Stay Secure with the Latest Linux Advisories

security advisorydenial of servicecritical

Ubuntu 15.10: 2856-1 Critical: ldb Denial of Service Threat

Several security issues were fixed in ldb.. =========================================================================Ubuntu Security Notice USN-2856-1 January 05, 2016 ldb vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 15.10 - Ubuntu 15.04 - Ubuntu 14.04 LTS - Ubuntu 12.04 LTS Summary: Several security issues were fixed in ldb. Software Description: - ldb: LDAP-like embedded database Details: Thilo Uttendorfer discovered that the ldb incorrectly handled certain zero values. A remote attacker could use this issue to cause applications using ldb, such as Samba, to stop responding, resulting in a denial of service. (CVE-2015-3223) Douglas Bagnall discovered that ldb incorrectly handled certain string lengths. A remote attacker could use this issue to possibly access sensitive information from memory of applications using ldb, such as Samba. (CVE-2015-5330) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 15.10: libldb1 2:1.1.20-2ubuntu0.1 Ubuntu 15.04: libldb1 1:1.1.18-1ubuntu0.1 Ubuntu 14.04 LTS: libldb1 1:1.1.16-1ubuntu0.1 Ubuntu 12.04 LTS: libldb1 1:1.1.4-1ubuntu0.1 After a standard system update you need to restart applications using ldb, such as Samba, to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-2856-1 CVE-2015-3223, CVE-2015-5330 Package Information: https://launchpad.net/ubuntu/+source/ldb/2:1.1.20-2ubuntu0.1 https://launchpad.net/ubuntu/+source/ldb/1:1.1.18-1ubuntu0.1 https://launchpad.net/ubuntu/+source/ldb/1:1.1.16-1ubuntu0.1 https://launchpad.net/ubuntu/+source/ldb/1:1.1.4-1ubuntu0.1 . Critical security bulletin highlighting ldb weaknesses across diverse Ubuntu versions andtheir potential repercussions.. ldb Issues, Ubuntu Security, Denial of Service, Info Access, Security Patch. . Severity: Critical. LinuxSecurity.com Team

Jan 05, 2016 •Critical Ubuntu