Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain Controller (AD DC) is configured, allows remote authenticated users to set the LDB userAccountControl UF_SERVER_TRUST_ACCOUNT bit, and consequently gain privileges, by leveraging delegation of authority for user-account or computer-account creation.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade samba | Jul 30, 2024 | Jan 17, 2015 |
| Freebsd | — | Upgrade samba41Upgrade samba4 | Dec 10, 2025 | Jan 16, 2015 |
| Samba | — | Upgrade to Samba version 4.1.16 | Jan 19, 2015 | Jan 16, 2015 |
| Suse | — | Upgrade samba-kdcUpgrade ctdbUpgrade samba-pythonUpgrade libsmbclient-raw0Upgrade samba-libsUpgrade libsamba-credentials0-32bitUpgrade libndr1Upgrade libgensec0Upgrade samba-winbind-32bitUpgrade libdcerpc-develUpgrade libsmbconf0Upgrade libsamba-policy-develUpgrade libsamba-credentials-develUpgrade libsamba-errors0-32bitUpgrade libtevent-util0-32bitUpgrade samba-docUpgrade samba-cephUpgrade samba-libs-python3Upgrade libsamba-policy0-python3Upgrade libtevent-util-develUpgrade libsmbconf0-32bitUpgrade libndr0Upgrade samba-libs-32bitUpgrade libsamba-util0-32bitUpgrade libsamba-hostconfig0Upgrade samba-32bitUpgrade libdcerpc0-32bitUpgrade libwbclient0Upgrade libsmbclient0Upgrade libsamdb0Upgrade libnetapi0Upgrade libdcerpc-binding0Upgrade libsamba-credentials0Upgrade libndr-standard0Upgrade libsmbclient0-32bitUpgrade samba-winbindUpgrade libndr-nbt-develUpgrade libsmbclient-develUpgrade libndr-nbt0Upgrade libndr-krb5pac0-32bitUpgrade libsamba-util-develUpgrade libsmbldap-develUpgrade libsmbldap0-32bitUpgrade sambaUpgrade libnetapi-develUpgrade libsmbldap2-32bitUpgrade libtevent-util0Upgrade libregistry0Upgrade libndr-develUpgrade libsamba-hostconfig-develUpgrade libsmbldap0Upgrade libdcerpc-samr0Upgrade libndr0-32bitUpgrade libdcerpc0Upgrade samba-dsdb-modulesUpgrade libwbclient-develUpgrade libregistry-develUpgrade libsmbldap2Upgrade libndr-standard-develUpgrade samba-core-develUpgrade libsmbconf-develUpgrade libdcerpc-atsvc0Upgrade samba-libs-python3-32bitUpgrade libsamba-errors0Upgrade libgensec0-32bitUpgrade libsamdb-develUpgrade libsamba-util0Upgrade libgensec-develUpgrade samba-python3Upgrade libdcerpc-atsvc-develUpgrade libndr-krb5pac0Upgrade samba-client-32bitUpgrade libsamba-passdb0-32bitUpgrade libsamba-policy0Upgrade libndr-krb5pac-develUpgrade libsamba-hostconfig0-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-passdb0Upgrade libsamba-errors-develUpgrade libnetapi0-32bitUpgrade samba-test-develUpgrade libndr1-32bitUpgrade libdcerpc-binding0-32bitUpgrade libndr-nbt0-32bitUpgrade libsamba-passdb-develUpgrade libndr-standard0-32bitUpgrade libsamba-policy-python3-develUpgrade samba-clientUpgrade libsmbclient-raw0-32bitUpgrade libsmbclient-raw-develUpgrade libwbclient0-32bitUpgrade libsamdb0-32bit | Dec 18, 2015 | Jan 16, 2015 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Jan 17, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub