Search for packages
| purl | pkg:deb/debian/ldb@2:1.5.1%2Breally1.4.6-3%2Bdeb10u1 |
| Next non-vulnerable version | 2:2.2.3-2~deb11u2 |
| Latest non-vulnerable version | 2:2.2.3-2~deb11u2 |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1b1d-tj5f-aaaj
Aliases: CVE-2021-20277 |
A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of the LDAP server process handling the request. The highest threat from this vulnerability is to system availability. |
Affected by 0 other vulnerabilities. |
|
VCID-9m3f-r1wf-aaas
Aliases: CVE-2020-27840 |
A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory, resulting in a crash. The highest threat from this vulnerability is to system availability. |
Affected by 0 other vulnerabilities. |
|
VCID-sxbn-732u-aaaa
Aliases: CVE-2020-10730 |
A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability. |
Affected by 0 other vulnerabilities. |
|
VCID-xb1w-pq52-aaaj
Aliases: CVE-2021-3670 |
MaxQueryDuration not honoured in Samba AD DC LDAP |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-1b1d-tj5f-aaaj | A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of the LDAP server process handling the request. The highest threat from this vulnerability is to system availability. |
CVE-2021-20277
|
| VCID-9m3f-r1wf-aaas | A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory, resulting in a crash. The highest threat from this vulnerability is to system availability. |
CVE-2020-27840
|
| VCID-sxbn-732u-aaaa | A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability. |
CVE-2020-10730
|
| VCID-ymj2-f675-aaaj | A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.10. An authenticated user, having read permissions on the LDAP server, could use this flaw to cause denial of service. |
CVE-2019-3824
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-22T13:32:18.907698+00:00 | Debian Importer | Affected by | VCID-xb1w-pq52-aaaj | https://security-tracker.debian.org/tracker/data/json | 36.1.3 |
| 2025-06-21T15:58:58.897752+00:00 | Debian Oval Importer | Fixing | VCID-ymj2-f675-aaaj | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T14:44:43.766959+00:00 | Debian Oval Importer | Fixing | VCID-9m3f-r1wf-aaas | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T14:14:29.181039+00:00 | Debian Oval Importer | Fixing | VCID-1b1d-tj5f-aaaj | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T13:35:18.751178+00:00 | Debian Oval Importer | Fixing | VCID-sxbn-732u-aaaa | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T05:34:07.046216+00:00 | Debian Oval Importer | Affected by | VCID-sxbn-732u-aaaa | None | 36.1.3 |
| 2025-06-21T04:11:23.481968+00:00 | Debian Oval Importer | Affected by | VCID-xb1w-pq52-aaaj | None | 36.1.3 |
| 2025-06-21T03:49:18.189859+00:00 | Debian Oval Importer | Affected by | VCID-1b1d-tj5f-aaaj | None | 36.1.3 |
| 2025-06-21T03:06:49.746148+00:00 | Debian Oval Importer | Affected by | VCID-9m3f-r1wf-aaas | None | 36.1.3 |
| 2025-06-20T23:25:55.003641+00:00 | Debian Oval Importer | Fixing | VCID-ymj2-f675-aaaj | None | 36.1.3 |
| 2025-06-20T22:53:59.223010+00:00 | Debian Oval Importer | Fixing | VCID-1b1d-tj5f-aaaj | None | 36.1.3 |
| 2025-06-20T21:27:49.072827+00:00 | Debian Oval Importer | Fixing | VCID-9m3f-r1wf-aaas | None | 36.1.3 |
| 2025-06-20T20:54:31.728184+00:00 | Debian Oval Importer | Fixing | VCID-sxbn-732u-aaaa | None | 36.1.3 |
| 2025-06-20T20:41:20.476232+00:00 | Debian Importer | Affected by | VCID-xb1w-pq52-aaaj | None | 36.1.3 |
| 2025-06-08T13:17:01.307000+00:00 | Debian Oval Importer | Affected by | VCID-1b1d-tj5f-aaaj | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T12:44:27.844313+00:00 | Debian Oval Importer | Affected by | VCID-9m3f-r1wf-aaas | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T11:59:01.497898+00:00 | Debian Oval Importer | Affected by | VCID-sxbn-732u-aaaa | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T08:52:17.486643+00:00 | Debian Oval Importer | Fixing | VCID-ymj2-f675-aaaj | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T07:38:02.487429+00:00 | Debian Oval Importer | Fixing | VCID-9m3f-r1wf-aaas | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T07:07:51.312177+00:00 | Debian Oval Importer | Fixing | VCID-1b1d-tj5f-aaaj | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T06:29:25.315475+00:00 | Debian Oval Importer | Fixing | VCID-sxbn-732u-aaaa | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-07T23:12:05.819730+00:00 | Debian Oval Importer | Affected by | VCID-sxbn-732u-aaaa | None | 36.1.0 |
| 2025-06-07T21:47:13.647162+00:00 | Debian Oval Importer | Affected by | VCID-xb1w-pq52-aaaj | None | 36.1.0 |
| 2025-06-07T21:24:30.686934+00:00 | Debian Oval Importer | Affected by | VCID-1b1d-tj5f-aaaj | None | 36.1.0 |
| 2025-06-07T20:39:35.838619+00:00 | Debian Oval Importer | Affected by | VCID-9m3f-r1wf-aaas | None | 36.1.0 |
| 2025-06-07T16:48:48.718949+00:00 | Debian Oval Importer | Fixing | VCID-ymj2-f675-aaaj | None | 36.1.0 |
| 2025-06-07T16:17:19.109954+00:00 | Debian Oval Importer | Fixing | VCID-1b1d-tj5f-aaaj | None | 36.1.0 |
| 2025-06-07T14:50:28.907579+00:00 | Debian Oval Importer | Fixing | VCID-9m3f-r1wf-aaas | None | 36.1.0 |
| 2025-06-07T14:23:14.252723+00:00 | Debian Oval Importer | Fixing | VCID-sxbn-732u-aaaa | None | 36.1.0 |
| 2025-06-05T14:28:27.541460+00:00 | Debian Importer | Affected by | VCID-xb1w-pq52-aaaj | None | 36.1.0 |
| 2025-04-12T21:16:38.062748+00:00 | Debian Oval Importer | Fixing | VCID-ymj2-f675-aaaj | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T19:15:28.322262+00:00 | Debian Oval Importer | Affected by | VCID-xb1w-pq52-aaaj | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T19:04:59.931638+00:00 | Debian Oval Importer | Affected by | VCID-1b1d-tj5f-aaaj | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T18:31:20.170501+00:00 | Debian Oval Importer | Affected by | VCID-9m3f-r1wf-aaas | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T17:44:15.991044+00:00 | Debian Oval Importer | Affected by | VCID-sxbn-732u-aaaa | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-08T07:23:50.293978+00:00 | Debian Oval Importer | Fixing | VCID-ymj2-f675-aaaj | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T06:10:35.123373+00:00 | Debian Oval Importer | Fixing | VCID-9m3f-r1wf-aaas | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T05:40:27.263268+00:00 | Debian Oval Importer | Fixing | VCID-1b1d-tj5f-aaaj | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T05:01:43.187804+00:00 | Debian Oval Importer | Fixing | VCID-sxbn-732u-aaaa | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-07T21:44:07.854757+00:00 | Debian Oval Importer | Affected by | VCID-sxbn-732u-aaaa | None | 36.0.0 |
| 2025-04-07T20:17:06.284482+00:00 | Debian Oval Importer | Affected by | VCID-xb1w-pq52-aaaj | None | 36.0.0 |
| 2025-04-07T19:53:30.833196+00:00 | Debian Oval Importer | Affected by | VCID-1b1d-tj5f-aaaj | None | 36.0.0 |
| 2025-04-07T19:10:04.165015+00:00 | Debian Oval Importer | Affected by | VCID-9m3f-r1wf-aaas | None | 36.0.0 |
| 2025-04-07T15:21:31.723450+00:00 | Debian Oval Importer | Fixing | VCID-ymj2-f675-aaaj | None | 36.0.0 |
| 2025-04-07T14:48:51.922141+00:00 | Debian Oval Importer | Fixing | VCID-1b1d-tj5f-aaaj | None | 36.0.0 |
| 2025-04-07T13:22:28.795147+00:00 | Debian Oval Importer | Fixing | VCID-9m3f-r1wf-aaas | None | 36.0.0 |
| 2025-04-07T12:55:48.311606+00:00 | Debian Oval Importer | Fixing | VCID-sxbn-732u-aaaa | None | 36.0.0 |
| 2025-04-06T06:55:30.938764+00:00 | Debian Importer | Affected by | VCID-xb1w-pq52-aaaj | https://security-tracker.debian.org/tracker/data/json | 36.0.0 |
| 2025-04-03T23:27:09.010265+00:00 | Debian Importer | Affected by | VCID-xb1w-pq52-aaaj | None | 36.0.0 |
| 2025-02-20T02:46:06.047878+00:00 | Debian Importer | Affected by | VCID-xb1w-pq52-aaaj | https://security-tracker.debian.org/tracker/data/json | 35.1.0 |
| 2025-02-20T02:45:47.644723+00:00 | Debian Importer | Affected by | VCID-xb1w-pq52-aaaj | None | 35.1.0 |
| 2024-11-22T20:36:15.749252+00:00 | Debian Importer | Affected by | VCID-xb1w-pq52-aaaj | https://security-tracker.debian.org/tracker/data/json | 35.0.0 |
| 2024-11-22T20:35:56.673031+00:00 | Debian Importer | Affected by | VCID-xb1w-pq52-aaaj | None | 35.0.0 |
| 2024-10-09T19:15:47.448870+00:00 | Debian Importer | Affected by | VCID-xb1w-pq52-aaaj | https://security-tracker.debian.org/tracker/data/json | 34.0.2 |
| 2024-10-09T19:15:20.502417+00:00 | Debian Importer | Affected by | VCID-xb1w-pq52-aaaj | None | 34.0.2 |
| 2024-09-19T03:34:29.126773+00:00 | Debian Importer | Affected by | VCID-xb1w-pq52-aaaj | https://security-tracker.debian.org/tracker/data/json | 34.0.1 |
| 2024-09-19T03:34:13.323639+00:00 | Debian Importer | Affected by | VCID-xb1w-pq52-aaaj | None | 34.0.1 |
| 2024-04-25T02:03:14.280998+00:00 | Debian Importer | Affected by | VCID-xb1w-pq52-aaaj | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc4 |
| 2024-04-25T02:03:05.650194+00:00 | Debian Importer | Affected by | VCID-xb1w-pq52-aaaj | None | 34.0.0rc4 |
| 2024-01-11T03:07:15.478092+00:00 | Debian Importer | Affected by | VCID-xb1w-pq52-aaaj | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc2 |
| 2024-01-11T03:07:06.292932+00:00 | Debian Importer | Affected by | VCID-xb1w-pq52-aaaj | None | 34.0.0rc2 |
| 2024-01-04T15:13:17.620789+00:00 | Debian Importer | Affected by | VCID-xb1w-pq52-aaaj | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc1 |
| 2024-01-04T15:12:59.751417+00:00 | Debian Importer | Affected by | VCID-xb1w-pq52-aaaj | None | 34.0.0rc1 |