There is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4.10.12 and all samba 4.9.x versions before 4.9.18, where the removal of the right to create or modify a subtree would not automatically be taken away on all domain controllers.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Jan 21, 2020 |
| Debian | — | Upgrade samba | May 31, 2021 | Jan 21, 2020 |
| Freebsd | — | Upgrade samba411Upgrade samba410 | Jan 27, 2020 | Jan 27, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-clientUpgrade samba-pythonUpgrade samba-winbindUpgrade libwbclientUpgrade samba-libsUpgrade samba-client-libsUpgrade samba | Nov 3, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-pythonUpgrade samba-libsUpgrade sambaUpgrade samba-client-libsUpgrade samba-winbindUpgrade libwbclientUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-common | Sep 28, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-winbind-clientsUpgrade libwbclientUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-commonUpgrade samba-winbindUpgrade samba-libsUpgrade sambaUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-winbind-modules | Mar 24, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libwbclientUpgrade samba-krb5-printingUpgrade samba-test-libsUpgrade python3-sambaUpgrade samba-pidlUpgrade samba-commonUpgrade samba-testUpgrade samba-libsUpgrade python2-sambaUpgrade ctdbUpgrade samba-clientUpgrade sambaUpgrade samba-client-libsUpgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade python2-samba-testUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade ctdb-testsUpgrade samba-common-toolsUpgrade python3-samba-testUpgrade samba-winbind-clientsUpgrade samba-dc-libs | Feb 26, 2020 | Jan 21, 2020 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Jan 21, 2020 |
| Samba | — | Upgrade to Samba 4.10.12 or later.Upgrade to Samba 4.9.18 or later.Upgrade to Samba 4.11.5 or later. | Jan 24, 2020 | Jan 21, 2020 |
| Suse | — | Upgrade libwbclient0Upgrade libsamba-policy0-python3-32bitUpgrade libdcerpc-samr0-32bitUpgrade libndr1Upgrade libsamba-hostconfig0Upgrade libldb1-32bitUpgrade libtevent-util0Upgrade libsamba-credentials0Upgrade libsamba-policy0-python3Upgrade libsmbconf0-32bitUpgrade sambaUpgrade libsmbclient-develUpgrade samba-libs-python-32bitUpgrade libsamba-util-develUpgrade libsamba-errors0-32bitUpgrade samba-winbind-32bitUpgrade libsmbldap-develUpgrade libndr0Upgrade samba-winbindUpgrade ctdbUpgrade samba-libs-32bitUpgrade samba-libsUpgrade ctdb-pcp-pmdaUpgrade samba-libs-python3Upgrade libsmbldap2-32bitUpgrade libsmbclient0Upgrade libdcerpc0-32bitUpgrade libtevent-util-develUpgrade libnetapi0Upgrade samba-docUpgrade libsamba-credentials0-32bitUpgrade libsamba-util0-32bitUpgrade samba-libs-pythonUpgrade libnetapi-develUpgrade libndr-nbt-develUpgrade libsamba-policy-develUpgrade python-ldbUpgrade samba-pidlUpgrade libdcerpc-binding0Upgrade libdcerpc-develUpgrade libndr-nbt0Upgrade libdcerpc-samr-develUpgrade libsamba-credentials-develUpgrade libsmbconf0Upgrade libsmbclient0-32bitUpgrade libndr-standard0Upgrade libsamba-policy-python-develUpgrade samba-cephUpgrade samba-pythonUpgrade libndr-krb5pac0-32bitUpgrade libndr-nbt0-32bitUpgrade libndr-develUpgrade libldb-develUpgrade samba-ad-dcUpgrade libndr-krb5pac0Upgrade libwbclient-develUpgrade libsamba-errors0Upgrade libsamdb-develUpgrade samba-dsdb-modulesUpgrade samba-python3Upgrade libsamba-policy0Upgrade samba-client-32bitUpgrade samba-libs-python3-32bitUpgrade libsamba-passdb0Upgrade libsamba-hostconfig0-32bitUpgrade libndr0-32bitUpgrade libndr-standard-develUpgrade libnetapi0-32bitUpgrade libndr-standard0-32bitUpgrade libdcerpc0Upgrade libdcerpc-binding0-32bitUpgrade libsamba-passdb0-32bitUpgrade samba-testUpgrade libsmbconf-develUpgrade libdcerpc-samr0Upgrade libsamba-hostconfig-develUpgrade libsamdb0Upgrade ldb-toolsUpgrade libsamba-policy0-32bitUpgrade libldb1Upgrade libsamba-policy-python3-develUpgrade ctdb-testsUpgrade samba-core-develUpgrade libndr1-32bitUpgrade libndr-krb5pac-develUpgrade libtevent-util0-32bitUpgrade libsamdb0-32bitUpgrade samba-clientUpgrade python-ldb-develUpgrade libsamba-util0Upgrade libsmbldap2Upgrade libsamba-errors-develUpgrade libwbclient0-32bitUpgrade samba-ad-dc-32bitUpgrade libsamba-passdb-devel | Jan 25, 2020 | Jan 21, 2020 |
| Ubuntu | — | Upgrade samba | Mar 2, 2020 | Jan 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub