A flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15, samba 4.10.10, samba 4.11.2, in the way it handles a user password change or a new password for a samba user. The Samba Active Directory Domain Controller can be configured to use a custom script to check for password complexity. This configuration can fail to verify password complexity when non-ASCII characters are used in the password, which could lead to weak passwords being set for samba users, making it vulnerable to dictionary attacks.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Nov 6, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 6, 2019 |
| Debian | — | Upgrade samba | May 31, 2021 | Nov 6, 2019 |
| Freebsd | — | Upgrade samba411Upgrade samba410Upgrade samba48 | Nov 1, 2019 | Oct 29, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-libsUpgrade libsmbclientUpgrade samba-libsUpgrade sambaUpgrade samba-winbindUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade libwbclient | Feb 22, 2021 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libwbclientUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade samba-client-libsUpgrade samba-pythonUpgrade samba-winbindUpgrade libsmbclientUpgrade sambaUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-client | Sep 28, 2020 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-client-libsUpgrade samba-libsUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-commonUpgrade sambaUpgrade samba-pythonUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-winbind-clients | Dec 11, 2019 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-sambaUpgrade ctdb-testsUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-pidlUpgrade samba-testUpgrade samba-krb5-printingUpgrade samba-libsUpgrade ctdbUpgrade samba-test-libsUpgrade samba-dc-libsUpgrade samba-common-libsUpgrade libsmbclientUpgrade sambaUpgrade samba-clientUpgrade python2-sambaUpgrade python2-samba-testUpgrade samba-commonUpgrade samba-winbindUpgrade samba-common-toolsUpgrade python3-samba-testUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-modules | Nov 28, 2019 | Nov 6, 2019 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Nov 6, 2019 |
| Samba | — | Upgrade to Samba 4.10.10 or later.Upgrade to Samba 4.9.15 or later.Upgrade to Samba 4.11.2 or later. | Nov 6, 2019 | Nov 6, 2019 |
| Suse | — | Upgrade libsamdb0Upgrade samba-libs-python3Upgrade libndr-krb5pac0Upgrade samba-winbind-32bitUpgrade samba-pidlUpgrade samba-cephUpgrade samba-kdc-32bitUpgrade libsmbconf-develUpgrade libwbclient0-32bitUpgrade libndr-nbt0-32bitUpgrade libndr1-32bitUpgrade libdcerpc-samr0-32bitUpgrade libldb-develUpgrade libsmbldap2-32bitUpgrade samba-core-develUpgrade libndr-standard0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libsmbldap2Upgrade python-ldbUpgrade libtevent-util0-32bitUpgrade libsamba-util0Upgrade libldb1-32bitUpgrade libsamba-credentials-develUpgrade libsamba-passdb0Upgrade libdcerpc-develUpgrade libndr-nbt-develUpgrade samba-docUpgrade libsamba-passdb0-32bitUpgrade libndr-develUpgrade libtevent-util0Upgrade libsmbclient0-32bitUpgrade libndr0-32bitUpgrade libwbclient-develUpgrade samba-python3Upgrade samba-pythonUpgrade libndr-nbt0Upgrade libndr-krb5pac-develUpgrade libnetapi0Upgrade libsamba-errors-develUpgrade ctdb-testsUpgrade samba-winbindUpgrade libsamba-errors0Upgrade sambaUpgrade samba-ad-dcUpgrade libdcerpc0-32bitUpgrade libsamba-policy-develUpgrade libdcerpc-binding0Upgrade libsmbldap-develUpgrade ctdb-pcp-pmdaUpgrade libdcerpc0Upgrade samba-libs-python3-32bitUpgrade libsamba-policy0Upgrade libtevent-util-develUpgrade samba-libsUpgrade libdcerpc-samr0Upgrade libsamba-credentials0-32bitUpgrade libsamba-policy-python3-develUpgrade libldb1Upgrade libsamba-util-develUpgrade samba-clientUpgrade libndr-standard0Upgrade samba-libs-pythonUpgrade ctdbUpgrade libsmbclient0Upgrade samba-dsdb-modulesUpgrade libndr-krb5pac0-32bitUpgrade samba-client-32bitUpgrade libdcerpc-samr-develUpgrade libsamdb0-32bitUpgrade libsamba-util0-32bitUpgrade ldb-toolsUpgrade libwbclient0Upgrade libsmbconf0-32bitUpgrade libsamba-policy-python-develUpgrade libsamba-policy0-python3Upgrade libsamdb-develUpgrade samba-libs-python-32bitUpgrade libnetapi-develUpgrade libsamba-hostconfig-develUpgrade libsamba-policy0-32bitUpgrade libndr-standard-develUpgrade libdcerpc-binding0-32bitUpgrade libsamba-passdb-develUpgrade samba-kdcUpgrade libnetapi0-32bitUpgrade libndr0Upgrade libsamba-credentials0Upgrade samba-libs-32bitUpgrade libndr1Upgrade libsmbclient-develUpgrade samba-ad-dc-32bitUpgrade libsamba-errors0-32bitUpgrade libsamba-hostconfig0Upgrade libsmbconf0Upgrade python-ldb-develUpgrade libsamba-policy0-python3-32bitUpgrade samba-test | Nov 6, 2019 | Oct 29, 2019 |
| Ubuntu | — | Upgrade libsmbclientUpgrade samba | Oct 30, 2019 | Oct 29, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub