Red Hat Samba CVE-2021-20277 Out-of-bounds Read Vulnerability Fix

Key Information Vulnerability ID: Bug 1941402 (CVE-2021-20277) Vulnerability Description: samba: Out of bounds read in AD DC LDAP server Discovery Date: 2021-03-22 Vulnerability Status: CLOSED ERRATA Affected Component: samba Fixed Versions: samba 4.14.1, samba 4.13.6, samba 4.12.13 Affected Products and Versions: - Red Hat Enterprise Linux 7 - Red Hat Enterprise Linux 8 - Red Hat Enterprise Linux 8.1 Extended Update Support - Red Hat Enterprise Linux 8.2 Extended Update Support - Red Hat Enterprise Linux 7.7 Extended Update Support - Red Hat Enterprise Linux 7.6 Advanced Update Support - Red Hat Enterprise Linux 7.6 Update Services for SAP Solutions - Red Hat Enterprise Linux 7.6 Telco Extended Update Support Fix Details: - Red Hat Security Advisory (RHSA) Links: - https://access.redhat.com/errata/RHSA-2021:1072 - https://access.redhat.com/errata/RHSA-2021:1197 - https://access.redhat.com/errata/RHSA-2021:1214 - https://access.redhat.com/errata/RHSA-2021:1213 - https://access.redhat.com/errata/RHSA-2021:2331 - https://access.redhat.com/errata/RHSA-2021:2786 Vulnerability Details: - The issue arises from strings in LDAP attributes containing multiple consecutive leading spaces, which may cause an out-of-bounds memory access in memmove() within ldb_handler_fold(). - ldb_handler_fold() is used for case-insensitive string handling. - Search expressions are normalized before matching potential objects, which may lead to the LDAP server process crashing when handling the request.

Goal Reached Thanks to every supporter — we hit 100%!

Red Hat Samba CVE-2021-20277 Out-of-bounds Read Vulnerability Fix