A flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba handles certain requests as an Active Directory Domain Controller LDAP server, an unauthorized user can cause a stack overflow leading to a denial of service. The highest threat from this vulnerability is to system availability. This issue affects all samba versions before 4.10.15, before 4.11.8 and before 4.12.2.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | May 6, 2020 |
| Debian | — | Upgrade samba | Nov 24, 2020 | May 6, 2020 |
| Freebsd | — | Upgrade samba411Upgrade samba410Upgrade samba412 | Apr 30, 2020 | Apr 29, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Jul 28, 2020 | May 6, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-dc-libsUpgrade samba-commonUpgrade samba-libsUpgrade samba-krb5-printingUpgrade samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libsUpgrade samba-test-libsUpgrade samba-common-toolsUpgrade samba-pidlUpgrade sambaUpgrade python2-sambaUpgrade python3-samba-testUpgrade python3-sambaUpgrade ctdbUpgrade libsmbclientUpgrade python2-samba-testUpgrade libwbclientUpgrade samba-winbind-modulesUpgrade ctdb-testsUpgrade samba-client-libsUpgrade samba-winbind | Aug 31, 2020 | May 6, 2020 |
| Oracle Solaris | — | Upgrade service/network/ldap/openldap to version 2.4.50.0.0-11.4.22.0.1.69.4 on Solaris 11.4Upgrade system/network/ldap/openldap to version 2.4.50.0.0-11.4.22.0.1.69.4 on Solaris 11.4 | Jan 19, 2021 | May 6, 2020 |
| Samba | — | Upgrade to Samba 4.10.15 or later.Upgrade to Samba 4.12.2 or later.Upgrade to Samba 4.11.8 or later. | Jun 3, 2020 | May 6, 2020 |
| Suse | — | Upgrade libdcerpc-samr0-32bitUpgrade libndr-standard0Upgrade samba-libs-python3Upgrade libsmbldap2-32bitUpgrade libsamba-policy0-python3Upgrade samba-cephUpgrade libsmbconf0Upgrade samba-libs-pythonUpgrade libndr0Upgrade libdcerpc-binding0Upgrade samba-libsUpgrade libsmbldap2Upgrade libsamba-passdb-develUpgrade libnetapi-develUpgrade python3-ldb-32bitUpgrade samba-winbindUpgrade libsamba-policy-python-develUpgrade libwbclient0Upgrade libsamba-util0Upgrade libsamba-util0-32bitUpgrade libsamba-policy0-python3-32bitUpgrade samba-libs-python-32bitUpgrade libndr0-32bitUpgrade samba-pythonUpgrade samba-libs-32bitUpgrade libsamba-credentials-develUpgrade libsamba-hostconfig0Upgrade libsamba-errors-develUpgrade libsamba-credentials0-32bitUpgrade ctdbUpgrade libldb1-32bitUpgrade libsmbconf-develUpgrade libdcerpc-develUpgrade python-ldb-develUpgrade libnetapi0Upgrade libsmbclient0Upgrade libndr-krb5pac0-32bitUpgrade libsmbldap-develUpgrade libsmbclient-develUpgrade libsmbconf0-32bitUpgrade sambaUpgrade samba-client-32bitUpgrade samba-docUpgrade ldb-toolsUpgrade samba-winbind-32bitUpgrade libsamba-credentials0Upgrade libtevent-util0Upgrade libndr1Upgrade libndr-nbt0Upgrade libldb2Upgrade libsamba-util-develUpgrade python-ldbUpgrade libldb2-32bitUpgrade samba-pidlUpgrade libndr-standard-develUpgrade libtevent-util-develUpgrade libsamba-errors0-32bitUpgrade libsamba-policy-develUpgrade libsamdb0Upgrade libnetapi0-32bitUpgrade libwbclient0-32bitUpgrade samba-python3Upgrade libdcerpc-binding0-32bitUpgrade python3-ldb-develUpgrade samba-clientUpgrade libsamba-policy-python3-develUpgrade libsamba-hostconfig-develUpgrade libndr-krb5pac-develUpgrade libsamdb0-32bitUpgrade libsmbclient0-32bitUpgrade libndr-standard0-32bitUpgrade libsamba-passdb0-32bitUpgrade samba-libs-python3-32bitUpgrade libndr-krb5pac0Upgrade python3-ldbUpgrade libndr-nbt0-32bitUpgrade libndr-nbt-develUpgrade libsamba-errors0Upgrade libndr-develUpgrade samba-testUpgrade libndr1-32bitUpgrade libwbclient-develUpgrade samba-core-develUpgrade libsamba-policy0-32bitUpgrade ctdb-testsUpgrade samba-dsdb-modulesUpgrade samba-ad-dc-32bitUpgrade libdcerpc-samr-develUpgrade libdcerpc0Upgrade libsamdb-develUpgrade libldb1Upgrade libldb-develUpgrade libsamba-hostconfig0-32bitUpgrade samba-ad-dcUpgrade ctdb-pcp-pmdaUpgrade libnetapi-devel-32bitUpgrade libdcerpc-samr0Upgrade libdcerpc0-32bitUpgrade libtevent-util0-32bitUpgrade libsamba-policy0Upgrade libsamba-passdb0 | Apr 29, 2020 | Apr 28, 2020 |
| Ubuntu | — | Upgrade sambaUpgrade samba (Ubuntu Pro) | Apr 29, 2020 | Apr 28, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub