Gary Lockyer 139f49ac0c CVE-2020-10704: libcli ldap_message: Add search size limits to ldap_decode ...

Add search request size limits to ldap_decode calls.

The ldap server uses the smb.conf variable
"ldap max search request size" which defaults to 250Kb.
For cldap the limit is hard coded as 4096.

Credit to OSS-Fuzz

REF: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20454
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14334

Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

2020-04-21 10:21:09 +02:00

..

auth

CVE-2020-10704: lib util asn1: Add ASN.1 max tree depth

2020-04-21 10:21:09 +02:00

build/pasn1

…

cldap_server

source4 smdb: Add a post fork hook to the service API

2018-11-01 23:49:24 +01:00

client

s4:client: Fix size types and loop

2018-04-03 20:20:10 +02:00

cluster

dbwrap: Remove calls to loadparm

2018-04-24 01:53:19 +02:00

dns_server

dnsp.idl: fix dnsp_ip4_array definition

2019-08-08 07:30:11 +00:00

dsdb

CVE-2020-10700: dsdb: Do not permit the ASQ control for the GUID search in paged_results

2020-04-21 10:21:09 +02:00

echo_server

source4 smdb: Add a post fork hook to the service API

2018-11-01 23:49:24 +01:00

heimdal

CVE-2019-14870: heimdal: enforce delegation_not_allowed in S4U2Self

2019-12-03 12:50:18 +01:00

heimdal_build

heimdal-build: avoid hard-coded /usr/include/heimdal in asn1_compile-generated code.

2019-12-03 15:06:08 +00:00

include

lib: Remove global xfile.h includes

2016-11-20 06:23:19 +01:00

kdc

CVE-2019-14870: mit-kdc: enforce delegation_not_allowed flag

2019-12-03 12:50:18 +01:00

ldap_server

CVE-2020-10704: libcli ldap_message: Add search size limits to ldap_decode

2020-04-21 10:21:09 +02:00

lib

s4 lib socket: Ensure address string owned by parent struct

2019-05-16 10:37:55 +00:00

libcli

CVE-2020-10704: libcli ldap_message: Add search size limits to ldap_decode

2020-04-21 10:21:09 +02:00

libnet

s4/libnet: Fix joining a Windows pre-2008R2 DC

2019-07-09 10:31:39 +00:00

librpc

s4 librpc rpc pyrpc: Fix flapping dcerpc.bare tests

2019-07-09 06:33:30 +00:00

nbt_server

nbt_server: Use dom_sid_str_buf

2018-11-02 21:21:14 +01:00

ntp_signd

ntpd: Use dom_sid_str_buf

2019-01-08 03:40:28 +01:00

ntvfs

s4:ntvfs: Do not free eadb before we printed an error

2019-05-16 10:37:56 +00:00

param

debug: Use debuglevel_(get|set) function

2018-11-08 11:03:11 +01:00

rpc_server

CVE-2019-14861: s4-rpc/dnsserver: Avoid crash in ldb_qsort() via dcesrv_DnssrvEnumRecords)

2019-12-03 12:50:18 +01:00

script

PY3: change shebang to python3 in source4/dsdb dir

2018-12-14 14:40:20 +01:00

scripting

undoduididx: Add "or later" to warning about using tools from Samba 4.8

2019-08-23 08:59:28 +00:00

selftest

CVE-2020-10704: ldapserver tests: Limit search request sizes

2020-04-21 10:21:09 +02:00

setup

s4:provision: split out provision_self_join_modify_schema.ldif

2019-06-13 08:52:26 +00:00

smb_server

source4 smdb: Add a post fork hook to the service API

2018-11-01 23:49:24 +01:00

smbd

s4-server: Open and close a transaction on sam.ldb at startup

2019-03-11 07:55:37 +00:00

torture

s4:torture: Skip the deltest20 as user root

2020-02-03 10:02:49 +00:00

utils

s4/utils/test: PY3 make sure we call correct python version for samba-tool

2018-12-10 10:38:20 +01:00

web_server

s4:web_server: Fix build error

2018-12-11 13:58:30 +01:00

winbind

winbind4: Use dom_sid_str_buf

2019-01-08 03:40:28 +01:00

wrepl_server

source4 smdb: Add a post fork hook to the service API

2018-11-01 23:49:24 +01:00

.clang_complete

s3-build: Add .clang_complete.

2011-10-27 17:09:50 +02:00

.valgrind_suppressions

…

wscript_build

Do not install smbclient4 and nmblookup4

2014-04-15 03:25:13 +02:00