There is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4.10.12 and all samba 4.9.x versions before 4.9.18, where the removal of the right to create or modify a subtree would not automatically be taken away on all domain controllers.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Jan 21, 2020 |
| Debian | — | Upgrade samba | May 31, 2021 | Jan 21, 2020 |
| Freebsd | — | Upgrade samba411Upgrade samba410 | Jan 27, 2020 | Jan 27, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-winbind-modulesUpgrade samba-clientUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade sambaUpgrade libwbclientUpgrade samba-winbindUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba-libs | Nov 3, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-client-libsUpgrade sambaUpgrade libwbclientUpgrade samba-pythonUpgrade samba-libs | Sep 28, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-winbind-clientsUpgrade samba-clientUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-winbindUpgrade samba-commonUpgrade samba-libsUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade samba | Mar 24, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-sambaUpgrade samba-testUpgrade samba-krb5-printingUpgrade samba-test-libsUpgrade libwbclientUpgrade python3-sambaUpgrade samba-libsUpgrade samba-clientUpgrade samba-commonUpgrade ctdbUpgrade samba-pidlUpgrade samba-dc-libsUpgrade python2-samba-testUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade python3-samba-testUpgrade sambaUpgrade samba-client-libsUpgrade ctdb-testsUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-common-libs | Feb 26, 2020 | Jan 21, 2020 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Jan 21, 2020 |
| Samba | — | Upgrade to Samba 4.10.12 or later.Upgrade to Samba 4.9.18 or later.Upgrade to Samba 4.11.5 or later. | Jan 24, 2020 | Jan 21, 2020 |
| Suse | — | Upgrade libsamba-policy0-32bitUpgrade libndr-standard-develUpgrade samba-client-32bitUpgrade libndr-krb5pac0Upgrade libdcerpc-samr0Upgrade samba-libs-python3-32bitUpgrade samba-ad-dcUpgrade libsmbconf-develUpgrade libsamba-passdb-develUpgrade libndr-develUpgrade samba-dsdb-modulesUpgrade ldb-toolsUpgrade libtevent-util0-32bitUpgrade samba-testUpgrade libsamba-passdb0Upgrade libsamba-errors-develUpgrade libndr-standard0-32bitUpgrade libdcerpc0Upgrade libdcerpc-binding0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libwbclient0-32bitUpgrade libnetapi0-32bitUpgrade libldb-develUpgrade ctdb-testsUpgrade libndr1-32bitUpgrade libndr-krb5pac-develUpgrade libsamba-policy0Upgrade samba-core-develUpgrade libsmbldap2Upgrade libsamdb-develUpgrade libsamba-util0Upgrade libsamba-errors0Upgrade libwbclient-develUpgrade samba-ad-dc-32bitUpgrade python-ldb-develUpgrade libsamdb0-32bitUpgrade libsamba-policy-python3-develUpgrade libldb1Upgrade libndr0-32bitUpgrade libndr-nbt0-32bitUpgrade libsamba-passdb0-32bitUpgrade samba-python3Upgrade samba-clientUpgrade libsamba-hostconfig-develUpgrade libsamdb0Upgrade samba-winbind-32bitUpgrade libndr0Upgrade libndr1Upgrade libwbclient0Upgrade samba-docUpgrade libsamba-util0-32bitUpgrade samba-libs-python3Upgrade libsmbclient-develUpgrade libsamba-policy-python-develUpgrade libsamba-util-develUpgrade sambaUpgrade libsmbconf0-32bitUpgrade samba-libs-python-32bitUpgrade python-ldbUpgrade libsamba-policy0-python3Upgrade libsamba-errors0-32bitUpgrade libtevent-util0Upgrade libsamba-credentials0Upgrade libsamba-policy0-python3-32bitUpgrade libldb1-32bitUpgrade libdcerpc0-32bitUpgrade samba-winbindUpgrade samba-libsUpgrade ctdb-pcp-pmdaUpgrade libndr-nbt-develUpgrade libndr-standard0Upgrade libnetapi0Upgrade libnetapi-develUpgrade libsamba-policy-develUpgrade libdcerpc-develUpgrade samba-libs-pythonUpgrade libtevent-util-develUpgrade libdcerpc-binding0Upgrade libsamba-credentials-develUpgrade libsmbconf0Upgrade libdcerpc-samr-develUpgrade libsmbldap2-32bitUpgrade libsamba-credentials0-32bitUpgrade libsamba-hostconfig0Upgrade samba-libs-32bitUpgrade libsmbclient0Upgrade samba-pidlUpgrade ctdbUpgrade libsmbclient0-32bitUpgrade libndr-nbt0Upgrade samba-pythonUpgrade libdcerpc-samr0-32bitUpgrade libsmbldap-develUpgrade samba-cephUpgrade libndr-krb5pac0-32bit | Jan 25, 2020 | Jan 21, 2020 |
| Ubuntu | — | Upgrade samba | Mar 2, 2020 | Jan 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub