A flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15, samba 4.10.10, samba 4.11.2, in the way it handles a user password change or a new password for a samba user. The Samba Active Directory Domain Controller can be configured to use a custom script to check for password complexity. This configuration can fail to verify password complexity when non-ASCII characters are used in the password, which could lead to weak passwords being set for samba users, making it vulnerable to dictionary attacks.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
- CVSS 3.0 Base Score: 4.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Nov 6, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 6, 2019 |
| Debian | — | Upgrade samba | May 31, 2021 | Nov 6, 2019 |
| Freebsd | — | Upgrade samba411Upgrade samba410Upgrade samba48 | Nov 1, 2019 | Oct 29, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-libsUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade samba-libsUpgrade samba-client-libsUpgrade samba-pythonUpgrade samba-winbindUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba | Feb 22, 2021 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sambaUpgrade libwbclientUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-libsUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-commonUpgrade samba-common-tools | Sep 28, 2020 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sambaUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-pythonUpgrade libwbclientUpgrade samba-libsUpgrade samba-client-libs | Dec 11, 2019 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ctdb-testsUpgrade samba-krb5-printingUpgrade python3-sambaUpgrade samba-client-libsUpgrade ctdbUpgrade samba-testUpgrade libwbclientUpgrade samba-libsUpgrade samba-pidlUpgrade python2-sambaUpgrade samba-test-libsUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-common-toolsUpgrade sambaUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-commonUpgrade python2-samba-testUpgrade python3-samba-testUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-winbind-krb5-locator | Nov 28, 2019 | Nov 6, 2019 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Nov 6, 2019 |
| Samba | — | Upgrade to Samba 4.11.2 or later.Upgrade to Samba 4.10.10 or later.Upgrade to Samba 4.9.15 or later. | Nov 6, 2019 | Nov 6, 2019 |
| Suse | — | Upgrade libsamba-policy0-python3Upgrade libsmbconf0Upgrade libsamba-credentials0-32bitUpgrade libsamba-util-develUpgrade samba-testUpgrade libsamba-policy0-python3-32bitUpgrade libsamba-policy-python3-develUpgrade samba-clientUpgrade libdcerpc-binding0-32bitUpgrade libsamba-hostconfig-develUpgrade libsamba-policy0-32bitUpgrade libsmbclient-develUpgrade libnetapi0-32bitUpgrade libsamba-hostconfig0Upgrade libldb1Upgrade libsmbclient0Upgrade libndr1Upgrade libndr-standard0Upgrade libndr-standard-develUpgrade samba-client-32bitUpgrade libsamba-passdb-develUpgrade samba-libs-python-32bitUpgrade samba-ad-dc-32bitUpgrade python-ldb-develUpgrade libsamdb0-32bitUpgrade libdcerpc-samr0Upgrade libdcerpc-samr-develUpgrade libsamba-errors0-32bitUpgrade samba-libs-pythonUpgrade samba-libsUpgrade libsmbconf0-32bitUpgrade libtevent-util-develUpgrade libsamba-util0-32bitUpgrade libsamdb-develUpgrade libnetapi-develUpgrade libsamba-policy-python-develUpgrade samba-kdcUpgrade samba-dsdb-modulesUpgrade libsamba-credentials0Upgrade libwbclient0Upgrade samba-libs-32bitUpgrade libndr0Upgrade ctdbUpgrade ldb-toolsUpgrade libndr-krb5pac0-32bitUpgrade libndr-standard0-32bitUpgrade libndr-nbt-develUpgrade libndr-krb5pac-develUpgrade samba-ad-dcUpgrade samba-pythonUpgrade libldb-develUpgrade samba-libs-python3Upgrade libsamdb0Upgrade libsmbldap2-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-errors0Upgrade libndr-krb5pac0Upgrade libldb1-32bitUpgrade libsmbldap-develUpgrade libsmbldap2Upgrade libdcerpc-develUpgrade libwbclient0-32bitUpgrade libdcerpc-samr0-32bitUpgrade libsamba-passdb0Upgrade python-ldbUpgrade libsamba-credentials-develUpgrade samba-cephUpgrade libsamba-passdb0-32bitUpgrade samba-core-develUpgrade libtevent-util0-32bitUpgrade samba-docUpgrade libtevent-util0Upgrade ctdb-pcp-pmdaUpgrade samba-python3Upgrade libndr-nbt0Upgrade libnetapi0Upgrade libwbclient-develUpgrade libsmbconf-develUpgrade samba-kdc-32bitUpgrade libsamba-util0Upgrade sambaUpgrade ctdb-testsUpgrade libsamba-errors-develUpgrade libndr0-32bitUpgrade libdcerpc0-32bitUpgrade samba-libs-python3-32bitUpgrade samba-winbindUpgrade libsamba-policy0Upgrade libdcerpc-binding0Upgrade libndr-develUpgrade libsamba-policy-develUpgrade libndr1-32bitUpgrade libsmbclient0-32bitUpgrade samba-winbind-32bitUpgrade libndr-nbt0-32bitUpgrade libdcerpc0Upgrade samba-pidl | Nov 6, 2019 | Oct 29, 2019 |
| Ubuntu | — | Upgrade sambaUpgrade libsmbclient | Oct 30, 2019 | Oct 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub