A flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15, samba 4.10.10, samba 4.11.2, in the way it handles a user password change or a new password for a samba user. The Samba Active Directory Domain Controller can be configured to use a custom script to check for password complexity. This configuration can fail to verify password complexity when non-ASCII characters are used in the password, which could lead to weak passwords being set for samba users, making it vulnerable to dictionary attacks.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
- CVSS 3.0 Base Score: 4.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Nov 6, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 6, 2019 |
| Debian | — | Upgrade samba | May 31, 2021 | Nov 6, 2019 |
| Freebsd | — | Upgrade samba411Upgrade samba410Upgrade samba48 | Nov 1, 2019 | Oct 29, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-libsUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-libsUpgrade samba-winbindUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade samba-commonUpgrade samba-client | Feb 22, 2021 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-client-libsUpgrade libsmbclientUpgrade sambaUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade samba-pythonUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-common | Sep 28, 2020 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-libsUpgrade libwbclientUpgrade samba-client-libsUpgrade sambaUpgrade samba-pythonUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-client | Dec 11, 2019 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-testUpgrade ctdbUpgrade libwbclientUpgrade samba-libsUpgrade samba-pidlUpgrade ctdb-testsUpgrade samba-krb5-printingUpgrade samba-client-libsUpgrade python3-sambaUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba-commonUpgrade python3-samba-testUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba-common-toolsUpgrade samba-clientUpgrade python2-sambaUpgrade libsmbclientUpgrade python2-samba-testUpgrade samba-dc-libsUpgrade sambaUpgrade samba-test-libsUpgrade samba-winbind-modules | Nov 28, 2019 | Nov 6, 2019 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Nov 6, 2019 |
| Samba | — | Upgrade to Samba 4.9.15 or later.Upgrade to Samba 4.10.10 or later.Upgrade to Samba 4.11.2 or later. | Nov 6, 2019 | Nov 6, 2019 |
| Suse | — | Upgrade samba-kdcUpgrade ctdbUpgrade libwbclient0Upgrade libsamba-passdb-develUpgrade python-ldb-develUpgrade libsamba-policy-python-develUpgrade libsmbconf0Upgrade libsamba-errors0-32bitUpgrade libsamba-credentials0Upgrade libsmbconf0-32bitUpgrade samba-dsdb-modulesUpgrade libnetapi-develUpgrade libndr-krb5pac0-32bitUpgrade samba-libsUpgrade samba-ad-dc-32bitUpgrade samba-libs-pythonUpgrade libsamba-util0-32bitUpgrade libdcerpc-samr-develUpgrade libsmbclient0Upgrade libsamba-hostconfig0Upgrade libldb1Upgrade libsamdb0-32bitUpgrade libndr0Upgrade samba-testUpgrade libsamba-policy0-python3Upgrade libsamba-credentials0-32bitUpgrade samba-clientUpgrade libsamba-util-develUpgrade libsamba-policy0-32bitUpgrade libsamba-policy0-python3-32bitUpgrade libdcerpc-binding0-32bitUpgrade libsamba-policy-python3-develUpgrade libndr1Upgrade libsamba-hostconfig-develUpgrade libndr-standard-develUpgrade libsamdb-develUpgrade samba-libs-python-32bitUpgrade libsmbclient-develUpgrade libnetapi0-32bitUpgrade libndr-standard0Upgrade ldb-toolsUpgrade samba-client-32bitUpgrade samba-libs-32bitUpgrade libtevent-util-develUpgrade libdcerpc-samr0Upgrade python-ldbUpgrade libsamba-util0Upgrade libldb1-32bitUpgrade samba-winbind-32bitUpgrade libsamba-credentials-develUpgrade samba-cephUpgrade libndr-krb5pac0Upgrade samba-pidlUpgrade libtevent-util0-32bitUpgrade samba-core-develUpgrade libsmbclient0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libdcerpc-samr0-32bitUpgrade libsmbldap2Upgrade libndr-nbt0Upgrade samba-python3Upgrade ctdb-pcp-pmdaUpgrade libwbclient-develUpgrade libndr-krb5pac-develUpgrade libsmbldap-develUpgrade libnetapi0Upgrade libsamba-errors-develUpgrade samba-winbindUpgrade libsamba-policy0Upgrade samba-kdc-32bitUpgrade libsmbconf-develUpgrade sambaUpgrade libsamba-errors0Upgrade samba-docUpgrade libtevent-util0Upgrade libndr0-32bitUpgrade samba-libs-python3-32bitUpgrade libsmbldap2-32bitUpgrade samba-pythonUpgrade libdcerpc-develUpgrade libsamba-passdb0-32bitUpgrade libwbclient0-32bitUpgrade libndr-nbt-develUpgrade libsamdb0Upgrade libndr1-32bitUpgrade samba-ad-dcUpgrade libsamba-policy-develUpgrade libndr-standard0-32bitUpgrade libndr-develUpgrade libdcerpc0Upgrade libldb-develUpgrade libdcerpc0-32bitUpgrade samba-libs-python3Upgrade libdcerpc-binding0Upgrade libsamba-passdb0Upgrade ctdb-testsUpgrade libndr-nbt0-32bit | Nov 6, 2019 | Oct 29, 2019 |
| Ubuntu | — | Upgrade sambaUpgrade libsmbclient | Oct 30, 2019 | Oct 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub