Samba from version 4.9.0 and before version 4.9.3 is vulnerable to a NULL pointer de-reference. During the processing of an DNS zone in the DNS management DCE/RPC server, the internal DNS server or the Samba DLZ plugin for BIND9, if the DSPROPERTY_ZONE_MASTER_SERVERS property or DSPROPERTY_ZONE_SCAVENGING_SERVERS property is set, the server will follow a NULL pointer and terminate. There is no further vulnerability associated with this issue, merely a denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 28, 2018 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Nov 28, 2018 |
| Freebsd | — | Upgrade samba48Upgrade samba49Upgrade samba47Upgrade samba46 | Nov 28, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Nov 28, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-testUpgrade libwbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade python3-sambaUpgrade samba-krb5-printingUpgrade python2-samba-testUpgrade samba-clientUpgrade ctdb-testsUpgrade libsmbclientUpgrade samba-libsUpgrade python2-sambaUpgrade samba-common-toolsUpgrade ctdbUpgrade python3-samba-testUpgrade samba-test-libsUpgrade samba-winbindUpgrade samba-commonUpgrade samba-pidlUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade samba-common-libs | Nov 19, 2019 | Nov 28, 2018 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Nov 28, 2018 |
| Samba | — | Upgrade to Samba version 4.9.3 | Dec 4, 2018 | Nov 28, 2018 |
| Suse | — | Upgrade libsmbclient0-32bitUpgrade libnetapi0-32bitUpgrade samba-dsdb-modulesUpgrade libndr1-32bitUpgrade libdcerpc0Upgrade libsamba-passdb-develUpgrade libsamba-util0-32bitUpgrade libndr-standard0Upgrade libndr-nbt0-32bitUpgrade libndr-standard-develUpgrade samba-libs-python3-32bitUpgrade libsmbclient0Upgrade libsmbconf-develUpgrade libsamba-util0Upgrade samba-clientUpgrade libdcerpc-binding0-32bitUpgrade libsamdb-develUpgrade libndr-develUpgrade libsamba-policy-develUpgrade libsamdb0-32bitUpgrade libsamba-credentials0-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-passdb0Upgrade libndr-krb5pac-develUpgrade samba-client-32bitUpgrade libdcerpc0-32bitUpgrade libsamba-policy-python3-develUpgrade libdcerpc-samr0Upgrade libsamba-hostconfig-develUpgrade libsamba-credentials0Upgrade libsmbldap2Upgrade libsamba-policy0-python3Upgrade libsamba-errors0-32bitUpgrade samba-libs-32bitUpgrade samba-docUpgrade libndr0-32bitUpgrade libtevent-util0Upgrade libsamba-hostconfig0-32bitUpgrade libndr-standard0-32bitUpgrade libnetapi-develUpgrade libsmbconf0-32bitUpgrade libndr-nbt0Upgrade libndr-nbt-develUpgrade libndr-krb5pac0Upgrade ctdbUpgrade libsmbldap2-32bitUpgrade libwbclient0-32bitUpgrade libsamba-credentials-develUpgrade samba-core-develUpgrade libdcerpc-develUpgrade samba-python3Upgrade libsmbldap-develUpgrade sambaUpgrade samba-cephUpgrade samba-winbind-32bitUpgrade samba-libsUpgrade libsamdb0Upgrade libsamba-errors0Upgrade samba-winbindUpgrade libndr1Upgrade libsamba-errors-develUpgrade libndr-krb5pac0-32bitUpgrade libsmbclient-develUpgrade libdcerpc-binding0Upgrade samba-libs-python3Upgrade libndr0Upgrade libsamba-hostconfig0Upgrade libtevent-util0-32bitUpgrade libtevent-util-develUpgrade libsamba-passdb0-32bitUpgrade libnetapi0Upgrade libsamba-util-develUpgrade libwbclient-develUpgrade libsmbconf0Upgrade libwbclient0 | Dec 19, 2019 | Aug 14, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub