A flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15, samba 4.10.10, samba 4.11.2, in the way it handles a user password change or a new password for a samba user. The Samba Active Directory Domain Controller can be configured to use a custom script to check for password complexity. This configuration can fail to verify password complexity when non-ASCII characters are used in the password, which could lead to weak passwords being set for samba users, making it vulnerable to dictionary attacks.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
- CVSS 3.0 Base Score: 4.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Nov 6, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 6, 2019 |
| Debian | — | Upgrade samba | May 31, 2021 | Nov 6, 2019 |
| Freebsd | — | Upgrade samba48Upgrade samba410Upgrade samba411 | Nov 1, 2019 | Oct 29, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libwbclientUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade sambaUpgrade samba-winbindUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-clientUpgrade samba-common-libsUpgrade libsmbclient | Feb 22, 2021 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-winbind-modulesUpgrade libwbclientUpgrade samba-pythonUpgrade samba-winbindUpgrade samba-client-libsUpgrade libsmbclientUpgrade samba-libsUpgrade sambaUpgrade samba-clientUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-common-tools | Sep 28, 2020 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-libsUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-commonUpgrade samba-pythonUpgrade sambaUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-common-toolsUpgrade libsmbclient | Dec 11, 2019 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ctdbUpgrade python3-sambaUpgrade samba-client-libsUpgrade samba-krb5-printingUpgrade ctdb-testsUpgrade libwbclientUpgrade samba-libsUpgrade samba-testUpgrade samba-pidlUpgrade samba-test-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade python3-samba-testUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-clientUpgrade python2-sambaUpgrade python2-samba-testUpgrade samba-dc-libsUpgrade sambaUpgrade samba-common-tools | Nov 28, 2019 | Nov 6, 2019 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Nov 6, 2019 |
| Samba | — | Upgrade to Samba 4.10.10 or later.Upgrade to Samba 4.11.2 or later.Upgrade to Samba 4.9.15 or later. | Nov 6, 2019 | Nov 6, 2019 |
| Suse | — | Upgrade libsamba-credentials0-32bitUpgrade libwbclient0Upgrade libsamba-policy0-32bitUpgrade samba-libs-32bitUpgrade libsamba-policy0-python3-32bitUpgrade samba-clientUpgrade samba-testUpgrade libsamba-hostconfig0Upgrade libsamba-policy-python3-develUpgrade libsamba-errors0-32bitUpgrade libsamba-passdb-develUpgrade samba-dsdb-modulesUpgrade libsmbconf0Upgrade libsamba-util-develUpgrade python-ldb-develUpgrade libndr-standard-develUpgrade samba-ad-dc-32bitUpgrade libnetapi0-32bitUpgrade libsmbclient-develUpgrade libsamba-credentials0Upgrade libsamdb-develUpgrade libndr-standard0Upgrade libldb1Upgrade libsmbconf0-32bitUpgrade samba-libsUpgrade libsamba-util0-32bitUpgrade samba-kdcUpgrade samba-libs-pythonUpgrade samba-libs-python-32bitUpgrade libdcerpc-samr0Upgrade samba-client-32bitUpgrade libnetapi-develUpgrade libndr-krb5pac0-32bitUpgrade libsamdb0-32bitUpgrade ctdbUpgrade libtevent-util-develUpgrade ldb-toolsUpgrade libsmbclient0Upgrade libndr1Upgrade libdcerpc-samr-develUpgrade libndr0Upgrade libsamba-policy0-python3Upgrade libdcerpc-binding0-32bitUpgrade libsamba-hostconfig-develUpgrade libsamba-policy-python-develUpgrade samba-pythonUpgrade libsmbconf-develUpgrade samba-cephUpgrade libsamba-util0Upgrade libldb-develUpgrade libnetapi0Upgrade libndr-nbt0Upgrade libndr-krb5pac-develUpgrade ctdb-pcp-pmdaUpgrade libwbclient-develUpgrade libsmbldap-develUpgrade samba-python3Upgrade samba-pidlUpgrade libndr-krb5pac0Upgrade samba-docUpgrade libndr-nbt0-32bitUpgrade libtevent-util0-32bitUpgrade libsamba-passdb0-32bitUpgrade libldb1-32bitUpgrade samba-winbind-32bitUpgrade libsamba-credentials-develUpgrade ctdb-testsUpgrade samba-libs-python3-32bitUpgrade samba-winbindUpgrade libsamba-errors0Upgrade libdcerpc0-32bitUpgrade libsamba-errors-develUpgrade libsamba-policy0Upgrade libndr-standard0-32bitUpgrade samba-ad-dcUpgrade libsmbclient0-32bitUpgrade libndr0-32bitUpgrade libsmbldap2-32bitUpgrade libndr-nbt-develUpgrade libdcerpc-binding0Upgrade libdcerpc-develUpgrade libwbclient0-32bitUpgrade libsmbldap2Upgrade libsamba-passdb0Upgrade libsamba-hostconfig0-32bitUpgrade python-ldbUpgrade libdcerpc-samr0-32bitUpgrade libndr1-32bitUpgrade libdcerpc0Upgrade samba-libs-python3Upgrade libsamba-policy-develUpgrade sambaUpgrade libsamdb0Upgrade libndr-develUpgrade libtevent-util0Upgrade samba-core-develUpgrade samba-kdc-32bit | Nov 6, 2019 | Oct 29, 2019 |
| Ubuntu | — | Upgrade libsmbclientUpgrade samba | Oct 30, 2019 | Oct 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub