There is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4.10.12 and all samba 4.9.x versions before 4.9.18, where the removal of the right to create or modify a subtree would not automatically be taken away on all domain controllers.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Jan 21, 2020 |
| Debian | — | Upgrade samba | May 31, 2021 | Jan 21, 2020 |
| Freebsd | — | Upgrade samba410Upgrade samba411 | Jan 27, 2020 | Jan 27, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-winbindUpgrade sambaUpgrade samba-libsUpgrade samba-pythonUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-clientUpgrade samba-common-libs | Nov 3, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-commonUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-clientUpgrade sambaUpgrade samba-libsUpgrade samba-pythonUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-winbind | Sep 28, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-clientUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-pythonUpgrade sambaUpgrade libsmbclientUpgrade samba-common | Mar 24, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-common-toolsUpgrade samba-client-libsUpgrade libsmbclientUpgrade samba-dc-libsUpgrade ctdb-testsUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade python3-samba-testUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade python2-samba-testUpgrade samba-winbind-krb5-locatorUpgrade sambaUpgrade ctdbUpgrade samba-krb5-printingUpgrade samba-commonUpgrade python2-sambaUpgrade samba-libsUpgrade samba-clientUpgrade python3-sambaUpgrade samba-pidlUpgrade samba-testUpgrade libwbclientUpgrade samba-test-libs | Feb 26, 2020 | Jan 21, 2020 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Jan 21, 2020 |
| Samba | — | Upgrade to Samba 4.11.5 or later.Upgrade to Samba 4.9.18 or later.Upgrade to Samba 4.10.12 or later. | Jan 24, 2020 | Jan 21, 2020 |
| Suse | — | Upgrade samba-libsUpgrade ctdb-pcp-pmdaUpgrade libsamba-credentials0-32bitUpgrade samba-libs-pythonUpgrade libdcerpc-develUpgrade libnetapi0Upgrade libndr-standard0Upgrade libndr-nbt0Upgrade libnetapi-develUpgrade libsamba-policy-develUpgrade libndr-nbt-develUpgrade samba-winbindUpgrade samba-pidlUpgrade libsamba-util-develUpgrade libsmbclient-develUpgrade samba-libs-python-32bitUpgrade libsmbconf0-32bitUpgrade sambaUpgrade libsamba-policy-python-develUpgrade libdcerpc0-32bitUpgrade samba-libs-32bitUpgrade python-ldbUpgrade samba-libs-python3Upgrade libsamba-hostconfig0Upgrade libdcerpc-samr-develUpgrade libdcerpc-binding0Upgrade libsamba-util0-32bitUpgrade libsmbconf0Upgrade libsmbldap2-32bitUpgrade libsamba-credentials-develUpgrade libsmbclient0-32bitUpgrade ctdbUpgrade libsmbldap-develUpgrade libndr0Upgrade libsamba-errors0-32bitUpgrade libsamba-credentials0Upgrade libtevent-util0Upgrade libdcerpc-samr0-32bitUpgrade libsamba-policy0-python3-32bitUpgrade samba-cephUpgrade libndr1Upgrade samba-pythonUpgrade libsmbclient0Upgrade libwbclient0Upgrade libldb1-32bitUpgrade libsamba-policy0-python3Upgrade samba-winbind-32bitUpgrade libtevent-util-develUpgrade libndr-krb5pac0-32bitUpgrade samba-docUpgrade libldb-develUpgrade libwbclient-develUpgrade libwbclient0-32bitUpgrade samba-ad-dc-32bitUpgrade libsamba-passdb-develUpgrade libsmbldap2Upgrade libsamba-util0Upgrade libsamba-errors-develUpgrade libldb1Upgrade libsamba-policy-python3-develUpgrade samba-ad-dcUpgrade libsamba-hostconfig-develUpgrade samba-client-32bitUpgrade python-ldb-develUpgrade samba-testUpgrade libsamdb0Upgrade libsamba-policy0-32bitUpgrade ldb-toolsUpgrade ctdb-testsUpgrade libndr-krb5pac-develUpgrade libndr1-32bitUpgrade libsamdb0-32bitUpgrade samba-core-develUpgrade libtevent-util0-32bitUpgrade libdcerpc-samr0Upgrade samba-clientUpgrade libnetapi0-32bitUpgrade libsamba-passdb0Upgrade libsamba-hostconfig0-32bitUpgrade libndr-standard-develUpgrade samba-libs-python3-32bitUpgrade libndr0-32bitUpgrade libndr-standard0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc0Upgrade libsamba-passdb0-32bitUpgrade libndr-krb5pac0Upgrade libsmbconf-develUpgrade libsamba-policy0Upgrade samba-dsdb-modulesUpgrade libndr-develUpgrade samba-python3Upgrade libsamdb-develUpgrade libndr-nbt0-32bitUpgrade libsamba-errors0 | Jan 25, 2020 | Jan 21, 2020 |
| Ubuntu | — | Upgrade samba | Mar 2, 2020 | Jan 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub