A flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15, samba 4.10.10, samba 4.11.2, in the way it handles a user password change or a new password for a samba user. The Samba Active Directory Domain Controller can be configured to use a custom script to check for password complexity. This configuration can fail to verify password complexity when non-ASCII characters are used in the password, which could lead to weak passwords being set for samba users, making it vulnerable to dictionary attacks.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
- CVSS 3.0 Base Score: 4.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Nov 6, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 6, 2019 |
| Debian | — | Upgrade samba | May 31, 2021 | Nov 6, 2019 |
| Freebsd | — | Upgrade samba411Upgrade samba48Upgrade samba410 | Nov 1, 2019 | Oct 29, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libwbclientUpgrade samba-clientUpgrade samba-commonUpgrade samba-winbindUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade samba-client-libsUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade libsmbclient | Feb 22, 2021 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade sambaUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-pythonUpgrade libwbclientUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-client | Sep 28, 2020 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sambaUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-winbindUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-commonUpgrade libwbclientUpgrade samba-libsUpgrade samba-client-libs | Dec 11, 2019 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-winbindUpgrade samba-test-libsUpgrade python2-samba-testUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade python3-samba-testUpgrade samba-commonUpgrade python2-sambaUpgrade sambaUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-dc-libsUpgrade samba-winbind-modulesUpgrade samba-testUpgrade ctdb-testsUpgrade python3-sambaUpgrade samba-krb5-printingUpgrade samba-pidlUpgrade samba-libsUpgrade libwbclientUpgrade samba-client-libsUpgrade ctdb | Nov 28, 2019 | Nov 6, 2019 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Nov 6, 2019 |
| Samba | — | Upgrade to Samba 4.9.15 or later.Upgrade to Samba 4.11.2 or later.Upgrade to Samba 4.10.10 or later. | Nov 6, 2019 | Nov 6, 2019 |
| Suse | — | Upgrade libsamba-errors0Upgrade python-ldbUpgrade libsmbldap2Upgrade libtevent-util0Upgrade libdcerpc-samr0-32bitUpgrade libwbclient0-32bitUpgrade libsmbclient0-32bitUpgrade libndr-nbt0-32bitUpgrade samba-core-develUpgrade libsamba-passdb0-32bitUpgrade samba-docUpgrade libdcerpc-develUpgrade libsamba-passdb0Upgrade libnetapi0Upgrade libndr-krb5pac-develUpgrade libwbclient-develUpgrade libsmbldap-develUpgrade libndr-nbt0Upgrade ctdb-pcp-pmdaUpgrade samba-python3Upgrade libsmbldap2-32bitUpgrade libndr0-32bitUpgrade samba-pythonUpgrade libdcerpc0-32bitUpgrade samba-winbindUpgrade ctdb-testsUpgrade samba-libs-python3-32bitUpgrade libsamba-policy0Upgrade libsamba-errors-develUpgrade libdcerpc-binding0Upgrade sambaUpgrade samba-pidlUpgrade libtevent-util0-32bitUpgrade libsamba-credentials-develUpgrade samba-cephUpgrade libndr-krb5pac0Upgrade samba-winbind-32bitUpgrade libsamba-util0Upgrade libsamba-hostconfig0-32bitUpgrade libldb1-32bitUpgrade libsmbconf-develUpgrade samba-kdc-32bitUpgrade libsamba-policy-develUpgrade libdcerpc0Upgrade samba-ad-dcUpgrade libndr-standard0-32bitUpgrade libldb-develUpgrade samba-libs-python3Upgrade libsamdb0Upgrade libndr-nbt-develUpgrade libndr-develUpgrade libndr1-32bitUpgrade libsamba-passdb-develUpgrade samba-ad-dc-32bitUpgrade python-ldb-develUpgrade libsmbconf0Upgrade samba-clientUpgrade libsamba-hostconfig-develUpgrade libsamba-credentials0-32bitUpgrade samba-libs-32bitUpgrade libndr-standard0Upgrade libsmbconf0-32bitUpgrade libwbclient0Upgrade libsamba-errors0-32bitUpgrade samba-client-32bitUpgrade libnetapi0-32bitUpgrade libsmbclient-develUpgrade libsamba-policy0-32bitUpgrade libndr1Upgrade libdcerpc-binding0-32bitUpgrade libdcerpc-samr-develUpgrade libsmbclient0Upgrade samba-libsUpgrade ctdbUpgrade libdcerpc-samr0Upgrade samba-libs-pythonUpgrade libtevent-util-develUpgrade samba-testUpgrade libsamba-util0-32bitUpgrade ldb-toolsUpgrade libsamdb0-32bitUpgrade libldb1Upgrade libsamba-policy-python3-develUpgrade libndr-standard-develUpgrade libsamba-hostconfig0Upgrade libsamba-credentials0Upgrade libndr-krb5pac0-32bitUpgrade samba-dsdb-modulesUpgrade libndr0Upgrade libsamba-policy-python-develUpgrade libnetapi-develUpgrade libsamba-policy0-python3Upgrade libsamdb-develUpgrade samba-libs-python-32bitUpgrade samba-kdcUpgrade libsamba-util-develUpgrade libsamba-policy0-python3-32bit | Nov 6, 2019 | Oct 29, 2019 |
| Ubuntu | — | Upgrade libsmbclientUpgrade samba | Oct 30, 2019 | Oct 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub