[USN-4409-1] Samba vulnerabilities

---------- Forwarded message ---------

From: Leonidas S. Barbosa <leo.barbosa@canonical.com>

Date: Jul 2, 2020 11:14PM

Andrew Bartlett discovered that Samba incorrectly handled certain LDAP queries.

A remote attacker could use this issue to cause Samba to crash, resulting

in a denial of service, or possibly execute arbitrary code. This issue only

affected Ubuntu 18.04 LTS, Ubuntu 19.10 and Ubuntu 20.04 LTS. (CVE-2020-10730)

Douglas Bagnall discovered that Samba incorrectly handled certain queries.

A remote attacker could possibly use this issue to cause a denial of service.

(CVE-2020-10745)

Andrei Popa discovered that Samba incorrectly handled certain LDAP queries.

A remote attacker could use this issue to cause Samba to crash, resulting

in a denial of service, or possibly execute arbitrary code. This issue only

affected Ubuntu 18.04 LTS, Ubuntu 19.10 and Ubuntu 20.04 LTS.

(CVE-2020-10760)

References:

  https://usn.ubuntu.com/4409-1

  CVE-2020-10730, CVE-2020-10745, CVE-2020-10760