Douglas Bagnall

The issue is related to the function `gnutls rnd()` in the GnuTLS package used by Samba, which generates insufficiently random values. This can potentially allow an attacker to gain access to confidential data. The function `gnutls rnd()` can fail, resulting in predictable random values.

Name of the Vulnerable Software and Affected Versions: Samba (affected versions not specified) Description: A flaw was found in Samba's libldb, where multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write. This issue can cause a crash of the LDAP server process handling the request, with the highest threat being to system availability. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to the mishandling of string lengths in the ldb library, used in the AD LDAP server in Samba. This allows remote attackers to obtain sensitive information from daemon heap memory by sending crafted packets and then reading an error message or a database value. The vulnerability is associated with information disclosure.

The internal DNS server in Samba, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record. This issue is caused by a buffer overflow.