There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and all samba 4.11.x versions before 4.11.5, essentially due to a call to realloc() while other local variables still point at the original buffer.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Jan 21, 2020 |
| Debian | — | Upgrade samba | Sep 14, 2023 | Jan 21, 2020 |
| Freebsd | — | Upgrade samba410Upgrade samba411 | Jan 27, 2020 | Jan 27, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-samba-testUpgrade samba-client-libsUpgrade samba-libsUpgrade ctdb-testsUpgrade samba-testUpgrade samba-winbindUpgrade samba-pidlUpgrade libwbclientUpgrade python2-sambaUpgrade samba-krb5-printingUpgrade python3-sambaUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade python3-samba-testUpgrade samba-common-toolsUpgrade samba-dc-libsUpgrade libsmbclientUpgrade ctdbUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade samba-winbind-clientsUpgrade sambaUpgrade samba-common | Apr 21, 2020 | Jan 21, 2020 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Jan 21, 2020 |
| Samba | — | Upgrade to Samba 4.10.12 or later.Upgrade to Samba 4.11.5 or later.Upgrade to Samba 4.9.18 or later. | Jan 24, 2020 | Jan 21, 2020 |
| Suse | — | Upgrade libwbclient0-32bitUpgrade libsamba-policy0-python3-32bitUpgrade libsmbclient0Upgrade samba-libs-python3-32bitUpgrade libndr1-32bitUpgrade samba-pidlUpgrade ctdb-testsUpgrade libsmbconf0Upgrade libsmbldap2-32bitUpgrade libndr0Upgrade libsamba-util0Upgrade samba-core-develUpgrade libndr-krb5pac0-32bitUpgrade libnetapi0Upgrade libndr-standard-develUpgrade libsmbldap-develUpgrade libsamba-errors-develUpgrade libndr-develUpgrade samba-dsdb-modulesUpgrade libsamba-errors0-32bitUpgrade libdcerpc-develUpgrade libndr1Upgrade libldb1Upgrade samba-cephUpgrade libsmbconf-develUpgrade samba-testUpgrade samba-pythonUpgrade libsmbconf0-32bitUpgrade libndr-standard0-32bitUpgrade samba-ad-dcUpgrade ldb-toolsUpgrade libldb1-32bitUpgrade libdcerpc-binding0-32bitUpgrade libsamba-credentials0-32bitUpgrade libtevent-util0-32bitUpgrade libndr-nbt0-32bitUpgrade libdcerpc-samr0Upgrade libsamba-passdb-develUpgrade libsamba-hostconfig-develUpgrade libsamba-credentials0Upgrade libnetapi-develUpgrade libndr0-32bitUpgrade libsamba-passdb0-32bitUpgrade samba-libs-python3Upgrade python-ldb-develUpgrade samba-libs-32bitUpgrade libsamba-errors0Upgrade libdcerpc-samr0-32bitUpgrade ctdbUpgrade libsamba-policy0Upgrade libsamba-passdb0Upgrade samba-winbind-32bitUpgrade libndr-krb5pac-develUpgrade libndr-standard0Upgrade samba-libsUpgrade samba-docUpgrade libsmbclient-develUpgrade libdcerpc0Upgrade samba-clientUpgrade sambaUpgrade libsamba-credentials-develUpgrade libsamdb0-32bitUpgrade libtevent-util-develUpgrade libsamba-policy0-32bitUpgrade samba-libs-python-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-util0-32bitUpgrade samba-libs-pythonUpgrade libnetapi0-32bitUpgrade libsmbldap2Upgrade libsmbclient0-32bitUpgrade libwbclient0Upgrade samba-winbindUpgrade libndr-nbt-develUpgrade libsamba-policy-python3-develUpgrade samba-client-32bitUpgrade libdcerpc-samr-develUpgrade libsamdb-develUpgrade libndr-nbt0Upgrade libldb-develUpgrade libdcerpc0-32bitUpgrade samba-ad-dc-32bitUpgrade libsamdb0Upgrade libdcerpc-binding0Upgrade libsamba-policy-develUpgrade python-ldbUpgrade libsamba-hostconfig0Upgrade libsamba-policy-python-develUpgrade libsamba-util-develUpgrade libwbclient-develUpgrade libndr-krb5pac0Upgrade libsamba-policy0-python3Upgrade samba-python3Upgrade libtevent-util0Upgrade ctdb-pcp-pmda | Jan 30, 2020 | Jan 21, 2020 |
| Ubuntu | — | Upgrade samba | Mar 2, 2020 | Jan 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub