Samba from version 4.9.0 and before version 4.9.3 is vulnerable to a NULL pointer de-reference. During the processing of an DNS zone in the DNS management DCE/RPC server, the internal DNS server or the Samba DLZ plugin for BIND9, if the DSPROPERTY_ZONE_MASTER_SERVERS property or DSPROPERTY_ZONE_SCAVENGING_SERVERS property is set, the server will follow a NULL pointer and terminate. There is no further vulnerability associated with this issue, merely a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Nov 28, 2018 | |
| Debian | debian-upgrade-samba | Jul 30, 2024 | Nov 28, 2018 | |
| Freebsd | freebsd-upgrade-package-samba46freebsd-upgrade-package-samba47freebsd-upgrade-package-samba48freebsd-upgrade-package-samba49 | Nov 28, 2018 | Aug 14, 2018 | |
| Gentoo Linux | gentoo-linux-upgrade-net-fs-samba | Mar 27, 2020 | Nov 28, 2018 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-ctdbhuawei-euleros-2_0_sp8-upgrade-ctdb-testshuawei-euleros-2_0_sp8-upgrade-libsmbclienthuawei-euleros-2_0_sp8-upgrade-libwbclienthuawei-euleros-2_0_sp8-upgrade-python2-sambahuawei-euleros-2_0_sp8-upgrade-python2-samba-testhuawei-euleros-2_0_sp8-upgrade-python3-sambahuawei-euleros-2_0_sp8-upgrade-python3-samba-testhuawei-euleros-2_0_sp8-upgrade-sambahuawei-euleros-2_0_sp8-upgrade-samba-clienthuawei-euleros-2_0_sp8-upgrade-samba-client-libshuawei-euleros-2_0_sp8-upgrade-samba-commonhuawei-euleros-2_0_sp8-upgrade-samba-common-libshuawei-euleros-2_0_sp8-upgrade-samba-common-toolshuawei-euleros-2_0_sp8-upgrade-samba-dc-libshuawei-euleros-2_0_sp8-upgrade-samba-krb5-printinghuawei-euleros-2_0_sp8-upgrade-samba-libshuawei-euleros-2_0_sp8-upgrade-samba-pidlhuawei-euleros-2_0_sp8-upgrade-samba-testhuawei-euleros-2_0_sp8-upgrade-samba-test-libshuawei-euleros-2_0_sp8-upgrade-samba-winbindhuawei-euleros-2_0_sp8-upgrade-samba-winbind-clientshuawei-euleros-2_0_sp8-upgrade-samba-winbind-krb5-locatorhuawei-euleros-2_0_sp8-upgrade-samba-winbind-modules | Nov 19, 2019 | Nov 28, 2018 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-library-samba-libsmbclient-4-9-6-11-4-11-0-1-1-0oracle-solaris-11-4-upgrade-service-network-samba-4-9-6-11-4-11-0-1-1-0 | Nov 20, 2019 | Nov 28, 2018 | |
| Samba | samba-upgrade-4_9_3 | Dec 4, 2018 | Nov 28, 2018 | |
| Suse | — | suse-upgrade-ctdbsuse-upgrade-libdcerpc-binding0suse-upgrade-libdcerpc-binding0-32bitsuse-upgrade-libdcerpc-develsuse-upgrade-libdcerpc-samr-develsuse-upgrade-libdcerpc-samr0suse-upgrade-libdcerpc0suse-upgrade-libdcerpc0-32bitsuse-upgrade-libndr-develsuse-upgrade-libndr-krb5pac-develsuse-upgrade-libndr-krb5pac0suse-upgrade-libndr-krb5pac0-32bitsuse-upgrade-libndr-nbt-develsuse-upgrade-libndr-nbt0suse-upgrade-libndr-nbt0-32bitsuse-upgrade-libndr-standard-develsuse-upgrade-libndr-standard0suse-upgrade-libndr-standard0-32bitsuse-upgrade-libndr0suse-upgrade-libndr0-32bitsuse-upgrade-libndr1suse-upgrade-libndr1-32bitsuse-upgrade-libnetapi-develsuse-upgrade-libnetapi0suse-upgrade-libnetapi0-32bitsuse-upgrade-libsamba-credentials-develsuse-upgrade-libsamba-credentials0suse-upgrade-libsamba-credentials0-32bitsuse-upgrade-libsamba-errors-develsuse-upgrade-libsamba-errors0suse-upgrade-libsamba-errors0-32bitsuse-upgrade-libsamba-hostconfig-develsuse-upgrade-libsamba-hostconfig0suse-upgrade-libsamba-hostconfig0-32bitsuse-upgrade-libsamba-passdb-develsuse-upgrade-libsamba-passdb0suse-upgrade-libsamba-passdb0-32bitsuse-upgrade-libsamba-policy-develsuse-upgrade-libsamba-policy-python3-develsuse-upgrade-libsamba-policy0-python3suse-upgrade-libsamba-util-develsuse-upgrade-libsamba-util0suse-upgrade-libsamba-util0-32bitsuse-upgrade-libsamdb-develsuse-upgrade-libsamdb0suse-upgrade-libsamdb0-32bitsuse-upgrade-libsmbclient-develsuse-upgrade-libsmbclient0suse-upgrade-libsmbclient0-32bitsuse-upgrade-libsmbconf-develsuse-upgrade-libsmbconf0suse-upgrade-libsmbconf0-32bitsuse-upgrade-libsmbldap-develsuse-upgrade-libsmbldap2suse-upgrade-libsmbldap2-32bitsuse-upgrade-libtevent-util-develsuse-upgrade-libtevent-util0suse-upgrade-libtevent-util0-32bitsuse-upgrade-libwbclient-develsuse-upgrade-libwbclient0suse-upgrade-libwbclient0-32bitsuse-upgrade-sambasuse-upgrade-samba-cephsuse-upgrade-samba-clientsuse-upgrade-samba-client-32bitsuse-upgrade-samba-core-develsuse-upgrade-samba-docsuse-upgrade-samba-dsdb-modulessuse-upgrade-samba-libssuse-upgrade-samba-libs-32bitsuse-upgrade-samba-libs-python3suse-upgrade-samba-libs-python3-32bitsuse-upgrade-samba-python3suse-upgrade-samba-winbindsuse-upgrade-samba-winbind-32bit | Dec 19, 2019 | Aug 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub