Samba Releases Security Update

Threat ID:: CC-3805
Threat Severity:: Information only
Published:: 29 March 2021 11:42 AM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Affected platforms

The following platforms are known to be affected:

Samba

Threat details

Introduction

The Samba Team has released security updates to address vulnerabilities in multiple versions of Samba. An attacker could exploit some of these vulnerabilities to take control of an affected system.

Remediation advice

Affected organisations are encouraged to review Samba's CVE-2020-27840 and CVE-2021-20277 security release pages and apply the relevant updates and workarounds.

Remediation steps

Type	Step
Patch	Samba 4.14.0 https://www.samba.org/samba/ftp/patches/security/samba-4.14.0-security-2021-03-24.patch
Patch	Samba 4.13.5 https://www.samba.org/samba/ftp/patches/security/samba-4.13.5-security-2021-03-24.patch
Patch	Samba 4.12.12 https://www.samba.org/samba/ftp/patches/security/samba-4.12.12-security-2021-03-24.patch

CVE Vulnerabilities

Status Reserved

CVE-2021-202777 Out of bounds read in AD DC LDAP server

User-controlled LDAP filter strings against the AD DC LDAP server may crash the LDAP server.

Workaround: To disable the LDAP server set 'server services = -ldap' in the smb.conf and restart Samba. This will substantially reduce the utility of the AD DC.

Status Reserved

CVE-2020-27840 Heap corruption via crafted DN strings

An anonymous attacker can crash the Samba AD DC LDAP server by sending easily crafted DNs as part of a bind request. More serious heap corruption is likely also possible.

Workaround: None

Last edited: 29 March 2021 12:04 pm