All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Jan 21, 2020 |
| Amazon Linux Ami 2 | — | Upgrade samba-winbind-modulesUpgrade sambaUpgrade samba-winbindUpgrade samba-common-toolsUpgrade samba-dc-libsUpgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba-common-libsUpgrade libwbclient-develUpgrade samba-clientUpgrade samba-python-testUpgrade samba-commonUpgrade samba-vfs-glusterfsUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade ctdbUpgrade samba-dcUpgrade samba-debuginfoUpgrade samba-test-libsUpgrade samba-krb5-printingUpgrade samba-client-libsUpgrade libsmbclient-develUpgrade ctdb-testsUpgrade samba-pidlUpgrade samba-libsUpgrade libwbclientUpgrade samba-develUpgrade samba-test | Oct 28, 2020 | Jan 21, 2020 |
| Amazon_linux | — | Upgrade samba | Nov 18, 2020 | Jan 21, 2020 |
| Centos_linux | — | Upgrade ctdb-tests-debuginfoUpgrade samba-clientUpgrade samba-krb5-printingUpgrade samba-dc-libsUpgrade samba-libs-debuginfoUpgrade samba-commonUpgrade ctdbUpgrade samba-testUpgrade samba-winbind-modules-debuginfoUpgrade samba-python-testUpgrade openchange-debugsourceUpgrade samba-client-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-test-libsUpgrade samba-common-tools-debuginfoUpgrade samba-dcUpgrade samba-common-toolsUpgrade samba-vfs-glusterfs-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade python3-sambaUpgrade libwbclientUpgrade libsmbclient-develUpgrade samba-debuginfoUpgrade samba-libsUpgrade samba-develUpgrade samba-vfs-glusterfsUpgrade samba-test-libs-debuginfoUpgrade samba-test-debuginfoUpgrade samba-debugsourceUpgrade samba-client-libsUpgrade samba-client-libs-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-common-libsUpgrade sambaUpgrade openchange-client-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade python3-samba-testUpgrade samba-winbind-debuginfoUpgrade samba-pythonUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade libwbclient-develUpgrade samba-winbindUpgrade libsmbclient-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-pidlUpgrade samba-winbind-modulesUpgrade openchangeUpgrade openchange-debuginfoUpgrade ctdb-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade ctdb-tests | Apr 29, 2020 | Jan 21, 2020 |
| Debian | — | Upgrade samba | May 31, 2021 | Jan 21, 2020 |
| Freebsd | — | Upgrade samba411Upgrade samba410 | Jan 27, 2020 | Jan 27, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-pythonUpgrade sambaUpgrade samba-libsUpgrade samba-common | Nov 3, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-winbind-clientsUpgrade libwbclientUpgrade sambaUpgrade samba-pythonUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-common-libs | Sep 28, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-pythonUpgrade samba-libsUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-commonUpgrade sambaUpgrade samba-winbindUpgrade samba-clientUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade libwbclient | Feb 24, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-common-libsUpgrade python2-samba-testUpgrade libsmbclientUpgrade python3-samba-testUpgrade ctdbUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade sambaUpgrade samba-clientUpgrade samba-winbindUpgrade samba-winbind-krb5-locatorUpgrade samba-dc-libsUpgrade samba-test-libsUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade python3-sambaUpgrade python2-sambaUpgrade samba-pidlUpgrade samba-testUpgrade samba-krb5-printingUpgrade samba-libsUpgrade ctdb-testsUpgrade libwbclient | Feb 26, 2020 | Jan 21, 2020 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Jan 21, 2020 |
| Oracle_linux | — | Upgrade libsmbclient-develUpgrade samba-testUpgrade samba-common-toolsUpgrade samba-krb5-printingUpgrade samba-dc-libsUpgrade samba-python-testUpgrade samba-winbind-krb5-locatorUpgrade ctdbUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade openchangeUpgrade samba-vfs-glusterfsUpgrade samba-clientUpgrade python3-samba-testUpgrade samba-common-libsUpgrade samba-libsUpgrade samba-develUpgrade samba-test-libsUpgrade libwbclient-develUpgrade sambaUpgrade samba-winbindUpgrade python3-sambaUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba-pidlUpgrade samba-dcUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade ctdb-testsUpgrade libwbclient | Oct 7, 2020 | Jan 21, 2020 |
| Redhat_linux | — | Upgrade samba-test-libs-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-vfs-glusterfsUpgrade samba-develUpgrade libwbclientUpgrade openchange-client-debuginfoUpgrade python3-sambaUpgrade samba-pythonUpgrade ctdb-testsUpgrade samba-test-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-debuginfoUpgrade ctdb-tests-debuginfoUpgrade samba-client-libsUpgrade ctdbUpgrade sambaUpgrade samba-krb5-printingUpgrade samba-dcUpgrade samba-python-testUpgrade samba-winbind-modules-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-debugsourceUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-testUpgrade samba-pidlUpgrade samba-commonUpgrade samba-common-libs-debuginfoUpgrade ctdb-debuginfoUpgrade openchange-debugsourceUpgrade libwbclient-develUpgrade python3-samba-testUpgrade samba-dc-libsUpgrade samba-client-libs-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-common-toolsUpgrade openchange-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-libsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-client-debuginfoUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade libsmbclient-develUpgrade samba-clientUpgrade samba-winbindUpgrade openchangeUpgrade samba-libs-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-test-libs | Apr 29, 2020 | Jan 21, 2020 |
| Samba | — | Upgrade to Samba 4.9.18 or later.Upgrade to Samba 4.10.12 or later.Upgrade to Samba 4.11.5 or later. | Jan 24, 2020 | Jan 21, 2020 |
| Suse | — | Upgrade libsamba-passdb-develUpgrade ctdb-testsUpgrade libndr-standard0-32bitUpgrade libsmbconf0-32bitUpgrade libndr0Upgrade libwbclient0Upgrade samba-libsUpgrade libsamba-policy0Upgrade libdcerpc-binding0-32bitUpgrade libnetapi0Upgrade samba-cephUpgrade libndr1-32bitUpgrade libsmbldap-develUpgrade libndr-krb5pac0-32bitUpgrade libsamba-policy0-32bitUpgrade libsamba-passdb0-32bitUpgrade libsamba-util0-32bitUpgrade libsamba-policy0-python3Upgrade libsamdb-develUpgrade libsmbldap2-32bitUpgrade samba-client-32bitUpgrade libsamdb0-32bitUpgrade ldb-toolsUpgrade libsamba-passdb0Upgrade libsamba-credentials0Upgrade libndr1Upgrade libsmbclient-develUpgrade samba-pidlUpgrade libndr-standard-develUpgrade samba-libs-python-32bitUpgrade libtevent-util0-32bitUpgrade ctdbUpgrade libldb1Upgrade samba-testUpgrade libsamba-hostconfig-develUpgrade samba-dsdb-modulesUpgrade libtevent-util-develUpgrade libdcerpc-samr0Upgrade libndr-nbt0-32bitUpgrade libsmbconf0Upgrade libsamba-hostconfig0Upgrade samba-ad-dcUpgrade libsmbconf-develUpgrade libndr-krb5pac-develUpgrade libdcerpc-samr-develUpgrade samba-pythonUpgrade libsamba-util0Upgrade samba-python3Upgrade samba-core-develUpgrade libndr-krb5pac0Upgrade libndr-develUpgrade libsmbclient0Upgrade sambaUpgrade libdcerpc-develUpgrade samba-winbindUpgrade libsmbldap2Upgrade libdcerpc0Upgrade samba-ad-dc-32bitUpgrade libsamba-policy-develUpgrade libndr-nbt-develUpgrade libsamba-util-develUpgrade libsamba-hostconfig0-32bitUpgrade libndr-standard0Upgrade libtevent-util0Upgrade python-ldbUpgrade samba-winbind-32bitUpgrade libdcerpc0-32bitUpgrade libndr-nbt0Upgrade samba-libs-python3Upgrade libdcerpc-samr0-32bitUpgrade libldb-develUpgrade libndr0-32bitUpgrade libsmbclient0-32bitUpgrade libsamba-policy-python-develUpgrade samba-libs-python3-32bitUpgrade libldb1-32bitUpgrade libnetapi0-32bitUpgrade libsamba-errors0-32bitUpgrade libsamdb0Upgrade libsmbldap0Upgrade samba-libs-pythonUpgrade libdcerpc-binding0Upgrade libsamba-errors0Upgrade libwbclient0-32bitUpgrade libnetapi-develUpgrade libsamba-errors-develUpgrade libwbclient-develUpgrade samba-docUpgrade libsmbldap0-32bitUpgrade ctdb-pcp-pmdaUpgrade libsamba-policy-python3-develUpgrade libsamba-credentials0-32bitUpgrade python-ldb-develUpgrade libsamba-credentials-develUpgrade samba-libs-32bitUpgrade libsamba-policy0-python3-32bitUpgrade samba-client | Jan 22, 2020 | Jan 21, 2020 |
| Ubuntu | — | Upgrade samba | Mar 2, 2020 | Jan 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub