All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the (poorly named) dnsserver RPC pipe provides administrative facilities to modify DNS records and zones. Samba, when acting as an AD DC, stores DNS records in LDAP. In AD, the default permissions on the DNS partition allow creation of new records by authenticated users. This is used for example to allow machines to self-register in DNS. If a DNS record was created that case-insensitively matched the name of the zone, the ldb_qsort() and dns_name_compare() routines could be confused into reading memory prior to the list of DNS entries when responding to DnssrvEnumRecords() or DnssrvEnumRecords2() and so following invalid memory as a pointer.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Dec 10, 2019 |
| Debian | — | Upgrade samba | May 31, 2021 | Dec 10, 2019 |
| Freebsd | — | Upgrade samba410Upgrade samba411Upgrade samba48 | Dec 14, 2019 | Dec 12, 2019 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-commonUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-winbindUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-clientUpgrade sambaUpgrade samba-libsUpgrade libwbclient | Nov 3, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libwbclientUpgrade samba-client-libsUpgrade samba-common-toolsUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-clientUpgrade samba-libsUpgrade samba-commonUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-common-libs | Sep 28, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade libsmbclientUpgrade samba-clientUpgrade samba-common-libsUpgrade sambaUpgrade samba-winbindUpgrade libwbclientUpgrade samba-libsUpgrade samba-client-libsUpgrade samba-python | Feb 24, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-client-libsUpgrade samba-winbindUpgrade samba-common-libsUpgrade ctdb-testsUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade samba-dc-libsUpgrade python3-samba-testUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade python2-samba-testUpgrade libwbclientUpgrade samba-krb5-printingUpgrade samba-commonUpgrade samba-testUpgrade ctdbUpgrade samba-clientUpgrade samba-pidlUpgrade samba-libsUpgrade sambaUpgrade python2-sambaUpgrade samba-test-libsUpgrade python3-samba | Jan 3, 2020 | Dec 10, 2019 |
| Samba | — | Upgrade to Samba 4.10.11 or later.Upgrade to Samba 4.9.17 or later.Upgrade to Samba 4.11.3 or later. | Dec 16, 2019 | Dec 10, 2019 |
| Suse | — | Upgrade samba-dsdb-modulesUpgrade samba-client-32bitUpgrade libwbclient0-32bitUpgrade samba-testUpgrade samba-cephUpgrade libsamba-policy0-python3-32bitUpgrade libdcerpc-develUpgrade samba-core-develUpgrade libndr-nbt0-32bitUpgrade libsmbldap-develUpgrade libsamba-hostconfig-develUpgrade python-ldb-develUpgrade libndr1Upgrade libsamba-util0Upgrade libsmbconf0-32bitUpgrade libsamba-passdb0-32bitUpgrade libsmbconf0Upgrade libsamba-errors0-32bitUpgrade libndr-standard0-32bitUpgrade ldb-toolsUpgrade libsmbclient0Upgrade libdcerpc-binding0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libnetapi0Upgrade libndr-develUpgrade ctdb-testsUpgrade libndr0-32bitUpgrade libsamba-credentials0-32bitUpgrade libsmbldap2-32bitUpgrade libndr-standard-develUpgrade libdcerpc-samr0Upgrade libsamba-credentials0Upgrade ctdbUpgrade samba-libs-python3-32bitUpgrade libndr1-32bitUpgrade libnetapi-develUpgrade libsamba-errors-develUpgrade libsmbconf-develUpgrade libsamba-passdb-develUpgrade libndr0Upgrade libtevent-util0-32bitUpgrade samba-ad-dcUpgrade samba-pidlUpgrade libldb1Upgrade libwbclient0Upgrade ctdb-pcp-pmdaUpgrade libnetapi0-32bitUpgrade libsamba-credentials-develUpgrade samba-winbindUpgrade libndr-krb5pac-develUpgrade samba-clientUpgrade samba-winbind-32bitUpgrade libwbclient-develUpgrade libsmbldap2Upgrade libsmbclient0-32bitUpgrade libsamdb-develUpgrade libsamba-util-develUpgrade libdcerpc-samr0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libtevent-util0Upgrade libsamba-policy-develUpgrade samba-libs-32bitUpgrade samba-ad-dc-32bitUpgrade python-ldbUpgrade samba-libsUpgrade samba-pythonUpgrade libsamba-policy0-32bitUpgrade libdcerpc-binding0Upgrade libsamba-hostconfig0Upgrade libndr-standard0Upgrade libdcerpc-samr-develUpgrade libsamba-passdb0Upgrade libndr-nbt-develUpgrade libsamba-policy-python-develUpgrade samba-libs-python-32bitUpgrade libdcerpc0Upgrade libsamdb0Upgrade libndr-krb5pac0Upgrade samba-libs-pythonUpgrade libsamba-errors0Upgrade libndr-nbt0Upgrade samba-docUpgrade libsamdb0-32bitUpgrade libsamba-util0-32bitUpgrade libsamba-policy0Upgrade libldb1-32bitUpgrade sambaUpgrade libsmbclient-develUpgrade libdcerpc0-32bitUpgrade samba-libs-python3Upgrade samba-python3Upgrade libsamba-policy-python3-develUpgrade libtevent-util-develUpgrade libldb-develUpgrade libsamba-policy0-python3 | Dec 24, 2019 | Dec 10, 2019 |
| Ubuntu | — | Upgrade samba (Ubuntu Pro)Upgrade libsmbclientUpgrade libsmbclient (Ubuntu Pro)Upgrade samba | Dec 12, 2019 | Dec 10, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub