There is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4.10.12 and all samba 4.9.x versions before 4.9.18, where the removal of the right to create or modify a subtree would not automatically be taken away on all domain controllers.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Jan 21, 2020 |
| Debian | — | Upgrade samba | May 31, 2021 | Jan 21, 2020 |
| Freebsd | — | Upgrade samba410Upgrade samba411 | Jan 27, 2020 | Jan 27, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-toolsUpgrade samba-clientUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-libsUpgrade samba-client-libsUpgrade sambaUpgrade libwbclientUpgrade samba-winbindUpgrade samba-python | Nov 3, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-client-libsUpgrade sambaUpgrade samba-pythonUpgrade samba-winbindUpgrade libwbclientUpgrade samba-libs | Sep 28, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-winbind-clientsUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-commonUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-winbindUpgrade sambaUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-winbind-modules | Mar 24, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libwbclientUpgrade python3-sambaUpgrade samba-clientUpgrade samba-pidlUpgrade samba-testUpgrade ctdbUpgrade samba-test-libsUpgrade samba-krb5-printingUpgrade samba-libsUpgrade python2-sambaUpgrade samba-commonUpgrade samba-winbind-krb5-locatorUpgrade samba-client-libsUpgrade samba-dc-libsUpgrade python3-samba-testUpgrade samba-winbind-clientsUpgrade python2-samba-testUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-common-libsUpgrade libsmbclientUpgrade ctdb-testsUpgrade samba | Feb 26, 2020 | Jan 21, 2020 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Jan 21, 2020 |
| Samba | — | Upgrade to Samba 4.11.5 or later.Upgrade to Samba 4.10.12 or later.Upgrade to Samba 4.9.18 or later. | Jan 24, 2020 | Jan 21, 2020 |
| Suse | — | Upgrade libndr-standard0-32bitUpgrade libndr-krb5pac-develUpgrade libdcerpc-samr0Upgrade libsamba-passdb0-32bitUpgrade libndr-krb5pac0Upgrade libsmbconf-develUpgrade python-ldb-develUpgrade samba-client-32bitUpgrade libsamba-passdb0Upgrade libsamba-policy0Upgrade libndr0-32bitUpgrade libndr-standard-develUpgrade libsamba-hostconfig0-32bitUpgrade libdcerpc0Upgrade libsamdb0-32bitUpgrade samba-ad-dcUpgrade ldb-toolsUpgrade samba-clientUpgrade libsamba-policy0-32bitUpgrade samba-libs-python3-32bitUpgrade libsamba-errors-develUpgrade libsamdb0Upgrade samba-testUpgrade libdcerpc-binding0-32bitUpgrade libnetapi0-32bitUpgrade libwbclient0-32bitUpgrade libsamba-util0Upgrade libsmbldap2Upgrade libwbclient-develUpgrade samba-ad-dc-32bitUpgrade libsamba-passdb-develUpgrade libndr-develUpgrade samba-python3Upgrade libsamdb-develUpgrade libldb-develUpgrade libndr-nbt0-32bitUpgrade libsamba-errors0Upgrade libldb1Upgrade libndr1-32bitUpgrade samba-core-develUpgrade libtevent-util0-32bitUpgrade libsamba-policy-python3-develUpgrade ctdb-testsUpgrade libsamba-hostconfig-develUpgrade samba-dsdb-modulesUpgrade libsmbclient0Upgrade libsmbldap-develUpgrade libdcerpc-samr0-32bitUpgrade libnetapi-develUpgrade libsamba-credentials0Upgrade ctdb-pcp-pmdaUpgrade libndr-nbt-develUpgrade samba-winbindUpgrade samba-libsUpgrade libsmbldap2-32bitUpgrade libtevent-util-develUpgrade samba-libs-32bitUpgrade libsamba-credentials0-32bitUpgrade libsamba-util0-32bitUpgrade libndr-nbt0Upgrade python-ldbUpgrade libsamba-credentials-develUpgrade samba-pidlUpgrade samba-pythonUpgrade samba-libs-python-32bitUpgrade libsmbclient0-32bitUpgrade libtevent-util0Upgrade libdcerpc-develUpgrade libndr-standard0Upgrade libsamba-policy0-python3Upgrade samba-cephUpgrade samba-docUpgrade libndr-krb5pac0-32bitUpgrade libwbclient0Upgrade libndr0Upgrade libsamba-hostconfig0Upgrade libldb1-32bitUpgrade libsmbconf0Upgrade libsamba-policy0-python3-32bitUpgrade libdcerpc0-32bitUpgrade samba-winbind-32bitUpgrade libsamba-errors0-32bitUpgrade samba-libs-pythonUpgrade ctdbUpgrade libsmbconf0-32bitUpgrade libndr1Upgrade libdcerpc-samr-develUpgrade libdcerpc-binding0Upgrade libnetapi0Upgrade libsmbclient-develUpgrade libsamba-policy-python-develUpgrade libsamba-util-develUpgrade samba-libs-python3Upgrade sambaUpgrade libsamba-policy-devel | Jan 25, 2020 | Jan 21, 2020 |
| Ubuntu | — | Upgrade samba | Mar 2, 2020 | Jan 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub