A flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15, samba 4.10.10, samba 4.11.2, in the way it handles a user password change or a new password for a samba user. The Samba Active Directory Domain Controller can be configured to use a custom script to check for password complexity. This configuration can fail to verify password complexity when non-ASCII characters are used in the password, which could lead to weak passwords being set for samba users, making it vulnerable to dictionary attacks.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
- CVSS 3.0 Base Score: 4.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Nov 6, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 6, 2019 |
| Debian | — | Upgrade samba | May 31, 2021 | Nov 6, 2019 |
| Freebsd | — | Upgrade samba48Upgrade samba410Upgrade samba411 | Nov 1, 2019 | Oct 29, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-libsUpgrade libsmbclientUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-libsUpgrade sambaUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade libwbclient | Feb 22, 2021 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-common-libsUpgrade samba-clientUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade sambaUpgrade libsmbclientUpgrade samba-libsUpgrade libwbclientUpgrade samba-pythonUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-winbind-modules | Sep 28, 2020 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libwbclientUpgrade samba-libsUpgrade samba-client-libsUpgrade sambaUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-python | Dec 11, 2019 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-libsUpgrade ctdbUpgrade python3-sambaUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-krb5-printingUpgrade samba-pidlUpgrade samba-testUpgrade ctdb-testsUpgrade samba-clientUpgrade python2-sambaUpgrade sambaUpgrade samba-common-libsUpgrade python3-samba-testUpgrade samba-winbind-clientsUpgrade python2-samba-testUpgrade samba-test-libsUpgrade samba-common-toolsUpgrade samba-dc-libsUpgrade samba-winbindUpgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba-commonUpgrade samba-winbind-modules | Nov 28, 2019 | Nov 6, 2019 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Nov 6, 2019 |
| Samba | — | Upgrade to Samba 4.10.10 or later.Upgrade to Samba 4.11.2 or later.Upgrade to Samba 4.9.15 or later. | Nov 6, 2019 | Nov 6, 2019 |
| Suse | — | Upgrade libdcerpc-samr0Upgrade libndr-krb5pac0-32bitUpgrade samba-libs-pythonUpgrade libsmbclient0Upgrade ldb-toolsUpgrade samba-kdcUpgrade libsamba-util0-32bitUpgrade samba-libs-32bitUpgrade libnetapi-develUpgrade libsamdb0-32bitUpgrade ctdbUpgrade libtevent-util-develUpgrade samba-libsUpgrade samba-client-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-policy0-python3Upgrade libnetapi0-32bitUpgrade libsamba-hostconfig-develUpgrade samba-libs-python-32bitUpgrade libsamba-util-develUpgrade libsamba-credentials0-32bitUpgrade samba-testUpgrade samba-clientUpgrade libsamba-policy-python3-develUpgrade libwbclient0Upgrade libsmbconf0-32bitUpgrade libldb1Upgrade libsamba-hostconfig0Upgrade libsmbclient-develUpgrade libsamba-passdb-develUpgrade libndr1Upgrade libndr-standard0Upgrade libsamba-credentials0Upgrade libsamba-policy0-python3-32bitUpgrade libsamba-policy-python-develUpgrade samba-dsdb-modulesUpgrade libsamdb-develUpgrade libndr0Upgrade libdcerpc-binding0-32bitUpgrade libndr-standard-develUpgrade libsamba-policy0-32bitUpgrade python-ldb-develUpgrade samba-ad-dc-32bitUpgrade libsmbconf0Upgrade libsamba-errors0-32bitUpgrade libtevent-util0-32bitUpgrade libtevent-util0Upgrade libndr-standard0-32bitUpgrade samba-pidlUpgrade libsamba-passdb0-32bitUpgrade libsamba-util0Upgrade samba-cephUpgrade samba-docUpgrade libsamba-credentials-develUpgrade python-ldbUpgrade samba-core-develUpgrade samba-winbind-32bitUpgrade libsamba-passdb0Upgrade libsamba-policy0Upgrade libdcerpc0-32bitUpgrade libdcerpc0Upgrade libldb-develUpgrade libsamdb0Upgrade libsamba-errors0Upgrade libsmbconf-develUpgrade libsamba-policy-develUpgrade libndr1-32bitUpgrade libndr-develUpgrade samba-libs-python3-32bitUpgrade libndr-nbt-develUpgrade samba-kdc-32bitUpgrade sambaUpgrade libsamba-errors-develUpgrade samba-winbindUpgrade ctdb-testsUpgrade samba-pythonUpgrade libndr0-32bitUpgrade libdcerpc-develUpgrade libsmbldap2-32bitUpgrade libwbclient0-32bitUpgrade samba-libs-python3Upgrade libsamba-hostconfig0-32bitUpgrade ctdb-pcp-pmdaUpgrade samba-python3Upgrade libndr-krb5pac-develUpgrade libndr-nbt0Upgrade libnetapi0Upgrade libwbclient-develUpgrade libsmbldap-develUpgrade libdcerpc-samr0-32bitUpgrade libsmbclient0-32bitUpgrade libsmbldap2Upgrade libdcerpc-binding0Upgrade libldb1-32bitUpgrade samba-ad-dcUpgrade libndr-krb5pac0Upgrade libndr-nbt0-32bit | Nov 6, 2019 | Oct 29, 2019 |
| Ubuntu | — | Upgrade libsmbclientUpgrade samba | Oct 30, 2019 | Oct 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub