There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and all samba 4.11.x versions before 4.11.5, essentially due to a call to realloc() while other local variables still point at the original buffer.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Jan 21, 2020 |
| Debian | — | Upgrade samba | Sep 14, 2023 | Jan 21, 2020 |
| Freebsd | — | Upgrade samba410Upgrade samba411 | Jan 27, 2020 | Jan 27, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libsmbclientUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-commonUpgrade samba-test-libsUpgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade samba-common-libsUpgrade ctdbUpgrade python3-samba-testUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade python2-samba-testUpgrade samba-testUpgrade libwbclientUpgrade samba-pidlUpgrade samba-client-libsUpgrade python3-sambaUpgrade python2-sambaUpgrade ctdb-testsUpgrade samba-winbindUpgrade samba-krb5-printingUpgrade samba-libs | Apr 21, 2020 | Jan 21, 2020 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Jan 21, 2020 |
| Samba | — | Upgrade to Samba 4.11.5 or later.Upgrade to Samba 4.9.18 or later.Upgrade to Samba 4.10.12 or later. | Jan 24, 2020 | Jan 21, 2020 |
| Suse | — | Upgrade libnetapi0-32bitUpgrade samba-libs-pythonUpgrade libsmbclient0-32bitUpgrade libndr-nbt-develUpgrade python-ldbUpgrade libsamba-policy0-32bitUpgrade libsamba-util0-32bitUpgrade libwbclient-develUpgrade libdcerpc-samr-develUpgrade libndr-nbt0Upgrade samba-docUpgrade libdcerpc-binding0Upgrade libdcerpc0Upgrade libdcerpc0-32bitUpgrade libsmbclient-develUpgrade samba-libsUpgrade samba-clientUpgrade sambaUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-policy-python-develUpgrade libsamdb0-32bitUpgrade libndr-standard0Upgrade libsamba-policy-develUpgrade libsamba-hostconfig0Upgrade libsamba-credentials-develUpgrade libsamdb0Upgrade libsamba-policy0-python3Upgrade libsamba-util-develUpgrade libldb-develUpgrade samba-ad-dc-32bitUpgrade libsamba-policy-python3-develUpgrade libsamba-policy0Upgrade libsamdb-develUpgrade libwbclient0Upgrade libsamba-passdb0Upgrade samba-winbindUpgrade libndr-krb5pac0Upgrade libsmbldap2Upgrade samba-client-32bitUpgrade samba-libs-python-32bitUpgrade libtevent-util-develUpgrade samba-python3Upgrade libndr-krb5pac-develUpgrade samba-winbind-32bitUpgrade libtevent-util0Upgrade ctdb-pcp-pmdaUpgrade libsamba-policy0-python3-32bitUpgrade libwbclient0-32bitUpgrade libsmbconf0Upgrade libsmbldap2-32bitUpgrade libndr1Upgrade samba-libs-32bitUpgrade libsamba-util0Upgrade libsamba-passdb-develUpgrade libsamba-credentials0-32bitUpgrade libdcerpc-samr0Upgrade libnetapi0Upgrade ctdbUpgrade libnetapi-develUpgrade libndr-nbt0-32bitUpgrade libtevent-util0-32bitUpgrade libndr-standard-develUpgrade libldb1Upgrade libsamba-hostconfig-develUpgrade libdcerpc-develUpgrade libldb1-32bitUpgrade libsmbconf0-32bitUpgrade libndr-standard0-32bitUpgrade libsamba-credentials0Upgrade samba-pythonUpgrade libndr-krb5pac0-32bitUpgrade libsmbconf-develUpgrade samba-core-develUpgrade python-ldb-develUpgrade samba-libs-python3-32bitUpgrade libndr0Upgrade libsmbclient0Upgrade ctdb-testsUpgrade libdcerpc-samr0-32bitUpgrade libsamba-errors0Upgrade libndr0-32bitUpgrade samba-libs-python3Upgrade libsamba-passdb0-32bitUpgrade samba-pidlUpgrade libsamba-errors0-32bitUpgrade libsmbldap-develUpgrade samba-testUpgrade samba-ad-dcUpgrade samba-dsdb-modulesUpgrade samba-cephUpgrade libndr-develUpgrade libsamba-errors-develUpgrade libdcerpc-binding0-32bitUpgrade libndr1-32bitUpgrade ldb-tools | Jan 30, 2020 | Jan 21, 2020 |
| Ubuntu | — | Upgrade samba | Mar 2, 2020 | Jan 21, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub