All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Jan 21, 2020 |
| Amazon Linux Ami 2 | — | Upgrade sambaUpgrade samba-python-testUpgrade ctdbUpgrade samba-clientUpgrade samba-dcUpgrade samba-winbind-modulesUpgrade samba-pythonUpgrade samba-commonUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-vfs-glusterfsUpgrade libwbclient-develUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libsUpgrade samba-debuginfoUpgrade samba-winbindUpgrade libwbclientUpgrade samba-client-libsUpgrade ctdb-testsUpgrade libsmbclient-develUpgrade samba-testUpgrade samba-libsUpgrade samba-pidlUpgrade samba-develUpgrade samba-test-libsUpgrade samba-krb5-printing | Oct 28, 2020 | Jan 21, 2020 |
| Amazon_linux | — | Upgrade samba | Nov 18, 2020 | Jan 21, 2020 |
| Centos_linux | — | Upgrade samba-common-libs-debuginfoUpgrade openchange-debuginfoUpgrade openchange-client-debuginfoUpgrade ctdb-testsUpgrade samba-krb5-printing-debuginfoUpgrade libwbclient-develUpgrade samba-winbindUpgrade libwbclient-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-pidlUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade sambaUpgrade openchangeUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-debuginfoUpgrade ctdb-debuginfoUpgrade samba-pythonUpgrade libsmbclientUpgrade python3-samba-testUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-winbind-clients-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-commonUpgrade samba-dcUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-common-toolsUpgrade libsmbclient-develUpgrade samba-libsUpgrade samba-debuginfoUpgrade samba-vfs-glusterfsUpgrade openchange-debugsourceUpgrade samba-python-testUpgrade samba-libs-debuginfoUpgrade samba-krb5-printingUpgrade samba-dc-libsUpgrade samba-common-tools-debuginfoUpgrade python3-sambaUpgrade samba-develUpgrade ctdb-tests-debuginfoUpgrade libwbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-client-debuginfoUpgrade samba-testUpgrade samba-clientUpgrade samba-test-libsUpgrade samba-test-libs-debuginfoUpgrade samba-debugsourceUpgrade samba-test-debuginfoUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade ctdb | Apr 29, 2020 | Jan 21, 2020 |
| Debian | — | Upgrade samba | May 31, 2021 | Jan 21, 2020 |
| Freebsd | — | Upgrade samba410Upgrade samba411 | Jan 27, 2020 | Jan 27, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-libsUpgrade samba-client-libsUpgrade samba-commonUpgrade sambaUpgrade samba-winbindUpgrade samba-pythonUpgrade libwbclient | Nov 3, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-common-libsUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-libsUpgrade samba-pythonUpgrade samba-commonUpgrade libwbclientUpgrade sambaUpgrade samba-winbind-modules | Sep 28, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-client-libsUpgrade libwbclientUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade samba-common-toolsUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-clientUpgrade sambaUpgrade samba-libsUpgrade samba-winbind-modules | Feb 24, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade sambaUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade libsmbclientUpgrade python3-samba-testUpgrade ctdbUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba-commonUpgrade python2-samba-testUpgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade samba-test-libsUpgrade samba-pidlUpgrade python3-sambaUpgrade samba-client-libsUpgrade samba-testUpgrade samba-krb5-printingUpgrade samba-libsUpgrade python2-sambaUpgrade libwbclientUpgrade ctdb-tests | Feb 26, 2020 | Jan 21, 2020 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Jan 21, 2020 |
| Oracle_linux | — | Upgrade ctdb-testsUpgrade samba-dcUpgrade libwbclient-develUpgrade samba-winbindUpgrade libwbclientUpgrade samba-winbind-modulesUpgrade samba-pythonUpgrade libsmbclientUpgrade sambaUpgrade samba-client-libsUpgrade python3-sambaUpgrade samba-pidlUpgrade samba-commonUpgrade openchangeUpgrade ctdbUpgrade samba-winbind-krb5-locatorUpgrade samba-dc-libsUpgrade samba-krb5-printingUpgrade samba-python-testUpgrade samba-common-toolsUpgrade samba-develUpgrade libsmbclient-develUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade samba-clientUpgrade samba-test-libsUpgrade samba-vfs-glusterfsUpgrade samba-common-libsUpgrade samba-testUpgrade python3-samba-test | Oct 7, 2020 | Jan 21, 2020 |
| Redhat_linux | — | Upgrade libwbclientUpgrade samba-vfs-glusterfsUpgrade samba-test-libs-debuginfoUpgrade samba-python-testUpgrade samba-debugsourceUpgrade libsmbclient-debuginfoUpgrade samba-testUpgrade ctdbUpgrade ctdb-debuginfoUpgrade samba-krb5-printingUpgrade ctdb-tests-debuginfoUpgrade samba-client-libsUpgrade libwbclient-debuginfoUpgrade samba-develUpgrade openchange-client-debuginfoUpgrade samba-test-debuginfoUpgrade ctdb-testsUpgrade samba-pidlUpgrade samba-common-tools-debuginfoUpgrade samba-vfs-glusterfs-debuginfoUpgrade sambaUpgrade python3-sambaUpgrade samba-dcUpgrade samba-commonUpgrade samba-debuginfoUpgrade samba-pythonUpgrade samba-winbind-modules-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-client-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-dc-libsUpgrade samba-common-toolsUpgrade python3-samba-debuginfoUpgrade samba-libsUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade libsmbclient-develUpgrade samba-winbind-debuginfoUpgrade openchange-debugsourceUpgrade openchange-debuginfoUpgrade openchangeUpgrade python3-samba-testUpgrade samba-winbindUpgrade samba-krb5-printing-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade libwbclient-develUpgrade samba-test-libsUpgrade samba-winbind-clients | Apr 29, 2020 | Jan 21, 2020 |
| Samba | — | Upgrade to Samba 4.11.5 or later.Upgrade to Samba 4.10.12 or later.Upgrade to Samba 4.9.18 or later. | Jan 24, 2020 | Jan 21, 2020 |
| Suse | — | Upgrade samba-ad-dc-32bitUpgrade libsamba-policy-develUpgrade libnetapi-develUpgrade samba-docUpgrade libndr-krb5pac0Upgrade libdcerpc0-32bitUpgrade libsmbclient0-32bitUpgrade libsamba-errors-develUpgrade samba-python3Upgrade samba-libs-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libndr-krb5pac-develUpgrade libwbclient-develUpgrade libsamba-policy-python3-develUpgrade libnetapi0-32bitUpgrade libsmbconf-develUpgrade samba-core-develUpgrade libsamba-policy-python-develUpgrade libsmbldap0Upgrade libsamba-errors0Upgrade libldb-develUpgrade libwbclient0-32bitUpgrade libndr-standard0Upgrade libsamba-util0Upgrade python-ldbUpgrade samba-pythonUpgrade samba-ad-dcUpgrade libtevent-util0Upgrade libndr-nbt0Upgrade samba-winbind-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-util-develUpgrade libldb1-32bitUpgrade samba-libs-python3Upgrade libdcerpc-develUpgrade sambaUpgrade libndr-nbt-develUpgrade ctdb-pcp-pmdaUpgrade libsmbclient0Upgrade libndr-develUpgrade libndr0-32bitUpgrade libdcerpc-binding0Upgrade libsamba-credentials0-32bitUpgrade libsamdb0Upgrade libsmbldap2Upgrade libsamba-errors0-32bitUpgrade samba-clientUpgrade libdcerpc0Upgrade libsmbldap0-32bitUpgrade libsamba-credentials-develUpgrade libdcerpc-samr0-32bitUpgrade samba-libs-pythonUpgrade python-ldb-develUpgrade samba-libs-python3-32bitUpgrade samba-winbindUpgrade libsamba-policy0-python3-32bitUpgrade libndr1-32bitUpgrade libndr-krb5pac0-32bitUpgrade samba-testUpgrade libnetapi0Upgrade samba-cephUpgrade libsamba-policy0-32bitUpgrade libsmbconf0Upgrade libldb1Upgrade libndr-nbt0-32bitUpgrade libsamdb0-32bitUpgrade libsamba-hostconfig0Upgrade libdcerpc-binding0-32bitUpgrade samba-libs-python-32bitUpgrade libsmbconf0-32bitUpgrade libndr-standard0-32bitUpgrade libwbclient0Upgrade ctdb-testsUpgrade libsamba-hostconfig-develUpgrade libsamdb-develUpgrade libsmbldap2-32bitUpgrade libsmbldap-develUpgrade samba-libsUpgrade libndr-standard-develUpgrade samba-pidlUpgrade libsamba-passdb0Upgrade libsamba-passdb0-32bitUpgrade ldb-toolsUpgrade libsamba-credentials0Upgrade libsamba-policy0-python3Upgrade libsamba-util0-32bitUpgrade libndr0Upgrade libtevent-util-develUpgrade libsamba-passdb-develUpgrade libndr1Upgrade libsmbclient-develUpgrade libdcerpc-samr0Upgrade ctdbUpgrade samba-dsdb-modulesUpgrade libtevent-util0-32bitUpgrade samba-client-32bitUpgrade libsamba-policy0 | Jan 22, 2020 | Jan 21, 2020 |
| Ubuntu | — | Upgrade samba | Mar 2, 2020 | Jan 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub