Garming Sam

A flaw in the LDAP search expression handling can cause the shared LDAP server process of a Samba AD DC to crash, leading to a denial of service. An authenticated user with read permissions on the LDAP server can exploit this issue. The vulnerability is related to a buffer overflow in the `ldb wildcard compare` function of the LDAP component, which can be exploited by a remote attacker to cause a denial of service.

The issue is related to a denial of service in Samba's LDAP search functionality. It occurs when the maximum size of cached search results, which is 256MB, is reached, causing the Samba process to follow a NULL pointer and terminate. This can be exploited by a remote attacker to cause a denial of service.

The internal DNS server in Samba, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record. This issue is caused by a buffer overflow.

The issue is related to multiple buffer overflows in the create ntlmssp v2 key function in the NTLMSSP v2 dissector. This can be exploited by remote attackers to cause a denial of service, specifically an application crash, by sending a packet with a long domain name.