A flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15, samba 4.10.10, samba 4.11.2, in the way it handles a user password change or a new password for a samba user. The Samba Active Directory Domain Controller can be configured to use a custom script to check for password complexity. This configuration can fail to verify password complexity when non-ASCII characters are used in the password, which could lead to weak passwords being set for samba users, making it vulnerable to dictionary attacks.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
- CVSS 3.0 Base Score: 4.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Nov 6, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 6, 2019 |
| Debian | — | Upgrade samba | May 31, 2021 | Nov 6, 2019 |
| Freebsd | — | Upgrade samba411Upgrade samba410Upgrade samba48 | Nov 1, 2019 | Oct 29, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-libsUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-common-toolsUpgrade samba-winbindUpgrade sambaUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-clientUpgrade samba-client-libs | Feb 22, 2021 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-common-libsUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade samba-winbindUpgrade sambaUpgrade libsmbclientUpgrade samba-libsUpgrade libwbclient | Sep 28, 2020 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-commonUpgrade sambaUpgrade samba-pythonUpgrade samba-winbindUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-client-libsUpgrade samba-libsUpgrade libwbclient | Dec 11, 2019 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-dc-libsUpgrade samba-test-libsUpgrade samba-clientUpgrade python2-sambaUpgrade samba-winbind-krb5-locatorUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade libsmbclientUpgrade python2-samba-testUpgrade samba-winbind-modulesUpgrade python3-samba-testUpgrade samba-winbindUpgrade sambaUpgrade samba-client-libsUpgrade python3-sambaUpgrade ctdbUpgrade samba-libsUpgrade samba-krb5-printingUpgrade samba-testUpgrade ctdb-testsUpgrade libwbclientUpgrade samba-pidl | Nov 28, 2019 | Nov 6, 2019 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Nov 6, 2019 |
| Samba | — | Upgrade to Samba 4.11.2 or later.Upgrade to Samba 4.10.10 or later.Upgrade to Samba 4.9.15 or later. | Nov 6, 2019 | Nov 6, 2019 |
| Suse | — | Upgrade samba-cephUpgrade libldb1-32bitUpgrade libsamba-util0Upgrade libsamba-passdb0-32bitUpgrade python-ldbUpgrade libtevent-util0-32bitUpgrade libsamba-errors0Upgrade libsamba-policy0Upgrade samba-winbind-32bitUpgrade libdcerpc-develUpgrade libsamba-passdb0Upgrade samba-docUpgrade samba-core-develUpgrade libtevent-util0Upgrade libndr-nbt0-32bitUpgrade libwbclient0-32bitUpgrade libsmbclient0-32bitUpgrade ctdb-pcp-pmdaUpgrade libwbclient-develUpgrade libnetapi0Upgrade libsmbldap-develUpgrade libdcerpc-binding0-32bitUpgrade libsamba-policy-python3-develUpgrade libsmbclient-develUpgrade libnetapi0-32bitUpgrade samba-libs-32bitUpgrade samba-ad-dc-32bitUpgrade libndr-standard0Upgrade libsamba-credentials0Upgrade libdcerpc-samr0Upgrade libsmbclient0Upgrade libwbclient0Upgrade libdcerpc-samr-develUpgrade libtevent-util-develUpgrade libndr1Upgrade libsamba-hostconfig-develUpgrade libndr-krb5pac-develUpgrade libndr-standard-develUpgrade libsamba-passdb-develUpgrade libsmbconf0Upgrade libsamba-policy0-32bitUpgrade libsamba-policy0-python3Upgrade libsamba-util0-32bitUpgrade libsamdb-develUpgrade samba-dsdb-modulesUpgrade libsamba-policy-python-develUpgrade libndr0Upgrade libsamba-errors0-32bitUpgrade samba-kdcUpgrade samba-libs-python-32bitUpgrade libnetapi-develUpgrade samba-client-32bitUpgrade samba-libs-pythonUpgrade libndr-krb5pac0-32bitUpgrade ctdbUpgrade ldb-toolsUpgrade samba-libsUpgrade python-ldb-develUpgrade libldb1Upgrade libsamdb0-32bitUpgrade libsmbconf0-32bitUpgrade libsamba-hostconfig0Upgrade libsamba-credentials0-32bitUpgrade samba-testUpgrade libsamba-util-develUpgrade samba-clientUpgrade libsamba-policy0-python3-32bitUpgrade libndr0-32bitUpgrade libsmbldap2-32bitUpgrade samba-pythonUpgrade samba-winbindUpgrade samba-libs-python3-32bitUpgrade ctdb-testsUpgrade libsamba-errors-develUpgrade sambaUpgrade samba-pidlUpgrade libndr-krb5pac0Upgrade libdcerpc0-32bitUpgrade libndr-nbt0 | Nov 6, 2019 | Oct 29, 2019 |
| Ubuntu | — | Upgrade libsmbclientUpgrade samba | Oct 30, 2019 | Oct 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub