All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Jan 21, 2020 |
| Amazon Linux Ami 2 | — | Upgrade samba-pythonUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-vfs-glusterfsUpgrade samba-dcUpgrade samba-python-testUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-winbindUpgrade samba-clientUpgrade samba-debuginfoUpgrade ctdbUpgrade samba-common-toolsUpgrade samba-dc-libsUpgrade samba-common-libsUpgrade libwbclient-develUpgrade samba-winbind-krb5-locatorUpgrade samba-develUpgrade libsmbclient-develUpgrade ctdb-testsUpgrade samba-krb5-printingUpgrade samba-test-libsUpgrade samba-libsUpgrade libwbclientUpgrade samba-pidlUpgrade samba-client-libsUpgrade samba-test | Oct 28, 2020 | Jan 21, 2020 |
| Amazon_linux | — | Upgrade samba | Nov 18, 2020 | Jan 21, 2020 |
| Centos_linux | — | Upgrade samba-vfs-glusterfs-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-test-libsUpgrade samba-client-debuginfoUpgrade ctdb-tests-debuginfoUpgrade samba-commonUpgrade python3-samba-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-testUpgrade libsmbclient-develUpgrade libwbclientUpgrade samba-python-testUpgrade samba-clientUpgrade ctdbUpgrade samba-libs-debuginfoUpgrade samba-develUpgrade samba-common-toolsUpgrade samba-dcUpgrade samba-winbind-modules-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-debugsourceUpgrade samba-test-debuginfoUpgrade samba-libsUpgrade samba-vfs-glusterfsUpgrade samba-debuginfoUpgrade samba-dc-libsUpgrade openchange-debugsourceUpgrade samba-krb5-printingUpgrade samba-common-tools-debuginfoUpgrade python3-sambaUpgrade ctdb-testsUpgrade samba-winbind-clients-debuginfoUpgrade openchange-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-debuginfoUpgrade ctdb-debuginfoUpgrade openchangeUpgrade samba-pythonUpgrade sambaUpgrade samba-winbind-clientsUpgrade libwbclient-develUpgrade samba-winbindUpgrade python3-samba-testUpgrade openchange-client-debuginfoUpgrade libsmbclientUpgrade libwbclient-debuginfoUpgrade samba-winbind-modulesUpgrade samba-common-libs-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-pidlUpgrade samba-client-libsUpgrade samba-client-libs-debuginfoUpgrade samba-common-libs | Apr 29, 2020 | Jan 21, 2020 |
| Debian | — | Upgrade samba | May 31, 2021 | Jan 21, 2020 |
| Freebsd | — | Upgrade samba411Upgrade samba410 | Jan 27, 2020 | Jan 27, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-winbind-modulesUpgrade samba-clientUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade sambaUpgrade samba-winbindUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-python | Nov 3, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-common-toolsUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-client-libsUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade samba-pythonUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade sambaUpgrade libwbclientUpgrade samba-winbind | Sep 28, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-clientUpgrade samba-winbindUpgrade samba-libsUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-pythonUpgrade sambaUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade libwbclientUpgrade samba-client-libs | Feb 24, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-test-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade python3-samba-testUpgrade ctdbUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-common-libsUpgrade sambaUpgrade samba-winbind-clientsUpgrade python2-samba-testUpgrade samba-dc-libsUpgrade samba-testUpgrade ctdb-testsUpgrade libwbclientUpgrade samba-pidlUpgrade python3-sambaUpgrade python2-sambaUpgrade samba-krb5-printingUpgrade samba-client-libsUpgrade samba-libs | Feb 26, 2020 | Jan 21, 2020 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Jan 21, 2020 |
| Oracle_linux | — | Upgrade ctdb-testsUpgrade libwbclient-develUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-pidlUpgrade sambaUpgrade samba-dcUpgrade python3-sambaUpgrade libsmbclientUpgrade libwbclientUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba-testUpgrade samba-krb5-printingUpgrade samba-winbind-krb5-locatorUpgrade libsmbclient-develUpgrade python3-samba-testUpgrade samba-test-libsUpgrade openchangeUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-vfs-glusterfsUpgrade samba-develUpgrade samba-python-testUpgrade samba-libsUpgrade ctdbUpgrade samba-dc-libs | Oct 7, 2020 | Jan 21, 2020 |
| Redhat_linux | — | Upgrade openchange-client-debuginfoUpgrade samba-pythonUpgrade samba-testUpgrade ctdbUpgrade libwbclient-debuginfoUpgrade samba-vfs-glusterfsUpgrade samba-debuginfoUpgrade samba-debugsourceUpgrade samba-dcUpgrade sambaUpgrade python3-sambaUpgrade samba-vfs-glusterfs-debuginfoUpgrade libsmbclient-debuginfoUpgrade libwbclientUpgrade samba-test-libs-debuginfoUpgrade samba-python-testUpgrade samba-pidlUpgrade ctdb-tests-debuginfoUpgrade ctdb-debuginfoUpgrade samba-client-libsUpgrade samba-common-libs-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-krb5-printingUpgrade samba-winbind-modules-debuginfoUpgrade samba-commonUpgrade samba-test-debuginfoUpgrade ctdb-testsUpgrade samba-develUpgrade samba-libsUpgrade samba-winbind-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade openchangeUpgrade python3-samba-debuginfoUpgrade openchange-debugsourceUpgrade samba-client-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-test-libsUpgrade samba-krb5-printing-debuginfoUpgrade samba-client-libs-debuginfoUpgrade libwbclient-develUpgrade samba-winbindUpgrade python3-samba-testUpgrade samba-winbind-krb5-locator-debuginfoUpgrade openchange-debuginfoUpgrade libsmbclient-develUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-common-libs | Apr 29, 2020 | Jan 21, 2020 |
| Samba | — | Upgrade to Samba 4.11.5 or later.Upgrade to Samba 4.9.18 or later.Upgrade to Samba 4.10.12 or later. | Jan 24, 2020 | Jan 21, 2020 |
| Suse | — | Upgrade libsmbldap0Upgrade libnetapi-develUpgrade libsamba-errors0Upgrade libwbclient0-32bitUpgrade samba-core-develUpgrade libsmbclient0-32bitUpgrade libsmbclient0Upgrade sambaUpgrade libsamba-policy0-python3-32bitUpgrade libndr-nbt-develUpgrade libdcerpc0Upgrade libsamba-credentials-develUpgrade ctdb-pcp-pmdaUpgrade libdcerpc-develUpgrade libsamba-policy-python-develUpgrade libsmbconf-develUpgrade libwbclient-develUpgrade libdcerpc0-32bitUpgrade libsamba-policy-python3-develUpgrade python-ldb-develUpgrade libsamba-policy-develUpgrade libsmbldap0-32bitUpgrade libdcerpc-samr0-32bitUpgrade libndr-standard0Upgrade samba-ad-dcUpgrade samba-python3Upgrade libndr-develUpgrade samba-ad-dc-32bitUpgrade libndr-krb5pac-develUpgrade samba-libs-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libndr-nbt0Upgrade libldb-develUpgrade libsamba-credentials0-32bitUpgrade libsmbldap2Upgrade samba-clientUpgrade samba-winbindUpgrade libndr-krb5pac0Upgrade libsamba-util-develUpgrade libtevent-util0Upgrade python-ldbUpgrade samba-pythonUpgrade samba-docUpgrade samba-winbind-32bitUpgrade libdcerpc-samr-develUpgrade samba-libs-pythonUpgrade libnetapi0-32bitUpgrade libdcerpc-binding0Upgrade libndr0-32bitUpgrade libsamba-errors-develUpgrade libsamdb0Upgrade libsamba-errors0-32bitUpgrade libldb1-32bitUpgrade samba-libs-python3-32bitUpgrade libsamba-util0Upgrade samba-libs-python3Upgrade ctdb-testsUpgrade libldb1Upgrade libsamba-passdb-develUpgrade libsmbldap2-32bitUpgrade libndr1-32bitUpgrade libsamba-policy0-32bitUpgrade samba-client-32bitUpgrade samba-cephUpgrade libwbclient0Upgrade libnetapi0Upgrade libndr-standard0-32bitUpgrade libsmbconf0-32bitUpgrade libsamba-hostconfig-develUpgrade libsamba-util0-32bitUpgrade libsamba-passdb0-32bitUpgrade libndr0Upgrade libsamba-policy0-python3Upgrade libndr1Upgrade libsamba-policy0Upgrade libdcerpc-binding0-32bitUpgrade libsmbconf0Upgrade libndr-nbt0-32bitUpgrade libsamdb0-32bitUpgrade libsamba-hostconfig0Upgrade ctdbUpgrade libsmbclient-develUpgrade samba-dsdb-modulesUpgrade samba-testUpgrade libtevent-util0-32bitUpgrade libtevent-util-develUpgrade libsamba-passdb0Upgrade samba-libsUpgrade libndr-standard-develUpgrade libsamba-credentials0Upgrade ldb-toolsUpgrade samba-pidlUpgrade libdcerpc-samr0Upgrade samba-libs-python-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsmbldap-develUpgrade libsamdb-devel | Jan 22, 2020 | Jan 21, 2020 |
| Ubuntu | — | Upgrade samba | Mar 2, 2020 | Jan 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub