{"id":"MGASA-2020-0205","summary":"Updated samba packages fix security vulnerabilities","details":"Updated samba packages fix security vulnerabilities:\n\nA client combining the 'ASQ' and 'Paged Results' LDAP controls can cause\na use-after-free in Samba's AD DC LDAP server (CVE-2020-10700).\n\nA deeply nested filter in an un-authenticated LDAP search can exhaust the\nLDAP server's stack memory causing a SIGSEGV (CVE-2020-10704).\n\nThe samba package has been updated to version 4.10.15, fixing these issues\nand other bugs. The ldb package has been updated to version 1.5.7. The sssd\npackage has been rebuilt for the updated ldb.\n","modified":"2026-04-16T00:11:56.706808515Z","published":"2020-05-08T10:57:54Z","upstream":["CVE-2020-10700","CVE-2020-10704"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2020-0205.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=26566"},{"type":"WEB","url":"https://www.samba.org/samba/history/samba-4.10.13.html"},{"type":"WEB","url":"https://www.samba.org/samba/history/samba-4.10.14.html"},{"type":"WEB","url":"https://www.samba.org/samba/history/samba-4.10.15.html"},{"type":"ADVISORY","url":"https://www.samba.org/samba/security/CVE-2020-10700.html"},{"type":"ADVISORY","url":"https://www.samba.org/samba/security/CVE-2020-10704.html"}],"affected":[{"package":{"name":"samba","ecosystem":"Mageia:7","purl":"pkg:rpm/mageia/samba?arch=source&distro=mageia-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.15-1.mga7"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2020-0205.json"}},{"package":{"name":"sssd","ecosystem":"Mageia:7","purl":"pkg:rpm/mageia/sssd?arch=source&distro=mageia-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-3.2.mga7"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2020-0205.json"}},{"package":{"name":"ldb","ecosystem":"Mageia:7","purl":"pkg:rpm/mageia/ldb?arch=source&distro=mageia-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.7-1.mga7"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2020-0205.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}