Test ID:	1.3.6.1.4.1.25623.1.1.2.2020.2253
Category:	Huawei EulerOS Local Security Checks
Title:	Huawei EulerOS: Security Advisory for libldb (EulerOS-SA-2020-2253)
Summary:	The remote host is missing an update for the Huawei EulerOS 'libldb' package(s) announced via the EulerOS-SA-2020-2253 advisory.
Description:	Summary: The remote host is missing an update for the Huawei EulerOS 'libldb' package(s) announced via the EulerOS-SA-2020-2253 advisory. Vulnerability Insight: A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability.(CVE-2020-10730) Affected Software/OS: 'libldb' package(s) on Huawei EulerOS V2.0SP5. Solution: Please install the updated package(s). CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-10730 Debian Security Information: DSA-4884 (Google Search) https://www.debian.org/security/2021/dsa-4884 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6YLNQ5GRXUKYRUAOFZ4DUBVN4SMTL6Q2/ https://security.gentoo.org/glsa/202007-15 https://bugzilla.redhat.com/show_bug.cgi?id=1849489; https://www.samba.org/samba/security/CVE-2020-10730.html https://lists.debian.org/debian-lts-announce/2020/11/msg00041.html SuSE Security Announcement: openSUSE-SU-2020:0984 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00030.html SuSE Security Announcement: openSUSE-SU-2020:1023 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00054.html SuSE Security Announcement: openSUSE-SU-2020:1121 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00000.html SuSE Security Announcement: openSUSE-SU-2020:1313 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00002.html
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.