All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the (poorly named) dnsserver RPC pipe provides administrative facilities to modify DNS records and zones. Samba, when acting as an AD DC, stores DNS records in LDAP. In AD, the default permissions on the DNS partition allow creation of new records by authenticated users. This is used for example to allow machines to self-register in DNS. If a DNS record was created that case-insensitively matched the name of the zone, the ldb_qsort() and dns_name_compare() routines could be confused into reading memory prior to the list of DNS entries when responding to DnssrvEnumRecords() or DnssrvEnumRecords2() and so following invalid memory as a pointer.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Dec 10, 2019 |
| Debian | — | Upgrade samba | May 31, 2021 | Dec 10, 2019 |
| Freebsd | — | Upgrade samba410Upgrade samba48Upgrade samba411 | Dec 14, 2019 | Dec 12, 2019 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-toolsUpgrade libwbclientUpgrade sambaUpgrade samba-winbindUpgrade samba-libsUpgrade samba-clientUpgrade samba-client-libsUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba-common | Nov 3, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-commonUpgrade samba-pythonUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade samba-winbindUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade samba | Sep 28, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libwbclientUpgrade samba-libsUpgrade sambaUpgrade samba-client-libsUpgrade samba-pythonUpgrade samba-winbindUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-common | Feb 24, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-clientUpgrade python2-sambaUpgrade samba-krb5-printingUpgrade sambaUpgrade samba-commonUpgrade python3-sambaUpgrade samba-pidlUpgrade samba-test-libsUpgrade samba-testUpgrade libwbclientUpgrade ctdbUpgrade samba-libsUpgrade samba-common-toolsUpgrade python3-samba-testUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade python2-samba-testUpgrade samba-client-libsUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade ctdb-testsUpgrade samba-common-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-dc-libs | Jan 3, 2020 | Dec 10, 2019 |
| Samba | — | Upgrade to Samba 4.11.3 or later.Upgrade to Samba 4.10.11 or later.Upgrade to Samba 4.9.17 or later. | Dec 16, 2019 | Dec 10, 2019 |
| Suse | — | Upgrade libsamba-credentials0-32bitUpgrade libwbclient0-32bitUpgrade libndr-nbt0-32bitUpgrade samba-testUpgrade libsamba-util0Upgrade libsamba-errors-develUpgrade libndr-krb5pac0-32bitUpgrade libsamba-hostconfig-develUpgrade libndr-standard-develUpgrade libsmbldap2-32bitUpgrade samba-dsdb-modulesUpgrade libsamba-errors0-32bitUpgrade libsmbconf0Upgrade libdcerpc-binding0-32bitUpgrade ldb-toolsUpgrade libsmbldap-develUpgrade python-ldb-develUpgrade samba-cephUpgrade libndr1Upgrade libdcerpc-develUpgrade samba-client-32bitUpgrade libnetapi-develUpgrade libndr-develUpgrade libtevent-util0-32bitUpgrade libndr0-32bitUpgrade samba-libs-python3-32bitUpgrade libndr1-32bitUpgrade libsamba-policy0-python3-32bitUpgrade libsmbconf0-32bitUpgrade samba-core-develUpgrade ctdbUpgrade libsmbclient0Upgrade ctdb-testsUpgrade libldb1Upgrade samba-pidlUpgrade samba-ad-dcUpgrade libnetapi0Upgrade libsamba-credentials0Upgrade libndr0Upgrade libndr-standard0-32bitUpgrade libsamba-passdb-develUpgrade libsmbconf-develUpgrade libdcerpc-samr0Upgrade libsamba-passdb0-32bitUpgrade libsamba-policy0-python3Upgrade libsamba-policy0Upgrade libsmbldap2Upgrade samba-libsUpgrade samba-winbindUpgrade libndr-krb5pac-develUpgrade libldb-develUpgrade samba-docUpgrade libsamba-hostconfig0Upgrade libndr-krb5pac0Upgrade libsmbclient0-32bitUpgrade libsamba-errors0Upgrade libdcerpc-binding0Upgrade libsamba-passdb0Upgrade libndr-standard0Upgrade samba-clientUpgrade samba-libs-pythonUpgrade libdcerpc0-32bitUpgrade libsamba-policy-python-develUpgrade libsamdb0-32bitUpgrade libsamba-credentials-develUpgrade libndr-nbt0Upgrade libldb1-32bitUpgrade libsamdb-develUpgrade ctdb-pcp-pmdaUpgrade libwbclient-develUpgrade libsamba-util-develUpgrade samba-libs-python3Upgrade libnetapi0-32bitUpgrade samba-libs-python-32bitUpgrade libsamba-policy-python3-develUpgrade libsamdb0Upgrade samba-python3Upgrade libtevent-util-develUpgrade sambaUpgrade samba-winbind-32bitUpgrade libsamba-policy0-32bitUpgrade samba-libs-32bitUpgrade libwbclient0Upgrade samba-ad-dc-32bitUpgrade python-ldbUpgrade libsmbclient-develUpgrade samba-pythonUpgrade libsamba-policy-develUpgrade libsamba-hostconfig0-32bitUpgrade libtevent-util0Upgrade libsamba-util0-32bitUpgrade libdcerpc-samr0-32bitUpgrade libdcerpc-samr-develUpgrade libndr-nbt-develUpgrade libdcerpc0 | Dec 24, 2019 | Dec 10, 2019 |
| Ubuntu | — | Upgrade sambaUpgrade libsmbclient (Ubuntu Pro)Upgrade libsmbclientUpgrade samba (Ubuntu Pro) | Dec 12, 2019 | Dec 10, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub