The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | Mar 13, 2016 |
| Debian | — | Upgrade samba | Mar 14, 2016 | Mar 12, 2016 |
| Samba | — | Upgrade to Samba version 4.2.9Upgrade to Samba version 4.1.23Upgrade to Samba version 4.3.6Upgrade to Samba version 4.4.0rc4 | Mar 24, 2016 | Mar 13, 2016 |
| Suse | — | Upgrade libndr-standard0Upgrade libsamba-credentials0Upgrade samba-libsUpgrade samba-libs-python3Upgrade libtevent-util-develUpgrade libsamba-policy-develUpgrade libnetapi0Upgrade libsamba-hostconfig0Upgrade samba-kdcUpgrade libtevent-util0Upgrade libsamba-errors0-32bitUpgrade libdcerpc-binding0Upgrade libndr-nbt0Upgrade ctdbUpgrade samba-winbind-32bitUpgrade sambaUpgrade samba-libs-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsmbclient0-32bitUpgrade libsamba-credentials-develUpgrade libndr-standard0-32bitUpgrade samba-docUpgrade libsamba-util0-32bitUpgrade libsmbclient-develUpgrade libsamba-policy-python3-develUpgrade libdcerpc-develUpgrade samba-clientUpgrade libdcerpc0-32bitUpgrade libsmbldap0-32bitUpgrade libsamba-policy0Upgrade libsamba-util-develUpgrade libwbclient0Upgrade samba-cephUpgrade libsamba-policy0-python3Upgrade libndr-nbt-develUpgrade libsamdb0Upgrade samba-winbindUpgrade samba-pythonUpgrade libsmbldap2-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-passdb-develUpgrade libndr-standard-develUpgrade samba-client-32bitUpgrade libsamdb-develUpgrade libsamba-hostconfig-develUpgrade libsamba-util0Upgrade libsamba-passdb0-32bitUpgrade libsmbconf0-32bitUpgrade samba-libs-python3-32bitUpgrade libnetapi-develUpgrade libsmbclient0Upgrade libndr0Upgrade libsamba-errors-develUpgrade libsamba-credentials0-32bitUpgrade samba-python3Upgrade libdcerpc-binding0-32bitUpgrade libndr-krb5pac-develUpgrade libsamba-errors0Upgrade samba-dsdb-modulesUpgrade libsmbldap2Upgrade libndr-nbt0-32bitUpgrade libndr1-32bitUpgrade libsmbconf-develUpgrade libsmbconf0Upgrade libdcerpc0Upgrade libsmbldap0Upgrade libwbclient-develUpgrade libwbclient0-32bitUpgrade libndr-develUpgrade libsmbldap-develUpgrade libsamdb0-32bitUpgrade libtevent-util0-32bitUpgrade libnetapi0-32bitUpgrade libndr1Upgrade libdcerpc-samr0Upgrade libndr0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade samba-core-develUpgrade libsamba-passdb0Upgrade libndr-krb5pac0 | Mar 22, 2016 | Mar 13, 2016 |
| Ubuntu | — | Upgrade swatUpgrade samba | Mar 13, 2016 | Mar 8, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub