NVD Vulnerability Detail

CVE-2015-5330

Summary	ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string lengths, which allows remote attackers to obtain sensitive information from daemon heap memory by sending crafted packets and then reading (1) an error message or (2) a database value.
Publication Date	Dec. 30, 2015, 7:59 a.m.
Registration Date	Jan. 26, 2021, 2:52 p.m.
Last Update	Nov. 21, 2024, 11:32 a.m.

CVSS3.0 : HIGH
スコア	7.5
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃に必要な特権レベル(PR)	不要
利用者の関与(UI)	不要
影響の想定範囲(S)	変更なし
機密性への影響(C)	高
完全性への影響(I)	なし
可用性への影響(A)	なし

CVSS2.0 : MEDIUM
Score	5.0
Vector	AV:N/AC:L/Au:N/C:P/I:N/A:N
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	低
完全性への影響(I)	なし
可用性への影響(A)	なし
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:samba:samba:4.2.6:::::::*
cpe:2.3:a:samba:samba:4.1.9:::::::*
cpe:2.3:a:samba:samba:4.0.14:::::::*
cpe:2.3:a:samba:samba:4.0.24:::::::*
cpe:2.3:a:samba:samba:4.1.16:::::::*
cpe:2.3:a:samba:samba:4.1.12:::::::*
cpe:2.3:a:samba:samba:4.0.2:::::::*
cpe:2.3:a:samba:samba:4.1.14:::::::*
cpe:2.3:a:samba:samba:4.0.22:::::::*
cpe:2.3:a:samba:samba:4.2.1:::::::*
cpe:2.3:a:samba:samba:4.0.11:::::::*
cpe:2.3:a:samba:samba:4.1.7:::::::*
cpe:2.3:a:samba:samba:4.0.3:::::::*
cpe:2.3:a:samba:samba:4.3.0:::::::*
cpe:2.3:a:samba:samba:4.0.21:::::::*
cpe:2.3:a:samba:samba:4.0.16:::::::*
cpe:2.3:a:samba:samba:4.1.8:::::::*
cpe:2.3:a:samba:samba:4.2.4:::::::*
cpe:2.3:a:samba:samba:4.0.13:::::::*
cpe:2.3:a:samba:samba:4.2.0:::::::*
cpe:2.3:a:samba:samba:4.1.5:::::::*
cpe:2.3:a:samba:samba:4.1.6:::::::*
cpe:2.3:a:samba:samba:4.0.17:::::::*
cpe:2.3:a:samba:samba:4.0.6:::::::*
cpe:2.3:a:samba:samba:4.0.19:::::::*
cpe:2.3:a:samba:samba:4.1.11:::::::*
cpe:2.3:a:samba:samba:4.0.10:::::::*
cpe:2.3:a:samba:samba:4.1.4:::::::*
cpe:2.3:a:samba:samba:4.1.20:::::::*
cpe:2.3:a:samba:samba:4.0.7:::::::*
cpe:2.3:a:samba:samba:4.1.0:::::::*
cpe:2.3:a:samba:samba:4.1.19:::::::*
cpe:2.3:a:samba:samba:4.0.1:::::::*
cpe:2.3:a:samba:samba:4.0.8:::::::*
cpe:2.3:a:samba:samba:4.2.2:::::::*
cpe:2.3:a:samba:samba:4.1.10:::::::*
cpe:2.3:a:samba:samba:4.3.1:::::::*
cpe:2.3:a:samba:samba:4.1.15:::::::*
cpe:2.3:a:samba:samba:4.1.17:::::::*
cpe:2.3:a:samba:samba:4.3.2:::::::*
cpe:2.3:a:samba:samba:4.0.0:::::::*
cpe:2.3:a:samba:samba:4.2.3:::::::*
cpe:2.3:a:samba:samba:4.0.5:::::::*
cpe:2.3:a:samba:samba:4.1.2:::::::*
cpe:2.3:a:samba:samba:4.1.3:::::::*
cpe:2.3:a:samba:samba:4.0.18:::::::*
cpe:2.3:a:samba:samba:4.1.21:::::::*
cpe:2.3:a:samba:samba:4.1.1:::::::*
cpe:2.3:a:samba:samba:4.0.23:::::::*
cpe:2.3:a:samba:samba:4.1.13:::::::*
cpe:2.3:a:samba:samba:4.2.5:::::::*
cpe:2.3:a:samba:samba:4.0.12:::::::*
cpe:2.3:a:samba:samba:4.0.4:::::::*
cpe:2.3:a:samba:samba:4.0.15:::::::*
cpe:2.3:a:samba:samba:4.0.20:::::::*
cpe:2.3:a:samba:samba:4.1.18:::::::*
cpe:2.3:a:samba:samba:4.0.9:::::::*

Related information, measures and tools

No	URL	タグ
1	http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html
2	http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html
3	http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html
4	http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html
5	http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html
6	http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html
7	http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html
8	http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html
9	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00002.html
10	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00002.html
11	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00017.html
12	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00017.html
13	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html
14	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html
15	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html
16	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html
17	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html
18	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html
19	http://www.debian.org/security/2016/dsa-3433
20	http://www.debian.org/security/2016/dsa-3433
21	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
22	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
23	http://www.securityfocus.com/bid/79734
24	http://www.securityfocus.com/bid/79734
25	http://www.securitytracker.com/id/1034493
26	http://www.securitytracker.com/id/1034493
27	http://www.ubuntu.com/usn/USN-2855-1
28	http://www.ubuntu.com/usn/USN-2855-1
29	http://www.ubuntu.com/usn/USN-2855-2
30	http://www.ubuntu.com/usn/USN-2855-2
31	http://www.ubuntu.com/usn/USN-2856-1
32	http://www.ubuntu.com/usn/USN-2856-1
33	https://bugzilla.redhat.com/show_bug.cgi?id=1281326
34	https://bugzilla.redhat.com/show_bug.cgi?id=1281326
35	https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=0454b95657846fcecf0f51b6f1194faac02518bd
36	https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=0454b95657846fcecf0f51b6f1194faac02518bd
37	https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=538d305de91e34a2938f5f219f18bf0e1918763f
38	https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=538d305de91e34a2938f5f219f18bf0e1918763f
39	https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=7f51ec8c4ed9ba1f53d722e44fb6fb3cde933b72
40	https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=7f51ec8c4ed9ba1f53d722e44fb6fb3cde933b72
41	https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=a118d4220ed85749c07fb43c1229d9e2fecbea6b
42	https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=a118d4220ed85749c07fb43c1229d9e2fecbea6b
43	https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=ba5dbda6d0174a59d221c45cca52ecd232820d48
44	https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=ba5dbda6d0174a59d221c45cca52ecd232820d48
45	https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=f36cb71c330a52106e36028b3029d952257baf15
46	https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=f36cb71c330a52106e36028b3029d952257baf15
47	https://security.gentoo.org/glsa/201612-47
48	https://security.gentoo.org/glsa/201612-47
49	https://www.samba.org/samba/security/CVE-2015-5330.html	Vendor Advisory
50	https://www.samba.org/samba/security/CVE-2015-5330.html	Vendor Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-200	情報漏えい	https://cwe.mitre.org/data/definitions/200.html

JVN Vulnerability Information

Samba の AD LDAP サーバで使用される ldb におけるデーモンヒープメモリから重要な情報を取得される脆弱性

Title	Samba の AD LDAP サーバで使用される ldb におけるデーモンヒープメモリから重要な情報を取得される脆弱性
Summary	Samba の AD LDAP サーバで使用される ldb は、文字列の長さを誤って処理するため、デーモンヒープメモリから重要な情報を取得される脆弱性が存在します。
Possible impacts	第三者により、巧妙に細工されたパケットを送信され、その後、(1) エラーメッセージまたは (2) データベースの値を読まれることで、デーモンヒープメモリから重要な情報を取得される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Dec. 10, 2015, midnight
Registration Date	Jan. 5, 2016, 1:57 p.m.
Last Update	Jan. 5, 2016, 1:57 p.m.

Affected System

Samba Project

Samba 4.1.22 未満の 4.x (ldb 1.1.24 未満)

Samba 4.2.7 未満の 4.2.x (ldb 1.1.24 未満)

Samba 4.3.3 未満の 4.3.x (ldb 1.1.24 未満)

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2015-5330	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5330
National Vulnerability Database (NVD)
2	CVE-2015-5330	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5330
Samba
3	CVE-2015-5330: Fix handling of unicode near string endings	https://git.samba.org/?p=samba.git;a=commit;h=ba5dbda6d0174a59d221c45cca52ecd232820d48
4	CVE-2015-5330: ldb_dn: simplify and fix ldb_dn_escape_internal()	https://git.samba.org/?p=samba.git;a=commit;h=7f51ec8c4ed9ba1f53d722e44fb6fb3cde933b72
5	CVE-2015-5330: ldb_dn_escape_value: use known string length, not strlen()	https://git.samba.org/?p=samba.git;a=commit;h=0454b95657846fcecf0f51b6f1194faac02518bd
6	CVE-2015-5330: ldb_dn_explode: copy strings by length, not terminators	https://git.samba.org/?p=samba.git;a=commit;h=f36cb71c330a52106e36028b3029d952257baf15
7	CVE-2015-5330: next_codepoint_handle_ext: don't short-circuit UTF16 low bytes	https://git.samba.org/?p=samba.git;a=commit;h=538d305de91e34a2938f5f219f18bf0e1918763f
8	CVE-2015-5330: strupper_talloc_n_handle(): properly count characters	https://git.samba.org/?p=samba.git;a=commit;h=a118d4220ed85749c07fb43c1229d9e2fecbea6b
Samba Security Announcement
9	CVE-2015-5330.html	https://www.samba.org/samba/security/CVE-2015-5330.html

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-200	https://jvndb.jvn.jp/ja/cwe/CWE-200.html

ベンダー情報

No	Name	URL
Red Hat Bugzilla
1	Bug 1281326	https://bugzilla.redhat.com/show_bug.cgi?id=1281326

Change Log

No	Changed Details	Date of change
0	[2016年01月05日] 掲載	Feb. 17, 2018, 10:37 a.m.

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:samba:samba:4.2.6:::::::*
cpe:2.3:a:samba:samba:4.1.9:::::::*
cpe:2.3:a:samba:samba:4.0.14:::::::*
cpe:2.3:a:samba:samba:4.0.24:::::::*
cpe:2.3:a:samba:samba:4.1.16:::::::*
cpe:2.3:a:samba:samba:4.1.12:::::::*
cpe:2.3:a:samba:samba:4.0.2:::::::*
cpe:2.3:a:samba:samba:4.1.14:::::::*
cpe:2.3:a:samba:samba:4.0.22:::::::*
cpe:2.3:a:samba:samba:4.2.1:::::::*
cpe:2.3:a:samba:samba:4.0.11:::::::*
cpe:2.3:a:samba:samba:4.1.7:::::::*
cpe:2.3:a:samba:samba:4.0.3:::::::*
cpe:2.3:a:samba:samba:4.3.0:::::::*
cpe:2.3:a:samba:samba:4.0.21:::::::*
cpe:2.3:a:samba:samba:4.0.16:::::::*
cpe:2.3:a:samba:samba:4.1.8:::::::*
cpe:2.3:a:samba:samba:4.2.4:::::::*
cpe:2.3:a:samba:samba:4.0.13:::::::*
cpe:2.3:a:samba:samba:4.2.0:::::::*
cpe:2.3:a:samba:samba:4.1.5:::::::*
cpe:2.3:a:samba:samba:4.1.6:::::::*
cpe:2.3:a:samba:samba:4.0.17:::::::*
cpe:2.3:a:samba:samba:4.0.6:::::::*
cpe:2.3:a:samba:samba:4.0.19:::::::*
cpe:2.3:a:samba:samba:4.1.11:::::::*
cpe:2.3:a:samba:samba:4.0.10:::::::*
cpe:2.3:a:samba:samba:4.1.4:::::::*
cpe:2.3:a:samba:samba:4.1.20:::::::*
cpe:2.3:a:samba:samba:4.0.7:::::::*
cpe:2.3:a:samba:samba:4.1.0:::::::*
cpe:2.3:a:samba:samba:4.1.19:::::::*
cpe:2.3:a:samba:samba:4.0.1:::::::*
cpe:2.3:a:samba:samba:4.0.8:::::::*
cpe:2.3:a:samba:samba:4.2.2:::::::*
cpe:2.3:a:samba:samba:4.1.10:::::::*
cpe:2.3:a:samba:samba:4.3.1:::::::*
cpe:2.3:a:samba:samba:4.1.15:::::::*
cpe:2.3:a:samba:samba:4.1.17:::::::*
cpe:2.3:a:samba:samba:4.3.2:::::::*
cpe:2.3:a:samba:samba:4.0.0:::::::*
cpe:2.3:a:samba:samba:4.2.3:::::::*
cpe:2.3:a:samba:samba:4.0.5:::::::*
cpe:2.3:a:samba:samba:4.1.2:::::::*
cpe:2.3:a:samba:samba:4.1.3:::::::*
cpe:2.3:a:samba:samba:4.0.18:::::::*
cpe:2.3:a:samba:samba:4.1.21:::::::*
cpe:2.3:a:samba:samba:4.1.1:::::::*
cpe:2.3:a:samba:samba:4.0.23:::::::*
cpe:2.3:a:samba:samba:4.1.13:::::::*
cpe:2.3:a:samba:samba:4.2.5:::::::*
cpe:2.3:a:samba:samba:4.0.12:::::::*
cpe:2.3:a:samba:samba:4.0.4:::::::*
cpe:2.3:a:samba:samba:4.0.15:::::::*
cpe:2.3:a:samba:samba:4.0.20:::::::*
cpe:2.3:a:samba:samba:4.1.18:::::::*
cpe:2.3:a:samba:samba:4.0.9:::::::*