Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card authentication, Samba's KDC will call talloc_free() twice on the same memory if the principal in a validly signed certificate does not match the principal in the AS-REQ. This is only possible after authentication with a trusted certificate. talloc is robust against further corruption from a double-free with talloc_free() and directly calls abort(), terminating the KDC process.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 5.7
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Feb 20, 2019 | Nov 28, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 28, 2018 |
| Debian | — | Upgrade samba | Nov 28, 2018 | Aug 14, 2018 |
| Freebsd | — | Upgrade samba47Upgrade samba48Upgrade samba49Upgrade samba46 | Nov 28, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Nov 28, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-winbind-modulesUpgrade samba-libsUpgrade python3-samba-testUpgrade python3-sambaUpgrade samba-pidlUpgrade libsmbclientUpgrade samba-commonUpgrade samba-winbindUpgrade python2-sambaUpgrade ctdbUpgrade sambaUpgrade ctdb-testsUpgrade samba-common-libsUpgrade libwbclientUpgrade samba-dc-libsUpgrade samba-test-libsUpgrade samba-winbind-clientsUpgrade samba-krb5-printingUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-testUpgrade samba-winbind-krb5-locator | Jul 26, 2019 | Nov 28, 2018 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Nov 28, 2018 |
| Samba | — | Upgrade to Samba version 4.7.12Upgrade to Samba version 4.8.7Upgrade to Samba version 4.9.3 | Dec 4, 2018 | Nov 28, 2018 |
| Suse | — | Upgrade samba-pythonUpgrade libsmbclient0-32bitUpgrade ctdbUpgrade samba-docUpgrade libtevent-util-develUpgrade libdcerpc0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libndr-standard0Upgrade samba-winbind-32bitUpgrade libsamba-credentials-develUpgrade libsamba-policy0-python3Upgrade libsmbldap2-32bitUpgrade libdcerpc-develUpgrade libndr-nbt-develUpgrade libwbclient0Upgrade libdcerpc-binding0Upgrade libsmbclient-develUpgrade libndr-standard0-32bitUpgrade libtevent-util0Upgrade libsamba-util0-32bitUpgrade libsamba-util-develUpgrade libsamba-hostconfig0Upgrade libsamba-policy0Upgrade libsamba-policy-python3-develUpgrade libdcerpc-samr-develUpgrade samba-dsdb-modulesUpgrade libndr-nbt0Upgrade sambaUpgrade libnetapi0Upgrade samba-libs-32bitUpgrade samba-libsUpgrade samba-winbindUpgrade samba-cephUpgrade libsamba-policy-develUpgrade libsamba-errors0-32bitUpgrade libsamba-credentials0Upgrade samba-libs-python3Upgrade libnetapi0-32bitUpgrade samba-clientUpgrade libsamba-passdb-develUpgrade samba-client-32bitUpgrade samba-libs-python3-32bitUpgrade libdcerpc-binding0-32bitUpgrade libndr0Upgrade libsamba-passdb0Upgrade libsmbclient0Upgrade libdcerpc0Upgrade libndr-standard-develUpgrade libsamdb0-32bitUpgrade libndr-nbt0-32bitUpgrade libsmbconf0Upgrade libndr-krb5pac-develUpgrade libndr0-32bitUpgrade libwbclient-develUpgrade libsmbconf-develUpgrade libndr-krb5pac0Upgrade libndr1Upgrade libsamba-util0Upgrade libsmbconf0-32bitUpgrade libdcerpc-samr0Upgrade samba-python3Upgrade libsamdb0Upgrade libndr-develUpgrade libwbclient0-32bitUpgrade libsamba-errors-develUpgrade libsamba-passdb0-32bitUpgrade samba-core-develUpgrade libsamdb-develUpgrade libsamba-credentials0-32bitUpgrade libsamba-errors0Upgrade libsamba-hostconfig-develUpgrade libsamba-hostconfig0-32bitUpgrade libsmbldap-develUpgrade libsmbldap2Upgrade libndr1-32bitUpgrade libtevent-util0-32bitUpgrade libnetapi-devel | Dec 19, 2019 | Aug 14, 2018 |
| Ubuntu | — | Upgrade samba | Dec 4, 2018 | Aug 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub