Ubuntu 20.04 LTS USN-4888-1 Critical ldb Denial Of Service

ubuntu

March 24, 2021

Several security issues were fixed in ldb.

Summary

Several security issues were fixed in ldb.

Software Description:

- ldb: None

Details:

Douglas Bagnall discovered that ldb, when used with Samba, incorrectly

handled certain LDAP attributes. A remote attacker could possibly use this

issue to cause the LDAP server to crash, resulting in a denial of service.

(CVE-2021-20277)

Douglas Bagnall discovered that ldb, when used with Samba, incorrectly

handled certain DN strings. A remote attacker could use this issue to

cause the LDAP server to crash, resulting in a denial of service, or

possibly execute arbitrary code. (CVE-2020-27840)

Topics Covered

security advisory denial of service critical remote code execution Ubuntu update instructions ldb

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.10:
  libldb2                         2:2.1.4-2ubuntu0.1

Ubuntu 20.04 LTS:
  libldb2                         2:2.0.10-0ubuntu0.20.04.3

Ubuntu 18.04 LTS:
  libldb1                         2:1.2.3-1ubuntu0.2

Ubuntu 16.04 LTS:
  libldb1                         2:1.1.24-1ubuntu3.2

After a standard system update you need to restart applications using ldb,
such as Samba, to make all the necessary changes.