Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5.3
CVSSv3

CVE-2015-3223

Published: 29/12/2015 Updated: 07/11/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Subscribe to Samba

Vulnerability Summary

The ldb_wildcard_compare function in ldb_match.c in ldb prior to 1.1.24, as used in the AD LDAP server in Samba 4.x prior to 4.1.22, 4.2.x prior to 4.2.7, and 4.3.x prior to 4.3.3, mishandles certain zero values, which allows remote malicious users to cause a denial of service (infinite loop) via crafted packets.

Vulnerable Product Search on Vulmon Subscribe to Product

samba samba 4.2.6

samba samba 4.1.9

samba samba 4.0.14

samba samba 4.0.24

samba samba 4.1.16

samba samba 4.1.12

samba samba 4.0.2

samba samba 4.1.14

samba samba 4.0.22

samba samba 4.2.1

samba samba 4.0.11

samba samba 4.1.7

samba samba 4.0.3

samba samba 4.3.0

samba samba 4.0.21

samba samba 4.0.16

samba samba 4.1.8

samba samba 4.2.4

samba samba 4.0.13

samba samba 4.2.0

samba samba 4.1.5

samba samba 4.1.6

samba samba 4.0.17

samba samba 4.0.6

samba samba 4.0.19

samba samba 4.1.11

samba samba 4.0.10

samba samba 4.1.4

samba samba 4.1.20

samba samba 4.0.7

samba samba 4.1.0

samba samba 4.1.19

samba samba 4.0.1

samba samba 4.0.8

samba samba 4.2.2

samba samba 4.1.10

samba samba 4.3.1

samba samba 4.1.15

samba samba 4.1.17

samba samba 4.3.2

samba samba 4.0.0

samba samba 4.2.3

samba samba 4.0.5

samba samba 4.1.2

samba samba 4.1.3

samba samba 4.0.18

samba samba 4.1.21

samba samba 4.1.1

samba samba 4.0.23

samba samba 4.1.13

samba samba 4.2.5

samba samba 4.0.12

samba samba 4.0.4

samba samba 4.0.15

samba samba 4.0.20

samba samba 4.1.18

samba samba 4.0.9

Vendor Advisories

Red Hat: Moderate: libldb security update
Synopsis Moderate: libldb security update Type/Severity Security Advisory: Moderate Topic Updated libldb packages that fix two security issues are now available forRed Hat Enterprise Linux 6 and 7Red Hat Product Security has rated this update as having Moderate securityimpact Common Vulnerability Scoring ...
Red Hat: Moderate: libldb security update
Synopsis Moderate: libldb security update Type/Severity Security Advisory: Moderate Topic Updated libldb packages that fix two security issues are now available forRed Hat Gluster Storage 31Red Hat Product Security has rated this update as having Moderate securityimpact Common Vulnerability Scoring Syste ...
Ubuntu Security Notice: samba vulnerabilities
Several security issues were fixed in Samba ...
Ubuntu Security Notice: samba regression
USN-2855-1 introduced a regression in Samba ...
Ubuntu Security Notice: ldb vulnerabilities
Several security issues were fixed in ldb ...
Debian Security Advisories: DSA-3433-1 samba -- security update
Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2015-3223 Thilo Uttendorfer of Linux Information Systems AG discovered that a malicious request can cause the Samba LDAP server to hang, spinning ...
Amazon Linux AMI: ALAS-2016-633
A denial of service flaw was found in the ldb_wildcard_compare() function of libldb A remote attacker could send a specially crafted packet that, when processed by an application using libldb (for example the AD LDAP server in Samba), would cause that application to consume an excessive amount of memory and crash A memory-read flaw was found in t ...
Red Hat: CVE-2015-3223
A denial of service flaw was found in the ldb_wildcard_compare() function of libldb A remote attacker could send a specially crafted packet that, when processed by an application using libldb (for example the AD LDAP server in Samba), would cause that application to consume an excessive amount of memory and crash ...

References

CWE-189CWE-399https://www.samba.org/samba/security/CVE-2015-3223.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=1290287http://www.securityfocus.com/bid/79731http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.htmlhttp://www.ubuntu.com/usn/USN-2855-2http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174391.htmlhttp://www.ubuntu.com/usn/USN-2855-1http://www.securitytracker.com/id/1034493http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.htmlhttp://www.debian.org/security/2016/dsa-3433http://www.ubuntu.com/usn/USN-2856-1http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174076.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.htmlhttps://security.gentoo.org/glsa/201612-47https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=ec504dbf69636a554add1f3d5703dd6c3ad450b8https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=aa6c27148b9d3f8c1e4fdd5dd46bfecbbd0ca465https://access.redhat.com/errata/RHSA-2016:0009https://nvd.nist.govhttps://usn.ubuntu.com/2855-1/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48700CVE-2022-48689CVE-2024-27956CVE-2023-6363SQLNULL pointer dereferenceCVE-2023-41830CVE-2015-2051arbitrary
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook