The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Samba from version 4.9.0 and before version 4.9.3 is vulnerable to a NULL pointer de-reference. During the processing of an DNS zone in the DNS management DCE/RPC server, the internal DNS server or the Samba DLZ plugin for BIND9, if the DSPROPERTY_ZONE_MASTER_SERVERS property or DSPROPERTY_ZONE_SCAVENGING_SERVERS property is set, the server will follow a NULL pointer and terminate. There is no further vulnerability associated with this issue, merely a denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 28, 2018 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Nov 28, 2018 |
| Freebsd | — | Upgrade samba46Upgrade samba49Upgrade samba47Upgrade samba48 | Nov 28, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Nov 28, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-krb5-printingUpgrade python3-sambaUpgrade python2-sambaUpgrade python2-samba-testUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade ctdb-testsUpgrade libwbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-testUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade sambaUpgrade samba-dc-libsUpgrade python3-samba-testUpgrade samba-test-libsUpgrade samba-common-libsUpgrade samba-commonUpgrade ctdbUpgrade samba-pidlUpgrade samba-winbind | Nov 19, 2019 | Nov 28, 2018 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4Upgrade service/network/samba to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Nov 28, 2018 |
| Samba | — | Upgrade to Samba version 4.9.3 | Dec 4, 2018 | Nov 28, 2018 |
| Suse | — | Upgrade libsamba-errors-develUpgrade samba-libs-32bitUpgrade samba-core-develUpgrade libndr0Upgrade libwbclient-develUpgrade samba-python3Upgrade libwbclient0Upgrade samba-winbindUpgrade libdcerpc-develUpgrade libndr-krb5pac0-32bitUpgrade libsamba-passdb0-32bitUpgrade samba-libsUpgrade libndr-standard0-32bitUpgrade libsamba-util-develUpgrade libdcerpc-binding0Upgrade libtevent-util0-32bitUpgrade libnetapi0Upgrade samba-libs-python3Upgrade libndr-nbt0Upgrade libndr0-32bitUpgrade libsamba-credentials-develUpgrade samba-docUpgrade libsmbldap2-32bitUpgrade libndr-krb5pac0Upgrade libtevent-util0Upgrade libnetapi-develUpgrade libsamba-errors0Upgrade sambaUpgrade libwbclient0-32bitUpgrade libsmbconf0-32bitUpgrade libsamdb0Upgrade libsmbldap-develUpgrade libndr-nbt-develUpgrade libtevent-util-develUpgrade libsmbconf0Upgrade libndr1Upgrade libsamba-hostconfig0Upgrade libsmbclient-develUpgrade samba-winbind-32bitUpgrade samba-cephUpgrade libsamba-hostconfig0-32bitUpgrade ctdbUpgrade libnetapi0-32bitUpgrade samba-client-32bitUpgrade libsamba-util0Upgrade libsmbconf-develUpgrade libsamba-hostconfig-develUpgrade libsamba-policy0-python3Upgrade libsamdb0-32bitUpgrade libsamba-credentials0-32bitUpgrade libsamba-credentials0Upgrade libsamba-errors0-32bitUpgrade samba-libs-python3-32bitUpgrade libdcerpc-samr0Upgrade libndr-standard-develUpgrade libsmbldap2Upgrade libsamba-util0-32bitUpgrade libsmbclient0-32bitUpgrade samba-dsdb-modulesUpgrade libsamba-passdb-develUpgrade libdcerpc0Upgrade libsamba-passdb0Upgrade libsamba-policy-develUpgrade libndr-krb5pac-develUpgrade libsamba-policy-python3-develUpgrade libdcerpc0-32bitUpgrade libndr-nbt0-32bitUpgrade libndr-develUpgrade samba-clientUpgrade libdcerpc-binding0-32bitUpgrade libsamdb-develUpgrade libsmbclient0Upgrade libndr-standard0Upgrade libndr1-32bitUpgrade libdcerpc-samr-devel | Dec 19, 2019 | Aug 14, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub