A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sambaUpgrade heimdal | Mar 26, 2024 | Oct 12, 2021 |
| Debian | — | Upgrade sambaUpgrade heimdal | Nov 24, 2022 | Oct 12, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libwbclientUpgrade sambaUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-clientUpgrade libsmbclient | Feb 28, 2022 | Oct 12, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-winbindUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade samba-pythonUpgrade libsmbclientUpgrade samba-commonUpgrade samba-client-libsUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-client | Feb 24, 2022 | Oct 12, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-commonUpgrade samba-pythonUpgrade sambaUpgrade libsmbclientUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-clientUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba-winbind-clients | Mar 2, 2022 | Oct 12, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-common-toolsUpgrade samba-libsUpgrade samba-commonUpgrade libwbclientUpgrade samba-clientUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-winbind | Jan 28, 2022 | Oct 12, 2021 |
| Suse | — | Upgrade libgssapi3Upgrade libhx509-5Upgrade libkadm5clnt7Upgrade libsl0Upgrade libheimedit0Upgrade libkdc2Upgrade libhdb9Upgrade libkrb5-26Upgrade libkafs0Upgrade libhcrypto4Upgrade libheimntlm0Upgrade libasn1-8Upgrade libroken18Upgrade libheimbase1Upgrade libkadm5srv8Upgrade libotp0Upgrade libheimdal-develUpgrade libwind0 | Jan 17, 2023 | Oct 12, 2021 |
| Ubuntu | — | Upgrade libgssapi3-heimdalUpgrade heimdal-kdc (Ubuntu Pro)Upgrade heimdal-kcmUpgrade heimdal-serversUpgrade libkrb5-26-heimdal (Ubuntu Pro)Upgrade heimdal-kcm (Ubuntu Pro)Upgrade libkrb5-26-heimdalUpgrade heimdal-servers (Ubuntu Pro)Upgrade heimdal-clientsUpgrade libgssapi3-heimdal (Ubuntu Pro)Upgrade libkdc2-heimdal (Ubuntu Pro)Upgrade heimdal-kdcUpgrade heimdal-servers-x (Ubuntu Pro)Upgrade heimdal-clients (Ubuntu Pro)Upgrade libkdc2-heimdalUpgrade heimdal-clients-x (Ubuntu Pro)Upgrade samba | Nov 12, 2021 | Oct 12, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub