All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Jan 21, 2020 |
| Amazon Linux Ami 2 | — | Upgrade samba-client-libsUpgrade libwbclientUpgrade samba-libsUpgrade samba-pidlUpgrade samba-test-libsUpgrade samba-testUpgrade samba-develUpgrade samba-krb5-printingUpgrade libsmbclient-develUpgrade ctdb-testsUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade sambaUpgrade libwbclient-develUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-vfs-glusterfsUpgrade samba-winbindUpgrade samba-debuginfoUpgrade samba-dcUpgrade ctdbUpgrade samba-python-testUpgrade samba-dc-libs | Oct 28, 2020 | Jan 21, 2020 |
| Amazon_linux | — | Upgrade samba | Nov 18, 2020 | Jan 21, 2020 |
| Centos_linux | — | Upgrade libwbclient-debuginfoUpgrade samba-common-libs-debuginfoUpgrade ctdb-debuginfoUpgrade openchangeUpgrade openchange-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-modulesUpgrade samba-pidlUpgrade libwbclient-develUpgrade samba-winbind-clients-debuginfoUpgrade sambaUpgrade samba-winbind-debuginfoUpgrade samba-common-libsUpgrade ctdb-testsUpgrade samba-client-libs-debuginfoUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade libsmbclient-debuginfoUpgrade openchange-client-debuginfoUpgrade samba-client-libsUpgrade python3-samba-testUpgrade samba-common-toolsUpgrade samba-develUpgrade samba-python-testUpgrade samba-vfs-glusterfs-debuginfoUpgrade libsmbclient-develUpgrade samba-libs-debuginfoUpgrade libwbclientUpgrade openchange-debugsourceUpgrade samba-dcUpgrade samba-test-libsUpgrade samba-clientUpgrade ctdb-tests-debuginfoUpgrade samba-vfs-glusterfsUpgrade samba-libsUpgrade samba-debuginfoUpgrade samba-debugsourceUpgrade ctdbUpgrade samba-test-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-commonUpgrade samba-client-debuginfoUpgrade samba-testUpgrade python3-sambaUpgrade samba-winbind-krb5-locator-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-krb5-printingUpgrade samba-dc-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-common-tools-debuginfo | Apr 29, 2020 | Jan 21, 2020 |
| Debian | — | Upgrade samba | May 31, 2021 | Jan 21, 2020 |
| Freebsd | — | Upgrade samba410Upgrade samba411 | Jan 27, 2020 | Jan 27, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-commonUpgrade samba-winbindUpgrade samba-libsUpgrade samba-pythonUpgrade samba-client-libsUpgrade libwbclientUpgrade sambaUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-winbind-modules | Nov 3, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-winbind-modulesUpgrade libwbclientUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade samba-commonUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-libsUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-common-libs | Sep 28, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libwbclientUpgrade samba-client-libsUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade samba-common-libsUpgrade samba-clientUpgrade libsmbclientUpgrade samba-commonUpgrade sambaUpgrade samba-winbindUpgrade samba-libsUpgrade samba-winbind-modules | Feb 24, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-krb5-printingUpgrade python3-sambaUpgrade samba-testUpgrade samba-pidlUpgrade libwbclientUpgrade python2-sambaUpgrade samba-client-libsUpgrade samba-libsUpgrade ctdb-testsUpgrade ctdbUpgrade samba-commonUpgrade samba-dc-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbindUpgrade samba-clientUpgrade sambaUpgrade python3-samba-testUpgrade libsmbclientUpgrade samba-test-libsUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade python2-samba-test | Feb 26, 2020 | Jan 21, 2020 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Jan 21, 2020 |
| Oracle_linux | — | Upgrade samba-winbindUpgrade ctdb-testsUpgrade python3-sambaUpgrade samba-pidlUpgrade samba-client-libsUpgrade samba-pythonUpgrade libwbclientUpgrade samba-winbind-modulesUpgrade samba-dcUpgrade libwbclient-develUpgrade libsmbclientUpgrade sambaUpgrade samba-libsUpgrade samba-krb5-printingUpgrade samba-clientUpgrade samba-commonUpgrade libsmbclient-develUpgrade samba-winbind-clientsUpgrade ctdbUpgrade samba-vfs-glusterfsUpgrade samba-python-testUpgrade samba-common-toolsUpgrade samba-develUpgrade samba-common-libsUpgrade openchangeUpgrade samba-testUpgrade samba-test-libsUpgrade python3-samba-testUpgrade samba-dc-libsUpgrade samba-winbind-krb5-locator | Oct 7, 2020 | Jan 21, 2020 |
| Redhat_linux | — | Upgrade samba-winbind-krb5-locatorUpgrade samba-winbind-debuginfoUpgrade libwbclient-develUpgrade openchange-debugsourceUpgrade samba-libs-debuginfoUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade openchange-debuginfoUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-dc-libsUpgrade samba-winbind-modulesUpgrade python3-samba-debuginfoUpgrade samba-libsUpgrade samba-clientUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-winbindUpgrade samba-test-libsUpgrade samba-winbind-clients-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade openchangeUpgrade samba-client-debuginfoUpgrade python3-samba-testUpgrade samba-client-libs-debuginfoUpgrade libsmbclient-develUpgrade sambaUpgrade samba-winbind-modules-debuginfoUpgrade samba-commonUpgrade samba-debuginfoUpgrade samba-client-libsUpgrade samba-pythonUpgrade ctdb-testsUpgrade libsmbclient-debuginfoUpgrade samba-krb5-printingUpgrade samba-python-testUpgrade samba-test-libs-debuginfoUpgrade ctdbUpgrade libwbclient-debuginfoUpgrade ctdb-tests-debuginfoUpgrade samba-testUpgrade samba-vfs-glusterfsUpgrade samba-pidlUpgrade samba-vfs-glusterfs-debuginfoUpgrade libwbclientUpgrade samba-develUpgrade python3-sambaUpgrade openchange-client-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-debugsourceUpgrade ctdb-debuginfoUpgrade samba-dcUpgrade samba-test-debuginfo | Apr 29, 2020 | Jan 21, 2020 |
| Samba | — | Upgrade to Samba 4.10.12 or later.Upgrade to Samba 4.11.5 or later.Upgrade to Samba 4.9.18 or later. | Jan 24, 2020 | Jan 21, 2020 |
| Suse | — | Upgrade libsamba-util-develUpgrade libndr-develUpgrade libldb-develUpgrade libsmbclient0Upgrade libdcerpc-develUpgrade libndr-nbt-develUpgrade samba-libs-python3Upgrade sambaUpgrade ctdb-pcp-pmdaUpgrade libsamba-policy-develUpgrade libnetapi0-32bitUpgrade samba-libs-python3-32bitUpgrade libldb1-32bitUpgrade samba-libs-pythonUpgrade libsamba-errors0-32bitUpgrade libndr0-32bitUpgrade libsamdb0Upgrade libtevent-util0Upgrade python-ldbUpgrade samba-pythonUpgrade libsamba-util0Upgrade libndr-standard0Upgrade libsamba-credentials0-32bitUpgrade libdcerpc-samr-develUpgrade samba-ad-dcUpgrade samba-winbind-32bitUpgrade libsamba-errors0Upgrade libsmbldap0Upgrade libnetapi-develUpgrade libwbclient0-32bitUpgrade libdcerpc-binding0Upgrade libsmbldap0-32bitUpgrade samba-python3Upgrade samba-ad-dc-32bitUpgrade libsamba-policy-python3-develUpgrade libsamba-errors-develUpgrade libndr-krb5pac-develUpgrade libsamba-hostconfig0-32bitUpgrade libndr-krb5pac0Upgrade samba-libs-32bitUpgrade samba-core-develUpgrade libdcerpc0Upgrade libsmbconf-develUpgrade libndr-nbt0Upgrade libdcerpc-samr0-32bitUpgrade samba-docUpgrade libsmbclient0-32bitUpgrade libdcerpc0-32bitUpgrade samba-winbindUpgrade libsamba-credentials-develUpgrade samba-clientUpgrade libsamba-policy0-python3-32bitUpgrade python-ldb-develUpgrade libsamba-policy-python-develUpgrade libsmbldap2Upgrade libwbclient-develUpgrade libnetapi0Upgrade libsamba-policy0-python3Upgrade libsamba-util0-32bitUpgrade libsamba-policy0-32bitUpgrade libtevent-util0-32bitUpgrade libsmbconf0Upgrade samba-client-32bitUpgrade libsamdb0-32bitUpgrade libsmbldap2-32bitUpgrade libndr1-32bitUpgrade samba-testUpgrade libndr-krb5pac0-32bitUpgrade libsamba-passdb0-32bitUpgrade libtevent-util-develUpgrade libsamba-passdb-develUpgrade libndr1Upgrade samba-libs-python-32bitUpgrade libndr0Upgrade libdcerpc-samr0Upgrade samba-cephUpgrade libsamba-policy0Upgrade samba-pidlUpgrade libsamba-credentials0Upgrade libndr-standard-develUpgrade samba-libsUpgrade libsmbldap-develUpgrade libdcerpc-binding0-32bitUpgrade libsmbclient-develUpgrade libsamdb-develUpgrade libldb1Upgrade ctdbUpgrade libndr-nbt0-32bitUpgrade libndr-standard0-32bitUpgrade libsamba-hostconfig0Upgrade samba-dsdb-modulesUpgrade libwbclient0Upgrade libsmbconf0-32bitUpgrade ctdb-testsUpgrade libsamba-hostconfig-develUpgrade libsamba-passdb0Upgrade ldb-tools | Jan 22, 2020 | Jan 21, 2020 |
| Ubuntu | — | Upgrade samba | Mar 2, 2020 | Jan 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub