Samba from version 4.9.0 and before version 4.9.3 is vulnerable to a NULL pointer de-reference. During the processing of an DNS zone in the DNS management DCE/RPC server, the internal DNS server or the Samba DLZ plugin for BIND9, if the DSPROPERTY_ZONE_MASTER_SERVERS property or DSPROPERTY_ZONE_SCAVENGING_SERVERS property is set, the server will follow a NULL pointer and terminate. There is no further vulnerability associated with this issue, merely a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 28, 2018 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Nov 28, 2018 |
| Freebsd | — | Upgrade samba48Upgrade samba49Upgrade samba46Upgrade samba47 | Nov 28, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Nov 28, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-common-libsUpgrade samba-test-libsUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade sambaUpgrade samba-pidlUpgrade samba-commonUpgrade python3-samba-testUpgrade ctdbUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade python2-samba-testUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-winbind-krb5-locatorUpgrade python2-sambaUpgrade samba-testUpgrade ctdb-testsUpgrade samba-clientUpgrade samba-krb5-printingUpgrade samba-libsUpgrade python3-samba | Nov 19, 2019 | Nov 28, 2018 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4Upgrade service/network/samba to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Nov 28, 2018 |
| Samba | — | Upgrade to Samba version 4.9.3 | Dec 4, 2018 | Nov 28, 2018 |
| Suse | — | Upgrade libndr-standard0-32bitUpgrade libnetapi0Upgrade ctdbUpgrade libtevent-util0-32bitUpgrade samba-libsUpgrade samba-cephUpgrade samba-winbind-32bitUpgrade libsmbconf0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libndr-nbt-develUpgrade libsamba-errors0Upgrade libsamdb0Upgrade libwbclient-develUpgrade libsamba-util-develUpgrade samba-libs-python3Upgrade samba-docUpgrade libndr-krb5pac0-32bitUpgrade libsamba-hostconfig0Upgrade libndr0Upgrade libsmbclient-develUpgrade libtevent-util-develUpgrade libwbclient0-32bitUpgrade samba-python3Upgrade libtevent-util0Upgrade libwbclient0Upgrade libndr-nbt0Upgrade sambaUpgrade libnetapi-develUpgrade libdcerpc-binding0Upgrade libndr-krb5pac0Upgrade libsamba-errors-develUpgrade samba-libs-32bitUpgrade libdcerpc-develUpgrade libndr1Upgrade libsamba-credentials-develUpgrade libsmbconf0Upgrade libsamba-passdb0-32bitUpgrade libndr0-32bitUpgrade libsmbldap2-32bitUpgrade samba-winbindUpgrade libsmbldap-develUpgrade samba-core-develUpgrade libsamba-policy0-python3Upgrade samba-clientUpgrade libdcerpc-samr0Upgrade libsmbconf-develUpgrade libndr-develUpgrade libndr-standard-develUpgrade libndr-nbt0-32bitUpgrade libsamdb-develUpgrade libsmbldap2Upgrade libsmbclient0Upgrade libsamdb0-32bitUpgrade libsamba-passdb0Upgrade samba-client-32bitUpgrade libsamba-hostconfig-develUpgrade libndr-standard0Upgrade libndr1-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-util0Upgrade libsmbclient0-32bitUpgrade libdcerpc-binding0-32bitUpgrade samba-dsdb-modulesUpgrade libnetapi0-32bitUpgrade libsamba-passdb-develUpgrade libsamba-util0-32bitUpgrade libsamba-credentials0Upgrade libndr-krb5pac-develUpgrade libsamba-policy-python3-develUpgrade libdcerpc0Upgrade libdcerpc0-32bitUpgrade libsamba-policy-develUpgrade samba-libs-python3-32bitUpgrade libsamba-credentials0-32bitUpgrade libsamba-errors0-32bit | Dec 19, 2019 | Aug 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub