All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the (poorly named) dnsserver RPC pipe provides administrative facilities to modify DNS records and zones. Samba, when acting as an AD DC, stores DNS records in LDAP. In AD, the default permissions on the DNS partition allow creation of new records by authenticated users. This is used for example to allow machines to self-register in DNS. If a DNS record was created that case-insensitively matched the name of the zone, the ldb_qsort() and dns_name_compare() routines could be confused into reading memory prior to the list of DNS entries when responding to DnssrvEnumRecords() or DnssrvEnumRecords2() and so following invalid memory as a pointer.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Dec 10, 2019 |
| Debian | — | Upgrade samba | May 31, 2021 | Dec 10, 2019 |
| Freebsd | — | Upgrade samba410Upgrade samba411Upgrade samba48 | Dec 14, 2019 | Dec 12, 2019 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-pythonUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-commonUpgrade samba-client-libsUpgrade sambaUpgrade samba-winbindUpgrade libwbclientUpgrade samba-clientUpgrade samba-libsUpgrade samba-common-tools | Nov 3, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsmbclientUpgrade samba-pythonUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba | Sep 28, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-client-libsUpgrade samba-pythonUpgrade libwbclientUpgrade sambaUpgrade samba-libsUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade libsmbclient | Feb 24, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-sambaUpgrade samba-libsUpgrade samba-test-libsUpgrade sambaUpgrade ctdbUpgrade samba-commonUpgrade samba-clientUpgrade samba-krb5-printingUpgrade samba-pidlUpgrade python2-sambaUpgrade samba-testUpgrade libwbclientUpgrade python2-samba-testUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-dc-libsUpgrade samba-client-libsUpgrade ctdb-testsUpgrade samba-winbind-krb5-locatorUpgrade python3-samba-test | Jan 3, 2020 | Dec 10, 2019 |
| Samba | — | Upgrade to Samba 4.9.17 or later.Upgrade to Samba 4.10.11 or later.Upgrade to Samba 4.11.3 or later. | Dec 16, 2019 | Dec 10, 2019 |
| Suse | — | Upgrade samba-winbind-32bitUpgrade libldb1-32bitUpgrade libsmbclient0-32bitUpgrade libwbclient-develUpgrade libdcerpc-samr-develUpgrade libsmbldap2Upgrade libsamdb-develUpgrade libnetapi0-32bitUpgrade libsamba-util-develUpgrade samba-libs-python-32bitUpgrade libtevent-util-develUpgrade samba-libs-python3Upgrade samba-pythonUpgrade python-ldbUpgrade libsmbclient-develUpgrade libwbclient0Upgrade libsamba-hostconfig0Upgrade libdcerpc-binding0Upgrade samba-libsUpgrade ctdb-pcp-pmdaUpgrade sambaUpgrade libsamba-policy0-32bitUpgrade libsamba-policy-develUpgrade libsamba-policy0Upgrade libsamba-hostconfig0-32bitUpgrade libdcerpc-samr0-32bitUpgrade samba-clientUpgrade samba-python3Upgrade libsamba-passdb0Upgrade libsamba-errors0Upgrade samba-ad-dc-32bitUpgrade libndr-krb5pac0Upgrade libndr-nbt0Upgrade libsamba-policy0-python3Upgrade samba-libs-32bitUpgrade libsamdb0Upgrade samba-docUpgrade libsamba-policy-python3-develUpgrade libsamdb0-32bitUpgrade samba-winbindUpgrade libdcerpc0Upgrade libndr-krb5pac-develUpgrade libldb-develUpgrade libndr-standard0Upgrade samba-libs-pythonUpgrade libdcerpc0-32bitUpgrade libndr-nbt-develUpgrade libsamba-util0-32bitUpgrade libtevent-util0Upgrade libsamba-credentials-develUpgrade libsamba-policy-python-develUpgrade libnetapi0Upgrade samba-libs-python3-32bitUpgrade libndr-develUpgrade libsamba-credentials0-32bitUpgrade libtevent-util0-32bitUpgrade libndr0-32bitUpgrade libwbclient0-32bitUpgrade libndr1-32bitUpgrade libnetapi-develUpgrade ldb-toolsUpgrade libsmbclient0Upgrade libsmbconf0Upgrade libsamba-errors0-32bitUpgrade samba-core-develUpgrade libndr-krb5pac0-32bitUpgrade libndr-standard0-32bitUpgrade libsamba-passdb0-32bitUpgrade libldb1Upgrade libdcerpc-binding0-32bitUpgrade samba-ad-dcUpgrade libndr1Upgrade samba-pidlUpgrade libsamba-errors-develUpgrade samba-testUpgrade libsamba-hostconfig-develUpgrade samba-dsdb-modulesUpgrade libsmbldap-develUpgrade samba-client-32bitUpgrade libndr-nbt0-32bitUpgrade samba-cephUpgrade python-ldb-develUpgrade libdcerpc-develUpgrade libsmbconf0-32bitUpgrade libsamba-util0Upgrade libsamba-policy0-python3-32bitUpgrade libsmbldap2-32bitUpgrade libndr0Upgrade libdcerpc-samr0Upgrade libndr-standard-develUpgrade libsmbconf-develUpgrade ctdbUpgrade ctdb-testsUpgrade libsamba-passdb-develUpgrade libsamba-credentials0 | Dec 24, 2019 | Dec 10, 2019 |
| Ubuntu | — | Upgrade libsmbclientUpgrade samba (Ubuntu Pro)Upgrade sambaUpgrade libsmbclient (Ubuntu Pro) | Dec 12, 2019 | Dec 10, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub