The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | Mar 13, 2016 |
| Debian | — | Upgrade samba | Mar 14, 2016 | Mar 12, 2016 |
| Samba | — | Upgrade to Samba version 4.3.6Upgrade to Samba version 4.2.9Upgrade to Samba version 4.4.0rc4Upgrade to Samba version 4.1.23 | Mar 24, 2016 | Mar 13, 2016 |
| Suse | — | Upgrade ctdbUpgrade libdcerpc-samr-develUpgrade libsamba-policy-python3-develUpgrade libsmbldap0-32bitUpgrade libsamba-policy0Upgrade samba-libs-32bitUpgrade libndr-nbt-develUpgrade samba-clientUpgrade samba-cephUpgrade libdcerpc0-32bitUpgrade samba-libsUpgrade samba-pythonUpgrade libsamba-credentials-develUpgrade libsmbldap2-32bitUpgrade libsamba-policy-develUpgrade libtevent-util0Upgrade libsamba-util-develUpgrade libsamba-util0-32bitUpgrade samba-libs-python3Upgrade libsmbclient0-32bitUpgrade libwbclient0Upgrade libsamdb0Upgrade libsamba-policy0-python3Upgrade libsamba-errors0-32bitUpgrade libndr-standard0Upgrade libsamba-credentials0Upgrade libtevent-util-develUpgrade samba-winbindUpgrade libndr-standard0-32bitUpgrade libndr-nbt0Upgrade sambaUpgrade samba-kdcUpgrade libsamba-hostconfig0Upgrade libnetapi0Upgrade libndr-krb5pac0-32bitUpgrade libdcerpc-binding0Upgrade libdcerpc-develUpgrade libsmbclient-develUpgrade samba-docUpgrade samba-winbind-32bitUpgrade libndr1-32bitUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc-samr0Upgrade libsmbconf0Upgrade libsmbconf-develUpgrade libsmbldap0Upgrade libnetapi-develUpgrade libsamba-passdb0-32bitUpgrade libsmbconf0-32bitUpgrade libsmbldap2Upgrade libsmbclient0Upgrade samba-dsdb-modulesUpgrade libndr0Upgrade libnetapi0-32bitUpgrade libsamba-util0Upgrade libsamba-hostconfig-develUpgrade libwbclient0-32bitUpgrade libwbclient-develUpgrade libdcerpc0Upgrade libndr-standard-develUpgrade libndr-develUpgrade libsamba-hostconfig0-32bitUpgrade libsamdb0-32bitUpgrade samba-libs-python3-32bitUpgrade libsamdb-develUpgrade libsamba-passdb-develUpgrade libndr0-32bitUpgrade libndr-krb5pac-develUpgrade libsamba-errors-develUpgrade libsamba-credentials0-32bitUpgrade libndr1Upgrade libtevent-util0-32bitUpgrade samba-python3Upgrade libsamba-errors0Upgrade libsamba-passdb0Upgrade libndr-krb5pac0Upgrade samba-core-develUpgrade libndr-nbt0-32bitUpgrade libsmbldap-develUpgrade samba-client-32bit | Mar 22, 2016 | Mar 13, 2016 |
| Ubuntu | — | Upgrade swatUpgrade samba | Mar 13, 2016 | Mar 8, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub