsg-1ubuntu5","2:4.3.3+dfsg-1ubuntu1","2:4.3.3+dfsg-1ubuntu2","2:4.3.3+dfsg-1ubuntu3","2:4.3.6+dfsg-1ubuntu1","2:4.3.8+dfsg-0ubuntu1","2:4.3.9+dfsg-0ubuntu0.16.04.1","2:4.3.9+dfsg-0ubuntu0.16.04.2","2:4.3.9+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.1","2:4.3.11+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.5","2:4.3.11+dfsg-0ubuntu0.16.04.6","2:4.3.11+dfsg-0ubuntu0.16.04.7","2:4.3.11+dfsg-0ubuntu0.16.04.8","2:4.3.11+dfsg-0ubuntu0.16.04.9","2:4.3.11+dfsg-0ubuntu0.16.04.10","2:4.3.11+dfsg-0ubuntu0.16.04.11","2:4.3.11+dfsg-0ubuntu0.16.04.12","2:4.3.11+dfsg-0ubuntu0.16.04.13","2:4.3.11+dfsg-0ubuntu0.16.04.15","2:4.3.11+dfsg-0ubuntu0.16.04.16","2:4.3.11+dfsg-0ubuntu0.16.04.17","2:4.3.11+dfsg-0ubuntu0.16.04.18","2:4.3.11+dfsg-0ubuntu0.16.04.19","2:4.3.11+dfsg-0ubuntu0.16.04.20","2:4.3.11+dfsg-0ubuntu0.16.04.21","2:4.3.11+dfsg-0ubuntu0.16.04.23","2:4.3.11+dfsg-0ubuntu0.16.04.24","2:4.3.11+dfsg-0ubuntu0.16.04.25","2:4.3.11+dfsg-0ubuntu0.16.04.26","2:4.3.11+dfsg-0ubuntu0.16.04.27"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.17"}]}],"versions":["2:4.6.7+dfsg-1ubuntu3","2:4.7.1+dfsg-1ubuntu1","2:4.7.3+dfsg-1ubuntu1","2:4.7.4+dfsg-1ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu2","2:4.7.6+dfsg~ubuntu-0ubuntu2.2","2:4.7.6+dfsg~ubuntu-0ubuntu2.4","2:4.7.6+dfsg~ubuntu-0ubuntu2.5","2:4.7.6+dfsg~ubuntu-0ubuntu2.6","2:4.7.6+dfsg~ubuntu-0ubuntu2.7","2:4.7.6+dfsg~ubuntu-0ubuntu2.9","2:4.7.6+dfsg~ubuntu-0ubuntu2.10","2:4.7.6+dfsg~ubuntu-0ubuntu2.11","2:4.7.6+dfsg~ubuntu-0ubuntu2.13","2:4.7.6+dfsg~ubuntu-0ubuntu2.14","2:4.7.6+dfsg~ubuntu-0ubuntu2.15","2:4.7.6+dfsg~ubuntu-0ubuntu2.16"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.11.6+dfsg-0ubuntu1.3"}]}],"versions":["2:4.10.7+dfsg-0ubuntu2","2:4.10.7+dfsg-0ubuntu3","2:4.11.1+dfsg-3ubuntu1","2:4.11.1+dfsg-3ubuntu2","2:4.11.1+dfsg-3ubuntu4","2:4.11.5+dfsg-1ubuntu1","2:4.11.5+dfsg-1ubuntu2","2:4.11.6+dfsg-0ubuntu1","2:4.11.6+dfsg-0ubuntu1.1","2:4.11.6+dfsg-0ubuntu1.2"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5+git.343.4bc358522a9-lp151.2.27.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.12-lp152.2.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.11+git.180.2cf3b203f07-lp152.3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.12-lp152.2.6.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.11+git.180.2cf3b203f07-lp152.3.6.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.6+git.182.2205d5224e3-1.1"}]}],"bundled":66}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"opensuse","product":"leap"},{"vendor":"samba","product":"samba"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1849491%3B","tags":["x_refsource_MISC","x_transferred","report"]},{"url":"https://www.samba.org/samba/security/CVE-2020-10745.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6YLNQ5GRXUKYRUAOFZ4DUBVN4SMTL6Q2/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00030.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00054.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202007-15","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00002.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/11/msg00041.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10745"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1849491;"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6YLNQ5GRXUKYRUAOFZ4DUBVN4SMTL6Q2/"},{"url":"https://github.com/advisories/GHSA-77pj-5756-vfx3"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-10745","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2025-1762540530.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-10745","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0289.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26893","tags":["report"]},{"url":"https://www.samba.org/samba/security/CVE-2020-10730.html","tags":["advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2020-10760.html","tags":["advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2020-14303.html","tags":["advisory"]},{"url":"https://www.samba.org/samba/history/samba-4.10.17.html","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-4409-1","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-202014437-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1173160","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10745","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201913-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1171437","tags":["report"]},{"url":"https://bugzilla.suse.com/1172307","tags":["report"]},{"url":"https://bugzilla.suse.com/1173159","tags":["report"]},{"url":"https://bugzilla.suse.com/1173161","tags":["report"]},{"url":"https://bugzilla.suse.com/1173359","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14303","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201948-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1141320","tags":["report"]},{"url":"https://bugzilla.suse.com/1162680","tags":["report"]},{"url":"https://bugzilla.suse.com/1169095","tags":["report"]},{"url":"https://bugzilla.suse.com/1169521","tags":["report"]},{"url":"https://bugzilla.suse.com/1169850","tags":["report"]},{"url":"https://bugzilla.suse.com/1169851","tags":["report"]},{"url":"https://bugzilla.suse.com/1174120","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10704","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202036-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1169473","tags":["report"]},{"url":"https://bugzilla.suse.com/1172810","tags":["report"]},{"url":"https://bugzilla.suse.com/1173429","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202065-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202066-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202312-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202673-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1141267","tags":["report"]},{"url":"https://bugzilla.suse.com/1144902","tags":["report"]},{"url":"https://bugzilla.suse.com/1154289","tags":["report"]},{"url":"https://bugzilla.suse.com/1154598","tags":["report"]},{"url":"https://bugzilla.suse.com/1158108","tags":["report"]},{"url":"https://bugzilla.suse.com/1158109","tags":["report"]},{"url":"https://bugzilla.suse.com/1160850","tags":["report"]},{"url":"https://bugzilla.suse.com/1160852","tags":["report"]},{"url":"https://bugzilla.suse.com/1160888","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19344","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-10745","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10745","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10730","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10760","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CJGAJ5FTYBHYXLWFTGBCU5RWJLAH5ASP/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QEBUQFHEBKSTCNWEBA5BNTU3U4N3NVNA/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/G6CWABZYPZM5WM3TNQERK2OMN6VELZKV/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-3403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1057","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20277","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-10745","description":"A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP. This flaw allows a remote attacker could to cause the Samba server to consume excessive CPU use, resulting in a denial of service. This highest threat from this vulnerability is to system availability.","status":"published","published":"2020-07-07T13:33:08Z","modified":"2024-08-04T11:14:14.729Z","updated_at":"2026-11-02T14:35:48.213211Z"}],"euvd":[{"id":"EUVD-2020-3166","description":"A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP. This flaw allows a remote attacker could to cause the Samba server to consume excessive CPU use, resulting in a denial of service. This highest threat from this vulnerability is to system availability.","status":"published","published":"2020-07-07T13:33:08Z","modified":"2024-08-04T11:14:14Z","updated_at":"2026-11-03T03:07:49.454544Z"}],"ghsa":[{"id":"GHSA-77pj-5756-vfx3","title":"A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the...","description":"A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP. This flaw allows a remote attacker could to cause the Samba server to consume excessive CPU use, resulting in a denial of service. This highest threat from this vulnerability is to system availability.","status":"published","published":"2022-05-24T17:22:28Z","modified":"2023-02-10T05:06:58Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:54:03.327923Z"}],"nvd":[{"id":"CVE-2020-10745","description":"A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP. This flaw allows a remote attacker could to cause the Samba server to consume excessive CPU use, resulting in a denial of service. This highest threat from this vulnerability is to system availability.","status":"published","published":"2020-07-07T14:15:11.007Z","modified":"2026-06-17T02:48:21.977Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:06:09.126752Z"}],"osv":[{"id":"ALPINE-CVE-2020-10745","description":"A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP. This flaw allows a remote attacker could to cause the Samba server to consume excessive CPU use, resulting in a denial of service. This highest threat from this vulnerability is to system availability.","status":"published","published":"2020-07-07T14:15:11.007Z","modified":"2026-10-26T11:17:55.097305741Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.11886Z"},{"id":"CVE-2020-10745","description":"A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP. This flaw allows a remote attacker could to cause the Samba server to consume excessive CPU use, resulting in a denial of service. This highest threat from this vulnerability is to system availability.","status":"published","published":"2020-07-07T14:15:11.007Z","modified":"2026-10-24T10:30:37.234343262Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:13.492058Z"},{"id":"DEBIAN-CVE-2020-10745","description":"A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP. This flaw allows a remote attacker could to cause the Samba server to consume excessive CPU use, resulting in a denial of service. This highest threat from this vulnerability is to system availability.","status":"published","published":"2020-07-07T14:15:11.007Z","modified":"2026-10-26T12:00:09.280834156Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:32.862554Z"},{"id":"UBUNTU-CVE-2020-10745","description":"A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP. This flaw allows a remote attacker could to cause the Samba server to consume excessive CPU use, resulting in a denial of service. This highest threat from this vulnerability is to system availability.","status":"published","published":"2020-07-02T00:00:00Z","modified":"2026-04-22T12:27:01.552515Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:22.212782Z"},{"id":"CLSA-2025-1762540530","title":"Fix CVE(s): CVE-2020-10745, CVE-2022-42898","description":"   * SECURITY UPDATE: DNS string buffer overflow\n     - debian/patches/CVE-2020-10745.patch: add input validation to prevent\n       buffer overflows when handling DNS/NBT names with consecutive dots or\n       exceeding RFC 1035 255-byte limit. The fix enforces proper bounds\n       checking and component length validation in ndr_push_dns_string() and\n       ndr_push_nbt_string() functions.\n     - CVE-2020-10745\n   * SECURITY UPDATE: panic in krb5_pac_parse()\n     - debian/patches/0001-Additional-fix-for-CVE-2022-42898.patch: check\n       pointer for NULL\n     - CVE-2022-42898","status":"published","published":"2025-11-07T18:35:34Z","modified":"2026-06-04T10:03:57.176284Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"DLA-2463-1","title":"samba - security update","status":"published","published":"2020-11-22T00:00:00Z","modified":"2026-03-09T01:18:07.824097Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"MGASA-2020-0289","title":"Updated samba packages fix security vulnerability","description":"Updated samba packages fix security vulnerabilities:\n\nAndrew Bartlett discovered that Samba incorrectly handled certain LDAP\nqueries. A remote attacker could use this issue to cause Samba to crash,\nresulting in a denial of service, or possibly execute arbitrary code\n(CVE-2020-10730).\n\nDouglas Bagnall discovered that Samba incorrectly handled certain queries.\nA remote attacker could possibly use this issue to cause a denial of\nservice (CVE-2020-10745).\n\nAndrei Popa discovered that Samba incorrectly handled certain LDAP\nqueries. A remote attacker could use this issue to cause Samba to crash,\nresulting in a denial of service, or possibly execute arbitrary code \n(CVE-2020-10760).\n\nThe AD DC NBT server in Samba 4.0 will enter a CPU spin and not process further\nrequests once it receives a empty (zero-length) UDP packet to port 137\n(CVE-2020-14303).\n","status":"published","published":"2020-07-10T08:01:08Z","modified":"2026-04-16T04:44:09.972785047Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2020:0984-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets \n  containing dots could potentially have consumed excessive CPU (bsc#1173160).\n- CVE-2020-14303: Fixed an endless loop when receiving at AD DC empty UDP packets (bsc#1173359).\n- CVE-2020-10730: Fixed a null de-reference in AD DC LDAP server when ASQ and VLV combined (bsc#1173159).\n- CVE-2020-10760: Fixed a use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV (bsc#1173161).\n- Added libnetapi-devel to baselibs conf, for wine usage (bsc#1172307).\n- Fixed an installing issue where samba - samba-ad-dc.service did not exist and unit was not found (bsc#1171437).\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2020-07-17T22:28:26Z","modified":"2026-02-04T03:14:16.115077Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2020:1023-1","title":"Security update for ldb, samba","description":"This update for ldb, samba fixes the following issues:\n\nChanges in samba:\n- Update to samba 4.11.11\n  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ\n    and VLV combined; (bso#14364); (bsc#1173159]\n  + CVE-2020-10745: invalid DNS or NBT queries containing dots use\n    several seconds of CPU each; (bso#14378); (bsc#1173160).\n  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP\n    server with paged_result or VLV; (bso#14402); (bsc#1173161)\n  + CVE-2020-14303: Endless loop from empty UDP packet sent to\n    AD DC nbt_server; (bso#14417); (bsc#1173359).\n- Update to samba 4.11.10\n  + Fix segfault when using SMBC_opendir_ctx() routine for share\n    folder that contains incorrect symbols in any file name;\n    (bso#14374).\n  + vfs_shadow_copy2 doesn't fail case looking in\n    snapdirseverywhere mode; (bso#14350)\n  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;\n    (bso#14413).\n  + Malicous SMB1 server can crash libsmbclient; (bso#14366)\n  + winbindd: Fix a use-after-free when winbind clients exit;\n    (bso#14382)\n  + ldb: Bump version to 2.0.11, LMDB databases can grow without\n    bounds. (bso#14330)\n- Update to samba 4.11.9\n  + nmblib: Avoid undefined behaviour in handle_name_ptrs();\n    (bso#14242).\n  + 'samba-tool group' commands do not handle group names with\n    special chars correctly; (bso#14296).\n  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo\n    is not valid; (bso#14237).\n  + Missing check for DMAPI offline status in async DOS\n    attributes; (bso#14293).\n  + smbd: Ignore set NTACL requests which contain\n    S-1-5-88 NFS ACEs; (bso#14307).\n  + vfs_recycle: Prevent flooding the log if we're called on\n    non-existant paths; (bso#14316)\n  + smbd mistakenly updates a file's write-time on close;\n    (bso#14320).\n  + RPC handles cannot be differentiated in source3 RPC server;\n    (bso#14359).\n  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).\n  + nsswitch: Fix use-after-free causing segfault in\n    _pam_delete_cred; (bso#14327).\n  + Fix fruit:time machine max size on arm; (bso#13622)\n  + CTDB recovery corner cases can cause record resurrection\n    and node banning; (bso#14294).\n  + ctdb: Fix a memleak; (bso#14348).\n  + libsmb: Don't try to find posix stat info in SMBC_getatr().\n  + ctdb-tcp: Move free of inbound queue to TCP restart;\n    (bso#14295); (bsc#1162680).\n  + s3/librpc/crypto: Fix double free with unresolved\n    credential cache; (bso#14344); (bsc#1169095)\n  + s3:libads: Fix ads_get_upn(); (bso#14336).\n  + CTDB recovery corner cases can cause record resurrection\n    and node banning; (bso#14294)\n  + Starting ctdb node that was powered off hard before\n    results in recovery loop; (bso#14295); (bsc#1162680).\n  + ctdb-recoverd: Avoid dereferencing NULL rec-\u003enodemap;\n    (bso#14324)\n- Update to samba 4.11.8\n  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP\n    Server with ASQ; (bso#14331); (bsc#1169850);\n  + CVE-2020-10704: LDAP Denial of Service (stack overflow)\n    in Samba AD DC; (bso#14334); (bsc#1169851);\n- Update to samba 4.11.7\n  + s3: lib: nmblib. Clean up and harden nmb packet\n    processing; (bso#14239).\n  + s3: VFS: full_audit. Use system session_info if called\n    from a temporary share definition; (bso#14283)\n  + dsdb: Correctly handle memory in objectclass_attrs;\n    (bso#14258).\n  + ldb: version 2.0.9, Samba 4.11 and later give incorrect\n    results for SCOPE_ONE searches; (bso#14270)\n  + auth: Fix CIDs 1458418 and 1458420 Null pointer\n    dereferences; (bso#14247).\n  + smbd: Handle EINTR from open(2) properly; (bso#14285)\n  + winbind member (source3) fails local SAM auth with empty\n    domain name; (bso#14247)\n  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).\n  + lib:util: Log mkdir error on correct debug levels;\n    (bso#14253).\n  + wafsamba: Do not use 'rU' as the 'U' is deprecated in\n    Python 3.9; (bso#14266).\n  + ctdb-tcp: Make error handling for outbound connection\n    consistent; (bso#14274).\n- Update to samba 4.11.6\n  + pygpo: Use correct method flags; (bso#14209).\n  + vfs_ceph_snapshots: Fix root relative path handling;\n    (bso#14216); (bsc#1141320).\n  + Avoiding bad call flags with python 3.8, using METH_NOARGS\n    instead of zero; (bso#14209).\n  + source4/utils/oLschema2ldif: Include stdint.h before\n    cmocka.h; (bso#14218).\n  + docs-xml/winbindnssinfo: Clarify interaction with\n    idmap_ad etc; (bso#14122).\n  + smbd: Fix the build with clang; (bso#14251).\n  + upgradedns: Ensure lmdb lock files linked; (bso#14199).\n  + s3: VFS: glusterfs: Reset nlinks for symlink entries during\n    readdir; (bso#14182).\n  + smbc_stat() doesn't return the correct st_mode and also\n    the uid/gid is not filled (SMBv1) file; (bso#14101).\n  + librpc: Fix string length checking in\n    ndr_pull_charset_to_null(); (bso#14219).\n  + ctdb-scripts: Strip square brackets when gathering\n    connection info; (bso#14227).\n\n- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);\n\n- Installing: samba - samba-ad-dc.service does not exist and unit\n  not found; (bsc#1171437);\n\n- Fix samba_winbind package is installing python3-base without\n  python3 package; (bsc#1169521);\n\nChanges in ldb:\n- Update to version 2.0.12\n  + CVE-2020-10730: NULL de-reference in AD DC LDAP server\n    when ASQ and VLV combined; (bso#14364); (bsc#1173159).\n  + ldb_ldap: fix off-by-one increment in lldb_add_msg_attr;\n    (bso#14413).\n  + lib/ldb: add unit test for ldb_ldap internal code.\n- Update to version 2.0.11\n  + lib ldb: lmdb init var before calling mdb_reader_check.\n  + lib ldb: lmdb clear stale readers on write txn start;\n    (bso#14330).\n  + ldb tests: Confirm lmdb free list handling\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2020-07-20T22:30:54Z","modified":"2026-02-04T03:38:02.28137Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:1313-1","title":"Security update for ldb, samba","description":"This update for ldb, samba fixes the following issues:\n\nChanges in samba:\n- Update to samba 4.11.11\n  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ\n    and VLV combined; (bso#14364); (bsc#1173159]\n  + CVE-2020-10745: invalid DNS or NBT queries containing dots use\n    several seconds of CPU each; (bso#14378); (bsc#1173160).\n  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP\n    server with paged_result or VLV; (bso#14402); (bsc#1173161)\n  + CVE-2020-14303: Endless loop from empty UDP packet sent to\n    AD DC nbt_server; (bso#14417); (bsc#1173359).\n- Update to samba 4.11.10\n  + Fix segfault when using SMBC_opendir_ctx() routine for share\n    folder that contains incorrect symbols in any file name;\n    (bso#14374).\n  + vfs_shadow_copy2 doesn't fail case looking in\n    snapdirseverywhere mode; (bso#14350)\n  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;\n    (bso#14413).\n  + Malicous SMB1 server can crash libsmbclient; (bso#14366)\n  + winbindd: Fix a use-after-free when winbind clients exit;\n    (bso#14382)\n  + ldb: Bump version to 2.0.11, LMDB databases can grow without\n    bounds. (bso#14330)\n- Update to samba 4.11.9\n  + nmblib: Avoid undefined behaviour in handle_name_ptrs();\n    (bso#14242).\n  + 'samba-tool group' commands do not handle group names with\n    special chars correctly; (bso#14296).\n  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo\n    is not valid; (bso#14237).\n  + Missing check for DMAPI offline status in async DOS\n    attributes; (bso#14293).\n  + smbd: Ignore set NTACL requests which contain\n    S-1-5-88 NFS ACEs; (bso#14307).\n  + vfs_recycle: Prevent flooding the log if we're called on\n    non-existant paths; (bso#14316)\n  + smbd mistakenly updates a file's write-time on close;\n    (bso#14320).\n  + RPC handles cannot be differentiated in source3 RPC server;\n    (bso#14359).\n  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).\n  + nsswitch: Fix use-after-free causing segfault in\n    _pam_delete_cred; (bso#14327).\n  + Fix fruit:time machine max size on arm; (bso#13622)\n  + CTDB recovery corner cases can cause record resurrection\n    and node banning; (bso#14294).\n  + ctdb: Fix a memleak; (bso#14348).\n  + libsmb: Don't try to find posix stat info in SMBC_getatr().\n  + ctdb-tcp: Move free of inbound queue to TCP restart;\n    (bso#14295); (bsc#1162680).\n  + s3/librpc/crypto: Fix double free with unresolved\n    credential cache; (bso#14344); (bsc#1169095)\n  + s3:libads: Fix ads_get_upn(); (bso#14336).\n  + CTDB recovery corner cases can cause record resurrection\n    and node banning; (bso#14294)\n  + Starting ctdb node that was powered off hard before\n    results in recovery loop; (bso#14295); (bsc#1162680).\n  + ctdb-recoverd: Avoid dereferencing NULL rec-\u003enodemap;\n    (bso#14324)\n- Update to samba 4.11.8\n  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP\n    Server with ASQ; (bso#14331); (bsc#1169850);\n  + CVE-2020-10704: LDAP Denial of Service (stack overflow)\n    in Samba AD DC; (bso#14334); (bsc#1169851);\n- Update to samba 4.11.7\n  + s3: lib: nmblib. Clean up and harden nmb packet\n    processing; (bso#14239).\n  + s3: VFS: full_audit. Use system session_info if called\n    from a temporary share definition; (bso#14283)\n  + dsdb: Correctly handle memory in objectclass_attrs;\n    (bso#14258).\n  + ldb: version 2.0.9, Samba 4.11 and later give incorrect\n    results for SCOPE_ONE searches; (bso#14270)\n  + auth: Fix CIDs 1458418 and 1458420 Null pointer\n    dereferences; (bso#14247).\n  + smbd: Handle EINTR from open(2) properly; (bso#14285)\n  + winbind member (source3) fails local SAM auth with empty\n    domain name; (bso#14247)\n  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).\n  + lib:util: Log mkdir error on correct debug levels;\n    (bso#14253).\n  + wafsamba: Do not use 'rU' as the 'U' is deprecated in\n    Python 3.9; (bso#14266).\n  + ctdb-tcp: Make error handling for outbound connection\n    consistent; (bso#14274).\n- Update to samba 4.11.6\n  + pygpo: Use correct method flags; (bso#14209).\n  + vfs_ceph_snapshots: Fix root relative path handling;\n    (bso#14216); (bsc#1141320).\n  + Avoiding bad call flags with python 3.8, using METH_NOARGS\n    instead of zero; (bso#14209).\n  + source4/utils/oLschema2ldif: Include stdint.h before\n    cmocka.h; (bso#14218).\n  + docs-xml/winbindnssinfo: Clarify interaction with\n    idmap_ad etc; (bso#14122).\n  + smbd: Fix the build with clang; (bso#14251).\n  + upgradedns: Ensure lmdb lock files linked; (bso#14199).\n  + s3: VFS: glusterfs: Reset nlinks for symlink entries during\n    readdir; (bso#14182).\n  + smbc_stat() doesn't return the correct st_mode and also\n    the uid/gid is not filled (SMBv1) file; (bso#14101).\n  + librpc: Fix string length checking in\n    ndr_pull_charset_to_null(); (bso#14219).\n  + ctdb-scripts: Strip square brackets when gathering\n    connection info; (bso#14227).\n\n- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);\n\n- Installing: samba - samba-ad-dc.service does not exist and unit\n  not found; (bsc#1171437);\n\n- Fix samba_winbind package is installing python3-base without\n  python3 package; (bsc#1169521);\n\nChanges in ldb:\n- Update to version 2.0.12\n  + CVE-2020-10730: NULL de-reference in AD DC LDAP server\n    when ASQ and VLV combined; (bso#14364); (bsc#1173159).\n  + ldb_ldap: fix off-by-one increment in lldb_add_msg_attr;\n    (bso#14413).\n  + lib/ldb: add unit test for ldb_ldap internal code.\n- Update to version 2.0.11\n  + lib ldb: lmdb init var before calling mdb_reader_check.\n  + lib ldb: lmdb clear stale readers on write txn start;\n    (bso#14330).\n  + ldb tests: Confirm lmdb free list handling\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2020-09-01T10:31:13Z","modified":"2025-05-07T18:11:16.054386Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2024:11365-1","title":"ctdb-4.14.6+git.182.2205d5224e3-1.1 on GA media","description":"These are all security issues fixed in the ctdb-4.14.6+git.182.2205d5224e3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:12:49.07167Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2020:14437-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n-  CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets \n   containing dots could potentially have consumed excessive CPU (bsc#1173160).\t  \n","status":"published","published":"2020-07-23T12:39:13Z","modified":"2026-02-04T02:15:03.90939Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1913-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets \n  containing dots could potentially have consumed excessive CPU (bsc#1173160).\n- CVE-2020-14303: Fixed an endless loop when receiving at AD DC empty UDP packets (bsc#1173359).\n- CVE-2020-10730: Fixed a null de-reference in AD DC LDAP server when ASQ and VLV combined (bsc#1173159).\n- CVE-2020-10760: Fixed a use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV (bsc#1173161).\n- Added libnetapi-devel to baselibs conf, for wine usage (bsc#1172307).\n- Fixed an installing issue where samba - samba-ad-dc.service did not exist and unit was not found (bsc#1171437).\n","status":"published","published":"2020-07-14T15:41:02Z","modified":"2026-02-04T03:07:44.697147Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1948-1","title":"Security update for ldb, samba","description":"This update for ldb, samba fixes the following issues:\n\nChanges in samba:\n- Update to samba 4.11.11\n  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ\n    and VLV combined; (bso#14364); (bsc#1173159]\n  + CVE-2020-10745: invalid DNS or NBT queries containing dots use\n    several seconds of CPU each; (bso#14378); (bsc#1173160).\n  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP\n    server with paged_result or VLV; (bso#14402); (bsc#1173161)\n  + CVE-2020-14303: Endless loop from empty UDP packet sent to\n    AD DC nbt_server; (bso#14417); (bsc#1173359).\n- Update to samba 4.11.10\n  + Fix segfault when using SMBC_opendir_ctx() routine for share\n    folder that contains incorrect symbols in any file name;\n    (bso#14374).\n  + vfs_shadow_copy2 doesn't fail case looking in\n    snapdirseverywhere mode; (bso#14350)\n  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;\n    (bso#14413).\n  + Malicous SMB1 server can crash libsmbclient; (bso#14366)\n  + winbindd: Fix a use-after-free when winbind clients exit;\n    (bso#14382)\n  + ldb: Bump version to 2.0.11, LMDB databases can grow without\n    bounds. (bso#14330)\n- Update to samba 4.11.9\n  + nmblib: Avoid undefined behaviour in handle_name_ptrs();\n    (bso#14242).\n  + 'samba-tool group' commands do not handle group names with\n    special chars correctly; (bso#14296).\n  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo\n    is not valid; (bso#14237).\n  + Missing check for DMAPI offline status in async DOS\n    attributes; (bso#14293).\n  + smbd: Ignore set NTACL requests which contain\n    S-1-5-88 NFS ACEs; (bso#14307).\n  + vfs_recycle: Prevent flooding the log if we're called on\n    non-existant paths; (bso#14316)\n  + smbd mistakenly updates a file's write-time on close;\n    (bso#14320).\n  + RPC handles cannot be differentiated in source3 RPC server;\n    (bso#14359).\n  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).\n  + nsswitch: Fix use-after-free causing segfault in\n    _pam_delete_cred; (bso#14327).\n  + Fix fruit:time machine max size on arm; (bso#13622)\n  + CTDB recovery corner cases can cause record resurrection\n    and node banning; (bso#14294).\n  + ctdb: Fix a memleak; (bso#14348).\n  + libsmb: Don't try to find posix stat info in SMBC_getatr().\n  + ctdb-tcp: Move free of inbound queue to TCP restart;\n    (bso#14295); (bsc#1162680).\n  + s3/librpc/crypto: Fix double free with unresolved\n    credential cache; (bso#14344); (bsc#1169095)\n  + s3:libads: Fix ads_get_upn(); (bso#14336).\n  + CTDB recovery corner cases can cause record resurrection\n    and node banning; (bso#14294)\n  + Starting ctdb node that was powered off hard before\n    results in recovery loop; (bso#14295); (bsc#1162680).\n  + ctdb-recoverd: Avoid dereferencing NULL rec-\u003enodemap;\n    (bso#14324)\n- Update to samba 4.11.8\n  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP\n    Server with ASQ; (bso#14331); (bsc#1169850);\n  + CVE-2020-10704: LDAP Denial of Service (stack overflow)\n    in Samba AD DC; (bso#14334); (bsc#1169851);\n- Update to samba 4.11.7\n  + s3: lib: nmblib. Clean up and harden nmb packet\n    processing; (bso#14239).\n  + s3: VFS: full_audit. Use system session_info if called\n    from a temporary share definition; (bso#14283)\n  + dsdb: Correctly handle memory in objectclass_attrs;\n    (bso#14258).\n  + ldb: version 2.0.9, Samba 4.11 and later give incorrect\n    results for SCOPE_ONE searches; (bso#14270)\n  + auth: Fix CIDs 1458418 and 1458420 Null pointer\n    dereferences; (bso#14247).\n  + smbd: Handle EINTR from open(2) properly; (bso#14285)\n  + winbind member (source3) fails local SAM auth with empty\n    domain name; (bso#14247)\n  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).\n  + lib:util: Log mkdir error on correct debug levels;\n    (bso#14253).\n  + wafsamba: Do not use 'rU' as the 'U' is deprecated in\n    Python 3.9; (bso#14266).\n  + ctdb-tcp: Make error handling for outbound connection\n    consistent; (bso#14274).\n- Update to samba 4.11.6\n  + pygpo: Use correct method flags; (bso#14209).\n  + vfs_ceph_snapshots: Fix root relative path handling;\n    (bso#14216); (bsc#1141320).\n  + Avoiding bad call flags with python 3.8, using METH_NOARGS\n    instead of zero; (bso#14209).\n  + source4/utils/oLschema2ldif: Include stdint.h before\n    cmocka.h; (bso#14218).\n  + docs-xml/winbindnssinfo: Clarify interaction with\n    idmap_ad etc; (bso#14122).\n  + smbd: Fix the build with clang; (bso#14251).\n  + upgradedns: Ensure lmdb lock files linked; (bso#14199).\n  + s3: VFS: glusterfs: Reset nlinks for symlink entries during\n    readdir; (bso#14182).\n  + smbc_stat() doesn't return the correct st_mode and also\n    the uid/gid is not filled (SMBv1) file; (bso#14101).\n  + librpc: Fix string length checking in\n    ndr_pull_charset_to_null(); (bso#14219).\n  + ctdb-scripts: Strip square brackets when gathering\n    connection info; (bso#14227).\n\n- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);\n\n- Installing: samba - samba-ad-dc.service does not exist and unit\n  not found; (bsc#1171437);\n\n- Fix samba_winbind package is installing python3-base without\n  python3 package; (bsc#1169521);\n\nChanges in ldb:\n- Update to version 2.0.12\n  + CVE-2020-10730: NULL de-reference in AD DC LDAP server\n    when ASQ and VLV combined; (bso#14364); (bsc#1173159).\n  + ldb_ldap: fix off-by-one increment in lldb_add_msg_attr;\n    (bso#14413).\n  + lib/ldb: add unit test for ldb_ldap internal code.\n- Update to version 2.0.11\n  + lib ldb: lmdb init var before calling mdb_reader_check.\n  + lib ldb: lmdb clear stale readers on write txn start;\n    (bso#14330).\n  + ldb tests: Confirm lmdb free list handling\n","status":"published","published":"2020-07-17T12:48:18Z","modified":"2025-05-02T04:09:33.98566Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:2036-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets \n  containing dots could potentially have consumed excessive CPU (bsc#1173160).\t  \n- Fixed a packaging issue where samba_winbind package was installing python3-base without\n  python3 (bsc#1169521).\n- Fixed an issue with spnego fallback from kerberos to ntlmssp in smbd server (bsc#1169473).\n- Fixed ntlm authentications with 'winbind use default domain = yes' (bsc#1173429).\n- Added solution for upgrade problem with libsmbldap2 package (bsc#1172810).\n","status":"published","published":"2020-07-24T11:32:55Z","modified":"2026-02-04T02:31:26.058128Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:2065-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets containing dots could potentially have consumed excessive CPU (bsc#1173160). \t  \n","status":"published","published":"2020-07-29T09:09:34Z","modified":"2026-02-04T04:40:06.524383Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:2066-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets containing dots could potentially have consumed excessive CPU (bsc#1173160).\t  \n","status":"published","published":"2020-07-29T09:10:17Z","modified":"2026-02-04T04:20:59.942899Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:2312-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n-  CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets \n   containing dots could potentially have consumed excessive CPU (bsc#1173160).\t  \n","status":"published","published":"2020-08-25T12:50:32Z","modified":"2026-02-04T03:26:18.315251Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:2673-1","title":"Security update for samba","description":"This update for samba to version 4.10.17 fixes the following issues:\n\n- Fixed net command unable to negotiate SMB2; (bsc#1174120);\n\t  \n- Update to 4.10.17\n  - CVE-2020-10745: Invalid DNS or NBT queries containing dots use\n    several seconds of CPU each; (bso#14378); (bsc#1173160).\n  - CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ\n    and VLV combined; (bso#14364); (bsc#1173159).\n  - CVE-2020-10760: Fix use-after-free in AD DC Global Catalog LDAP\n    server with paged_result or VLV; (bso#14402); (1173161).\n  - CVE-2020-14303: Fix endless loop from empty UDP packet sent to\n    AD DC nbt_server; (bso#14417); (bsc#1173359).\n  - CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ\n    and VLV combined, ldb: Bump version to 1.5.8; (bso#14364);\n    (bsc#1173159).\n- Update to 4.10.16\n    s3: lib: Paranoia around use of snprintf copying into a fixed-size buffer\n    from a getenv() pointer.\n    lib:util: Fix smbclient -l basename dir; (bso#14345).\n    Malicous SMB1 server can crash libsmbclient; (bso#14366).\n    s3:libads: Fix ads_get_upn(); (bso#14336).\n    docs-xml: Fix usernames in pam_winbind manpages; (bso#14358).\n    Client tools are not able to read gencache anymore since 4.10; (bso#14370).\n- Update to 4.10.15\n   - CVE-2020-10700: Fix use-after-free in AD DC LDAP server when\n     ASQ and paged_results combined; (bso#14331); (bsc#1169850).\n   - CVE-2020-10704: Fix LDAP Denial of Service (stack overflow) in\n     Samba AD DC; (bso#20454); (bsc#1169851).\n- Update to 4.10.14\n    s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239).\n    s3: VFS: full_audit. Use system session_info if called from a\n    temporary share definition; (bso#14283).\n    nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#20193).\n    dsdb: Correctly handle memory in objectclass_attrs; (bso#14258).\n    auth: Fix CID 1458418 Null pointer dereferences (REVERSE_INULL),\n    auth: Fix CID 1458420 Null pointer dereferences (REVERSE_INULL); (bso#14247).\n    winbind member (source3) fails local SAM auth with empty domain\n    name; (bso#14247).\n    winbindd: Handling missing idmap in getgrgid(); (bso#14265).\n    lib:util: Log mkdir error on correct debug levels; (bso#14253).\n    wafsamba: Do not use 'rU' as the 'U' is deprecated in\n    Python 3.9; (bso#14266).\n    ctdb-tcp: Make error handling for outbound connection\n    consistent; (bso#14274).\n    Starting ctdb node that was powered off hard before results in\n     recovery loop; (bso#14295).\n- Update to 4.10.13\n    s3: libsmb: Ensure SMB1 cli_qpathinfo2() doesn't return an\n    inode number; (bso#14161).\n    s3: utils: smbtree. Ensure we don't call cli_RNetShareEnum()\n    on an SMB1 connection; (bso#14174).\n    s3: libsmb: Ensure return from net_share_enum_rpc() sets\n    cli-\u003eraw_status on error; (bso#14176).\n    s3: smbd: SMB2 - Ensure we use the correct session_id if\n    encrypting an interim response; (bso#14189).\n    s3: smbd: Only set xconn-\u003esmb1.negprot.done = true after\n    supported_protocols[protocol].proto_reply_fn() succeeds; (bso#14205).\n    pygpo: Use correct method flags; (bso#14209).\n    s3: Remove now unneeded call to cmdline_messaging_context(); (bso#13925).\n    Incomplete conversion of former parametric options; (bso#14069).\n    Fix sync dosmode fallback in async dosmode codepath; (bso#14070).\n    vfs_fruit returns capped resource fork length; (bso#14171).\n    s3:printing: Fix %J substition; (bso#13745).\n    libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116).\n    Avoiding bad call flags with python 3.8, using METH_NOARGS\n    instead of zero; (bso#14209).\n    docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122).\n    ctdb-tcp: Close inflight connecting TCP sockets after fork; (bso#14175).\n    s4:dirsync: Fix interaction of dirsync and extended_dn controls; (bso#14153).\n    upgradedns: Ensure lmdb lock files linked; (bso#14199).\n    s3: VFS: glusterfs: Reset nlinks for symlink entries during\n    readdir; (bso#14182).\n    wscript: Remove checks for shm_open and shmget; (bso#14140).\n    libsmbclient: smbc_stat() doesn't return the correct st_mode\n    and also the uid/gid is not filled (SMBv1); (bso#14101).\n    replace: Only link libnsl and libsocket if required; (bso#14168).\n    librpc: Fix string length checking in\n    ndr_pull_charset_to_null(); (bso#14219).\n    heimdal-build: Avoid hard-coded /usr/include/heimdal in\n    asn1_compile-generated code; (bso#13856).\n    ctdb-tcp: Drop tracking of file descriptor for incoming\n    connections; (bso#14175).\n    ctdb-scripts: Strip square brackets when gathering connection\n     info; (bso#14227).\n- Update to 4.10.12\n   - CVE-2019-14902: Replication of ACLs down subtree on AD Directory\n     not automatic; (bso#12497); (bsc#1160850);\n   - CVE-2019-14907: lib/util: Do not print the failed to convert\n     string into the logs; (bso#14208); (bsc#1160888).\n   - CVE-2019-19344: kcc dns scavenging: Fix use after free in\n     dns_tombstone_records_zone; (bso#14050); (bsc#1160852).\n- Update to 4.10.11\n   - CVE-2019-14861: Fix DNSServer RPC server crash; (bso#14138);\n     (bsc#1158108).\n   - CVE-2019-14870: DelegationNotAllowed not being enforced; (bso#14187);\n     (bsc#1158109).\n- Update to 4.10.10\n   - CVE-2019-10218 - s3: libsmb: Protect SMB1 and SMB2 client code\n     from evil server returned names; (bso#14071); (bsc#1144902).\n   - CVE-2019-14833: Use utf8 characters in the unacceptable\n     password; (bso#12438); (bsc#1154289).\n   - CVE-2019-14847 dsdb: Correct behaviour of ranged_results when\n     combined with dirsync; (bso#14040); (bsc#1154598).\n   - CVE-2019-14833 dsdb: Send full password to check password\n     script; (bso#12438); (bsc#1154289).\n- Update to 4.10.9\n    Different Device Id for GlusterFS FUSE mount is causing data\n    loss in CTDB cluster; (bso#13972).\n    winbind: Provide passwd struct for group sid with ID_TYPE_BOTH\n    mapping (again); (bso#14141).\n    smbc_readdirplus() is incompatible with smbc_telldir() and\n    smbc_lseekdir(); (bso#14094).\n    s3: smbclient: Stop an SMB2-connection from blundering into\n    SMB1-specific calls; (bso#14152).\n    s4/scripting: MORE py3 compatible print functions.\n    ldb: Release ldb 1.5.6; (bso#13978).\n    undoduididx: Add 'or later' to warning about using tools from\n    Samba 4.8; (bso#13978).\n    ldb_tdb fails to check error return when parsing pack formats; (bso#13959).\n    ctdb: Fix compilation on systems with glibc robust mutexes; (bso#14038).\n    GPO security filtering based on the groups in Kerberos PAC (but\n    primary group is missing); (bso#11362).\n    Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106).\n    s3-winbindd: fix forest trusts with additional trust attributes; (bso#14130).\n    vfs_glusterfs: Use pthreadpool for scheduling aio operations; (bso#14098).\n    ldb: baseinfo pack format check on init; (bso#13977).\n    ldb: ldbdump key and pack format version comments; (bso#13978).\n    Overlinking libreplace against librt and pthread against every\n    binary or library causes issues; (bso#14140).\n    ctdb-vacuum: Process all records not deleted on a remote node; (bso#14147).\n    classicupgrade: Fix uncaught exception; (bso#14136).\n    fault.c: Improve fault_report message text pointing to our wiki; (bso#14139).\n    s3:client:Use DEVICE_URI, instead of argv[0],for Device URI; (bso#14128).\n    We should send SMB2_NETNAME_NEGOTIATE_CONTEXT_ID negotiation\n    context; (bso#14055).\n    'pam_winbind' with 'krb5_auth' or 'wbinfo -K' doesn't work for\n    users of trusted domains/forests principals' logic; (bso#14124).\n    vfs_glusterfs: Enable profiling for file system operations; (bso#14093).\n    vfs_gpfs: Implement special case for denying owner access to\n    ACL; (bso#14032).\n    Joining Active Directory should not use SAMR to set the\n    password; (bso#13884).\n    s3:libsmb: Do not check the SPNEGO neg token for KRB5; (bso#14106).\n    Overlinking libreplace against librt and pthread against every\n    binary or library causes issues; (bso#14140).\n    'kpasswd' fails when built with MIT Kerberos; (bso#14155).\n    CTDB replies can be lost before nodes are bidirectionally\n    connected; (bso#14084).\n    'ctdb stop' command completes before databases are frozen; (bso#14087).\n    ctdb-tools: Stop deleted nodes from influencing ctdb nodestatus\n    exit code; (bso#14129).\n    s3:ldap: Fix join with don't exists machine account; (bso#14007).\n- Update to 4.10.8\n   - CVE-2019-10197: Permissions check deny can allow user to escape\n     from the share; (bso#14035); (bsc#1141267).\n   - CVE-2019-10197: Permissions check deny can allow user to escape\n     from the share; (bso#14035); (bsc#1141267).\n- Update to 4.10.7\n    Unable to create or rename file/directory inside shares\n    configured with vfs_glusterfs_fuse module; (bso#14010).\n    build: Allow build when '--disable-gnutls' is set; (bso#13844).\n    samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973).\n    Fix 'Error 32 determining PSOs in system' message on old DB\n    with FL upgrade; (bso#14008).\n    s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021).\n    join: Use a specific attribute order for the DsAddEntry\n    nTDSDSA object; (bso#14046).\n    vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015).\n    lookup_name: Allow own domain lookup when flags == 0; (bso#14091).\n    s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932).\n    DEBUGC and DEBUGADDC doesn't print into a class specific log\n    file; (bso#13915).\n    Request to keep deprecated option 'server schannel',\n    VMWare Quickprep requires 'auto'; (bso#13949).\n    dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967).\n    dnsProperty fails to decode values from older Windows versions; (bso#13969).\n    samba-tool: Use only one LDAP modify for dns partition fsmo\n    role transfer; (bso#13973).\n    third_party: Update waf to version 2.0.17; (bso#13960).\n    netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051).\n    ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).\n- Update to 4.10.6\n    s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956).\n    smbd does not correctly parse arguments passed to dfree and\n    quota scripts; (bso#13964).\n    samba-tool dns: use bytes for inet_ntop; (bso#13965).\n    samba-tool domain provision: Fix --interactive module in\n    python3; (bso#13828).\n    ldb_kv: Skip @ records early in a search full scan; (bso#13893).\n    docs: Improve documentation of 'lanman auth' and 'ntlm auth'\n    connection; (bso#13981).\n    python/ntacls: Use correct 'state directory' smb.conf option\n    instead of 'state dir'; (bso#14002).\n    registry: Add a missing include; (bso#13840).\n    Fix SMB guest authentication; (bso#13944).\n    AppleDouble conversion breaks Resourceforks; (bso#13958).\n    vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968).\n    s3:mdssvc: Fix flex compilation error; (bso#13987).\n    s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly:; (bso#13872).\n    dsdb:samdb: schemainfo update with relax control; (bso#13799).\n    s3:util: Move static file_pload() function to lib/util; (bso#13964).\n    smbd: Fix a panic; (bso#13957).\n    ldap server: Generate correct referral schemes; (bso#12478).\n    s4 dsdb/repl_meta_data: fix use after free in\n    dsdb_audit_add_ldb_value; (bso#13941).\n    s4 dsdb: Fix use after free in\n    samldb_rename_search_base_callback; (bso#13942).\n    dsdb/repl: we need to replicate the whole schema before we can\n    apply it; (bso#12204).\n    ldb: Release ldb 1.5.5; (bso#12478).\n    Schema replication fails if link crosses chunk boundary\n    backwards; (bso#13713).\n    'samba-tool domain schemaupgrade' uses relax control and skips\n    the schemaInfo update provision; (bso#13799).\n    dsdb_audit: avoid printing '... remote host [Unknown]\n    SID [(NULL SID)] ...'; (bso#13916).\n    python/ntacls: We only need security.SEC_STD_READ_CONTROL in\n    order to get the ACL; (bso#13917).\n    s3:loadparm: Ensure to truncate FS Volume Label at multibyte\n    boundary; (bso#13947).\n    Using Kerberos credentials to print using spoolss doesn't work; (bso#13939).\n    wafsamba: Use native waf timer; (bso#13998).\n    ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).\n\nThis update for ldb to version 1.5.8 fixes the following issues:\n\n- Update to 1.5.8\n   - CVE-2020-10730: Fixed a null de-reference in AD DC LDAP server when ASQ and VLV combined (bsc#1173159).\n- Update to 1.5.7\n   - CVE-2020-10700: Fixed a use-after-free in AD DC LDAP server when ASQ and paged_results combined (bsc#1169850).\n- Update to 1.5.6\n   - Fix segfault parsing new pack formats or invalid packed data \n   - Check for new pack formats during startup \n   - Making ldbdump print out pack format info and keys so we have\n    low level visibility for testing in python \n- Update to 1.5.5\n   LDAP_REFERRAL_SCHEME_OPAQUE was added \n   Skip @ records early in a search full scan \n\n\n","status":"published","published":"2020-09-17T13:33:18Z","modified":"2026-02-04T04:37:51.694123Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"USN-4409-1","title":"samba vulnerabilities","description":"Andrew Bartlett discovered that Samba incorrectly handled certain LDAP queries.\nA remote attacker could use this issue to cause Samba to crash, resulting\nin a denial of service, or possibly execute arbitrary code. This issue only\naffected Ubuntu 18.04 LTS, Ubuntu 19.10 and Ubuntu 20.04 LTS. (CVE-2020-10730)\n\nDouglas Bagnall discovered that Samba incorrectly handled certain queries.\nA remote attacker could possibly use this issue to cause a denial of service.\n(CVE-2020-10745)\n\nAndrei Popa discovered that Samba incorrectly handled certain LDAP queries.\nA remote attacker could use this issue to cause Samba to crash, resulting\nin a denial of service, or possibly execute arbitrary code. This issue only\naffected Ubuntu 18.04 LTS, Ubuntu 19.10 and Ubuntu 20.04 LTS.\n(CVE-2020-10760)\n","status":"published","published":"2020-07-02T12:42:33Z","modified":"2026-04-22T10:05:34.511582Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}