A flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15, samba 4.10.10, samba 4.11.2, in the way it handles a user password change or a new password for a samba user. The Samba Active Directory Domain Controller can be configured to use a custom script to check for password complexity. This configuration can fail to verify password complexity when non-ASCII characters are used in the password, which could lead to weak passwords being set for samba users, making it vulnerable to dictionary attacks.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Nov 6, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 6, 2019 |
| Debian | — | Upgrade samba | May 31, 2021 | Nov 6, 2019 |
| Freebsd | — | Upgrade samba410Upgrade samba411Upgrade samba48 | Nov 1, 2019 | Oct 29, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade libwbclientUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-pythonUpgrade samba-commonUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-winbindUpgrade samba-common-libsUpgrade libsmbclient | Feb 22, 2021 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-libsUpgrade samba-pythonUpgrade sambaUpgrade libsmbclientUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-client | Sep 28, 2020 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-pythonUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-commonUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-libsUpgrade libwbclientUpgrade samba-client-libs | Dec 11, 2019 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-samba-testUpgrade samba-commonUpgrade sambaUpgrade python3-samba-testUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-test-libsUpgrade samba-dc-libsUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-modulesUpgrade python2-sambaUpgrade samba-clientUpgrade samba-winbindUpgrade samba-common-toolsUpgrade samba-testUpgrade ctdb-testsUpgrade samba-client-libsUpgrade python3-sambaUpgrade samba-krb5-printingUpgrade samba-libsUpgrade ctdbUpgrade samba-pidlUpgrade libwbclient | Nov 28, 2019 | Nov 6, 2019 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Nov 6, 2019 |
| Samba | — | Upgrade to Samba 4.11.2 or later.Upgrade to Samba 4.9.15 or later.Upgrade to Samba 4.10.10 or later. | Nov 6, 2019 | Nov 6, 2019 |
| Suse | — | Upgrade libsamba-policy-python-develUpgrade libsamba-credentials0Upgrade libsmbconf0-32bitUpgrade libwbclient0Upgrade libsamba-hostconfig-develUpgrade libndr0Upgrade libsamdb-develUpgrade samba-dsdb-modulesUpgrade libndr-standard0Upgrade libnetapi-develUpgrade samba-kdcUpgrade samba-libs-python-32bitUpgrade libsmbclient0Upgrade libsmbconf0Upgrade libdcerpc-samr0Upgrade samba-libs-32bitUpgrade samba-libsUpgrade libdcerpc-samr-develUpgrade libtevent-util-develUpgrade libnetapi0-32bitUpgrade samba-client-32bitUpgrade ctdbUpgrade samba-libs-pythonUpgrade libndr-krb5pac0-32bitUpgrade python-ldb-develUpgrade ldb-toolsUpgrade libsamdb0-32bitUpgrade libsmbclient-develUpgrade libndr1Upgrade libndr-standard-develUpgrade libsamba-passdb-develUpgrade libdcerpc-binding0-32bitUpgrade samba-ad-dc-32bitUpgrade libsamba-policy0-python3Upgrade libsamba-policy0-32bitUpgrade libsamba-util0-32bitUpgrade samba-testUpgrade libsamba-util-develUpgrade libsamba-errors0-32bitUpgrade libsamba-credentials0-32bitUpgrade libsamba-policy0-python3-32bitUpgrade samba-clientUpgrade libsamba-hostconfig0Upgrade libldb1Upgrade libsamba-policy-python3-develUpgrade samba-ad-dcUpgrade libndr-standard0-32bitUpgrade samba-pidlUpgrade libldb-develUpgrade samba-libs-python3-32bitUpgrade libdcerpc-binding0Upgrade libsmbconf-develUpgrade libsmbldap2-32bitUpgrade samba-kdc-32bitUpgrade libsamdb0Upgrade libndr-develUpgrade libdcerpc0Upgrade libtevent-util0Upgrade libldb1-32bitUpgrade python-ldbUpgrade samba-core-develUpgrade libndr-krb5pac0Upgrade samba-winbind-32bitUpgrade libwbclient-develUpgrade libnetapi0Upgrade ctdb-pcp-pmdaUpgrade libndr-krb5pac-develUpgrade samba-python3Upgrade libsmbldap-develUpgrade libndr-nbt0Upgrade libdcerpc0-32bitUpgrade samba-libs-python3Upgrade ctdb-testsUpgrade sambaUpgrade samba-winbindUpgrade libsamba-errors-develUpgrade libndr0-32bitUpgrade libsamba-policy0Upgrade libsamba-errors0Upgrade samba-pythonUpgrade libdcerpc-develUpgrade libwbclient0-32bitUpgrade libsamba-passdb0Upgrade libsmbclient0-32bitUpgrade libsmbldap2Upgrade libsamba-hostconfig0-32bitUpgrade libdcerpc-samr0-32bitUpgrade samba-docUpgrade libndr1-32bitUpgrade libndr-nbt-develUpgrade libsamba-credentials-develUpgrade libsamba-policy-develUpgrade samba-cephUpgrade libsamba-util0Upgrade libsamba-passdb0-32bitUpgrade libtevent-util0-32bitUpgrade libndr-nbt0-32bit | Nov 6, 2019 | Oct 29, 2019 |
| Ubuntu | — | Upgrade sambaUpgrade libsmbclient | Oct 30, 2019 | Oct 29, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub