All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Jan 21, 2020 |
| Amazon Linux Ami 2 | — | Upgrade samba-develUpgrade samba-client-libsUpgrade samba-libsUpgrade ctdb-testsUpgrade samba-pidlUpgrade libwbclientUpgrade samba-test-libsUpgrade samba-testUpgrade samba-krb5-printingUpgrade libsmbclient-develUpgrade samba-winbindUpgrade sambaUpgrade samba-winbind-krb5-locatorUpgrade samba-commonUpgrade samba-clientUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade libwbclient-develUpgrade samba-dc-libsUpgrade samba-vfs-glusterfsUpgrade libsmbclientUpgrade samba-python-testUpgrade samba-dcUpgrade samba-winbind-clientsUpgrade ctdbUpgrade samba-debuginfoUpgrade samba-common-toolsUpgrade samba-common-libs | Oct 28, 2020 | Jan 21, 2020 |
| Amazon_linux | — | Upgrade samba | Nov 18, 2020 | Jan 21, 2020 |
| Centos_linux | — | Upgrade python3-samba-debuginfoUpgrade samba-python-testUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-debugsourceUpgrade samba-dcUpgrade samba-test-libs-debuginfoUpgrade samba-client-debuginfoUpgrade samba-testUpgrade libwbclientUpgrade samba-test-debuginfoUpgrade libsmbclient-develUpgrade samba-develUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-commonUpgrade samba-winbind-krb5-locatorUpgrade samba-libs-debuginfoUpgrade samba-libsUpgrade samba-debuginfoUpgrade openchange-debugsourceUpgrade ctdb-tests-debuginfoUpgrade samba-clientUpgrade samba-common-tools-debuginfoUpgrade samba-krb5-printingUpgrade samba-test-libsUpgrade samba-dc-libsUpgrade samba-vfs-glusterfsUpgrade python3-sambaUpgrade samba-common-toolsUpgrade ctdbUpgrade libsmbclientUpgrade samba-pidlUpgrade libwbclient-debuginfoUpgrade samba-pythonUpgrade samba-winbind-debuginfoUpgrade openchange-client-debuginfoUpgrade ctdb-testsUpgrade samba-krb5-printing-debuginfoUpgrade samba-common-libsUpgrade samba-client-libs-debuginfoUpgrade python3-samba-testUpgrade samba-winbindUpgrade samba-winbind-clients-debuginfoUpgrade libsmbclient-debuginfoUpgrade sambaUpgrade libwbclient-develUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade openchange-debuginfoUpgrade openchangeUpgrade samba-common-libs-debuginfoUpgrade ctdb-debuginfoUpgrade samba-winbind-clients | Apr 29, 2020 | Jan 21, 2020 |
| Debian | — | Upgrade samba | May 31, 2021 | Jan 21, 2020 |
| Freebsd | — | Upgrade samba411Upgrade samba410 | Jan 27, 2020 | Jan 27, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-libsUpgrade samba-winbindUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-commonUpgrade samba-pythonUpgrade sambaUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade libsmbclient | Nov 3, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-commonUpgrade samba-pythonUpgrade libwbclientUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade sambaUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-client-libs | Sep 28, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-libsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba-common-toolsUpgrade samba-clientUpgrade sambaUpgrade samba-commonUpgrade samba-client-libsUpgrade libwbclient | Feb 24, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libwbclientUpgrade ctdb-testsUpgrade python3-sambaUpgrade python2-sambaUpgrade samba-pidlUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-testUpgrade samba-krb5-printingUpgrade libsmbclientUpgrade samba-commonUpgrade python3-samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-winbindUpgrade samba-clientUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade python2-samba-testUpgrade samba-winbind-clientsUpgrade samba-test-libsUpgrade samba-dc-libsUpgrade samba-common-libsUpgrade ctdb | Feb 26, 2020 | Jan 21, 2020 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Jan 21, 2020 |
| Oracle_linux | — | Upgrade samba-winbind-modulesUpgrade samba-pythonUpgrade samba-winbindUpgrade python3-sambaUpgrade samba-client-libsUpgrade samba-dcUpgrade samba-pidlUpgrade libsmbclientUpgrade libwbclientUpgrade ctdb-testsUpgrade libwbclient-develUpgrade sambaUpgrade samba-python-testUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-dc-libsUpgrade openchangeUpgrade samba-winbind-krb5-locatorUpgrade ctdbUpgrade samba-krb5-printingUpgrade samba-test-libsUpgrade samba-commonUpgrade libsmbclient-develUpgrade samba-winbind-clientsUpgrade samba-testUpgrade samba-vfs-glusterfsUpgrade samba-develUpgrade samba-clientUpgrade samba-common-libsUpgrade python3-samba-test | Oct 7, 2020 | Jan 21, 2020 |
| Redhat_linux | — | Upgrade samba-debugsourceUpgrade samba-test-debuginfoUpgrade samba-client-libsUpgrade sambaUpgrade python3-sambaUpgrade samba-krb5-printingUpgrade samba-commonUpgrade samba-common-libs-debuginfoUpgrade samba-python-testUpgrade samba-test-libs-debuginfoUpgrade samba-pidlUpgrade openchange-client-debuginfoUpgrade libwbclient-debuginfoUpgrade ctdb-debuginfoUpgrade samba-develUpgrade samba-vfs-glusterfsUpgrade samba-testUpgrade libsmbclient-debuginfoUpgrade ctdb-testsUpgrade samba-vfs-glusterfs-debuginfoUpgrade libwbclientUpgrade samba-dcUpgrade samba-winbind-modules-debuginfoUpgrade samba-pythonUpgrade ctdbUpgrade ctdb-tests-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-debuginfoUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-test-libsUpgrade openchangeUpgrade python3-samba-debuginfoUpgrade samba-client-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade libsmbclient-develUpgrade samba-winbind-krb5-locatorUpgrade samba-libsUpgrade samba-clientUpgrade libwbclient-develUpgrade samba-dc-libsUpgrade samba-client-libs-debuginfoUpgrade python3-samba-testUpgrade samba-winbind-clients-debuginfoUpgrade openchange-debugsourceUpgrade samba-winbind-modulesUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbindUpgrade openchange-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-winbind-krb5-locator-debuginfo | Apr 29, 2020 | Jan 21, 2020 |
| Samba | — | Upgrade to Samba 4.9.18 or later.Upgrade to Samba 4.10.12 or later.Upgrade to Samba 4.11.5 or later. | Jan 24, 2020 | Jan 21, 2020 |
| Suse | — | Upgrade libsmbconf0Upgrade libsmbldap2-32bitUpgrade ctdb-testsUpgrade libndr-standard-develUpgrade ldb-toolsUpgrade libndr1Upgrade libndr0Upgrade libwbclient0Upgrade libsamba-hostconfig0Upgrade libsamba-hostconfig-develUpgrade samba-libsUpgrade libsamba-passdb-develUpgrade libtevent-util-develUpgrade libndr1-32bitUpgrade libsamdb-develUpgrade libsamba-passdb0Upgrade ctdbUpgrade samba-dsdb-modulesUpgrade libndr-standard0-32bitUpgrade samba-testUpgrade libtevent-util0-32bitUpgrade libndr-nbt0-32bitUpgrade libldb1Upgrade libsamdb0-32bitUpgrade libsamba-credentials0Upgrade samba-libs-python-32bitUpgrade libsamba-util0-32bitUpgrade samba-client-32bitUpgrade libsamba-passdb0-32bitUpgrade libsmbclient-develUpgrade libsamba-policy0Upgrade libsmbldap-develUpgrade libsamba-policy0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libsamba-policy0-python3Upgrade libsmbconf0-32bitUpgrade libndr-krb5pac0-32bitUpgrade samba-pidlUpgrade libdcerpc-samr0Upgrade libnetapi0Upgrade samba-cephUpgrade sambaUpgrade libwbclient0-32bitUpgrade ctdb-pcp-pmdaUpgrade samba-python3Upgrade libdcerpc0Upgrade libldb-develUpgrade libsmbclient0Upgrade libsamba-policy-develUpgrade libndr-nbt-develUpgrade samba-libs-python3Upgrade libdcerpc-develUpgrade libsamba-errors0-32bitUpgrade libsamba-policy-python-develUpgrade libwbclient-develUpgrade samba-docUpgrade libsmbclient0-32bitUpgrade libsmbconf-develUpgrade libdcerpc0-32bitUpgrade samba-core-develUpgrade libtevent-util0Upgrade libdcerpc-samr-develUpgrade libsamba-util0Upgrade python-ldbUpgrade libsamba-util-develUpgrade libndr-standard0Upgrade samba-pythonUpgrade samba-ad-dcUpgrade libdcerpc-samr0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade python-ldb-develUpgrade libndr-nbt0Upgrade libsamba-policy0-python3-32bitUpgrade samba-libs-32bitUpgrade libndr-develUpgrade libndr-krb5pac0Upgrade libldb1-32bitUpgrade samba-winbind-32bitUpgrade libsamba-policy-python3-develUpgrade libndr-krb5pac-develUpgrade samba-ad-dc-32bitUpgrade libsmbldap0-32bitUpgrade samba-clientUpgrade libsamba-credentials0-32bitUpgrade samba-winbindUpgrade libsmbldap2Upgrade libsamba-credentials-develUpgrade libsamdb0Upgrade samba-libs-pythonUpgrade libsmbldap0Upgrade libdcerpc-binding0Upgrade libndr0-32bitUpgrade libnetapi0-32bitUpgrade samba-libs-python3-32bitUpgrade libsamba-errors-develUpgrade libsamba-errors0Upgrade libnetapi-devel | Jan 22, 2020 | Jan 21, 2020 |
| Ubuntu | — | Upgrade samba | Mar 2, 2020 | Jan 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub