NVD

Id
26517  
Name
CVE-2015-5330  
Description
ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string lengths, which allows remote attackers to obtain sensitive information from daemon heap memory by sending crafted packets and then reading (1) an error message or (2) a database value.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-12-29  
Modified Date
2016-12-30  
Seq
2015-5330  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
140293 26517 CVE-2015-5330 SUSE-SU-2015:2304  View
140294 26517 CVE-2015-5330 SUSE-SU-2015:2305  View
140295 26517 CVE-2015-5330 openSUSE-SU-2015:2354  View
140296 26517 CVE-2015-5330 openSUSE-SU-2015:2356  View
140297 26517 CVE-2015-5330 SUSE-SU-2016:0032  View
140298 26517 CVE-2015-5330 SUSE-SU-2016:0164  View
140299 26517 CVE-2015-5330 openSUSE-SU-2016:1064  View
140300 26517 CVE-2015-5330 openSUSE-SU-2016:1106  View
140301 26517 CVE-2015-5330 openSUSE-SU-2016:1107  View
140302 26517 CVE-2015-5330 DSA-3433  View
140303 26517 CVE-2015-5330 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
140304 26517 CVE-2015-5330 79734  View
140305 26517 CVE-2015-5330 1034493  View
140306 26517 CVE-2015-5330 USN-2855-1  View
140307 26517 CVE-2015-5330 USN-2855-2  View
140308 26517 CVE-2015-5330 USN-2856-1  View
140309 26517 CVE-2015-5330 https://bugzilla.redhat.com/show_bug.cgi?id=1281326  View
140310 26517 CVE-2015-5330 https://git.samba.org/?p=samba.git;a=commit;h=0454b95657846fcecf0f51b6f1194faac02518bd  View
140311 26517 CVE-2015-5330 https://git.samba.org/?p=samba.git;a=commit;h=538d305de91e34a2938f5f219f18bf0e1918763f  View
140312 26517 CVE-2015-5330 https://git.samba.org/?p=samba.git;a=commit;h=7f51ec8c4ed9ba1f53d722e44fb6fb3cde933b72  View
140313 26517 CVE-2015-5330 https://git.samba.org/?p=samba.git;a=commit;h=a118d4220ed85749c07fb43c1229d9e2fecbea6b  View
140314 26517 CVE-2015-5330 https://git.samba.org/?p=samba.git;a=commit;h=ba5dbda6d0174a59d221c45cca52ecd232820d48  View
140315 26517 CVE-2015-5330 https://git.samba.org/?p=samba.git;a=commit;h=f36cb71c330a52106e36028b3029d952257baf15  View
140316 26517 CVE-2015-5330 GLSA-201612-47  View
140317 26517 CVE-2015-5330 https://www.samba.org/samba/security/CVE-2015-5330.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11258 JVNDB-2015-006578 Samba の AD LDAP サーバで使用される ldb におけるデーモンヒープメモリから重要な情報を取得される脆弱性 Samba の AD LDAP サーバで使用される ldb は、文字列の長さを誤って処理するため、デーモンヒープメモリから重要な情報を取得される脆弱性が存在します。 CVE-2015-5330 82555 CVE-2015-5330 26517 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006578.html 2015-12-10 2016-01-05 View