All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the (poorly named) dnsserver RPC pipe provides administrative facilities to modify DNS records and zones. Samba, when acting as an AD DC, stores DNS records in LDAP. In AD, the default permissions on the DNS partition allow creation of new records by authenticated users. This is used for example to allow machines to self-register in DNS. If a DNS record was created that case-insensitively matched the name of the zone, the ldb_qsort() and dns_name_compare() routines could be confused into reading memory prior to the list of DNS entries when responding to DnssrvEnumRecords() or DnssrvEnumRecords2() and so following invalid memory as a pointer.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Dec 10, 2019 |
| Debian | — | Upgrade samba | May 31, 2021 | Dec 10, 2019 |
| Freebsd | — | Upgrade samba48Upgrade samba411Upgrade samba410 | Dec 14, 2019 | Dec 12, 2019 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libsmbclientUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-libsUpgrade samba-winbindUpgrade sambaUpgrade libwbclient | Nov 3, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsmbclientUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-clientUpgrade libwbclientUpgrade samba | Sep 28, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-pythonUpgrade samba-winbindUpgrade libwbclientUpgrade samba-libsUpgrade samba-client-libsUpgrade sambaUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-clientUpgrade libsmbclient | Feb 24, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-client-libsUpgrade samba-dc-libsUpgrade ctdb-testsUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade python2-samba-testUpgrade python3-samba-testUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade libwbclientUpgrade samba-testUpgrade samba-commonUpgrade samba-pidlUpgrade samba-krb5-printingUpgrade samba-clientUpgrade ctdbUpgrade samba-libsUpgrade sambaUpgrade python3-sambaUpgrade python2-sambaUpgrade samba-test-libs | Jan 3, 2020 | Dec 10, 2019 |
| Samba | — | Upgrade to Samba 4.9.17 or later.Upgrade to Samba 4.10.11 or later.Upgrade to Samba 4.11.3 or later. | Dec 16, 2019 | Dec 10, 2019 |
| Suse | — | Upgrade libsamba-passdb-develUpgrade samba-cephUpgrade libsmbldap-develUpgrade samba-pidlUpgrade libnetapi0Upgrade libldb1Upgrade python-ldb-develUpgrade libsamba-credentials0-32bitUpgrade samba-ad-dcUpgrade libtevent-util0-32bitUpgrade libnetapi-develUpgrade libwbclient0-32bitUpgrade libsamba-policy0-python3-32bitUpgrade libsmbldap2-32bitUpgrade samba-client-32bitUpgrade libndr1Upgrade samba-dsdb-modulesUpgrade libdcerpc-develUpgrade libndr-krb5pac0-32bitUpgrade libsmbconf0-32bitUpgrade libndr-standard0-32bitUpgrade samba-core-develUpgrade libdcerpc-samr0Upgrade ctdbUpgrade libsamba-passdb0-32bitUpgrade libndr-standard-develUpgrade libsamba-errors0-32bitUpgrade libsmbconf0Upgrade ldb-toolsUpgrade libndr0Upgrade libsmbclient0Upgrade libsamba-credentials0Upgrade ctdb-testsUpgrade libndr-develUpgrade libdcerpc-binding0-32bitUpgrade libsamba-util0Upgrade libsmbconf-develUpgrade samba-testUpgrade libsamba-errors-develUpgrade libsamba-hostconfig-develUpgrade libndr0-32bitUpgrade libndr1-32bitUpgrade samba-libs-python3-32bitUpgrade libndr-nbt0-32bitUpgrade libndr-standard0Upgrade libnetapi0-32bitUpgrade samba-libsUpgrade libdcerpc-samr-develUpgrade samba-python3Upgrade libsamdb-develUpgrade samba-winbindUpgrade libdcerpc-samr0-32bitUpgrade libsamba-errors0Upgrade libsamba-util0-32bitUpgrade libsamdb0Upgrade libndr-krb5pac0Upgrade libsamba-passdb0Upgrade libldb-develUpgrade libsamba-credentials-develUpgrade libsamba-policy-python3-develUpgrade libsamba-policy0-python3Upgrade libsamba-policy0Upgrade ctdb-pcp-pmdaUpgrade samba-docUpgrade libsamba-hostconfig0-32bitUpgrade libtevent-util0Upgrade libwbclient-develUpgrade samba-libs-32bitUpgrade libndr-nbt-develUpgrade samba-ad-dc-32bitUpgrade python-ldbUpgrade libwbclient0Upgrade libdcerpc-binding0Upgrade samba-clientUpgrade libsamba-hostconfig0Upgrade sambaUpgrade libsamba-policy0-32bitUpgrade samba-libs-pythonUpgrade libsmbclient-develUpgrade libsamba-policy-python-develUpgrade libdcerpc0Upgrade samba-pythonUpgrade libldb1-32bitUpgrade samba-winbind-32bitUpgrade samba-libs-python-32bitUpgrade libsmbldap2Upgrade libndr-krb5pac-develUpgrade libsmbclient0-32bitUpgrade libsamba-util-develUpgrade libdcerpc0-32bitUpgrade libtevent-util-develUpgrade samba-libs-python3Upgrade libndr-nbt0Upgrade libsamba-policy-develUpgrade libsamdb0-32bit | Dec 24, 2019 | Dec 10, 2019 |
| Ubuntu | — | Upgrade libsmbclientUpgrade sambaUpgrade samba (Ubuntu Pro)Upgrade libsmbclient (Ubuntu Pro) | Dec 12, 2019 | Dec 10, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub