There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and all samba 4.11.x versions before 4.11.5, essentially due to a call to realloc() while other local variables still point at the original buffer.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Jan 21, 2020 |
| Debian | — | Upgrade samba | Sep 14, 2023 | Jan 21, 2020 |
| Freebsd | — | Upgrade samba411Upgrade samba410 | Jan 27, 2020 | Jan 27, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-winbind-krb5-locatorUpgrade python3-samba-testUpgrade samba-dc-libsUpgrade samba-test-libsUpgrade ctdbUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade sambaUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-libsUpgrade python3-sambaUpgrade samba-winbindUpgrade samba-testUpgrade ctdb-testsUpgrade samba-krb5-printingUpgrade samba-pidlUpgrade python2-samba-testUpgrade libwbclientUpgrade samba-client-libsUpgrade python2-samba | Apr 21, 2020 | Jan 21, 2020 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Jan 21, 2020 |
| Samba | — | Upgrade to Samba 4.10.12 or later.Upgrade to Samba 4.11.5 or later.Upgrade to Samba 4.9.18 or later. | Jan 24, 2020 | Jan 21, 2020 |
| Suse | — | Upgrade ldb-toolsUpgrade samba-libs-32bitUpgrade libndr1Upgrade libsmbconf-develUpgrade samba-pythonUpgrade libldb1Upgrade libldb1-32bitUpgrade libndr-standard0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsamba-credentials0Upgrade libsmbconf0-32bitUpgrade samba-libs-python3-32bitUpgrade libndr1-32bitUpgrade samba-cephUpgrade libsamba-errors-develUpgrade ctdb-testsUpgrade samba-core-develUpgrade libsamba-passdb0-32bitUpgrade libdcerpc-develUpgrade libsamba-policy0-python3-32bitUpgrade libnetapi0Upgrade libsmbldap2-32bitUpgrade libsmbclient0Upgrade libnetapi-develUpgrade libsamba-passdb-develUpgrade libndr-nbt0-32bitUpgrade libtevent-util0-32bitUpgrade libsamba-credentials0-32bitUpgrade samba-testUpgrade libndr0-32bitUpgrade libsamba-errors0Upgrade libsamba-errors0-32bitUpgrade python-ldb-develUpgrade samba-pidlUpgrade samba-libs-python3Upgrade libndr0Upgrade libdcerpc-samr0-32bitUpgrade libsamba-hostconfig-develUpgrade ctdbUpgrade libndr-standard-develUpgrade samba-ad-dcUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc-samr0Upgrade samba-dsdb-modulesUpgrade libsamba-util0Upgrade libsmbldap-develUpgrade libwbclient0-32bitUpgrade libsmbconf0Upgrade libndr-develUpgrade samba-python3Upgrade libndr-nbt-develUpgrade libsamba-util0-32bitUpgrade libsamba-policy-python3-develUpgrade libsamba-policy0Upgrade libndr-nbt0Upgrade libdcerpc-samr-develUpgrade libsamdb-develUpgrade libsamdb0Upgrade samba-ad-dc-32bitUpgrade libldb-develUpgrade libsamba-policy0-python3Upgrade libwbclient0Upgrade sambaUpgrade samba-clientUpgrade libsamba-hostconfig0-32bitUpgrade samba-libs-python-32bitUpgrade libsamba-policy0-32bitUpgrade libsamdb0-32bitUpgrade libtevent-util-develUpgrade libsmbldap2Upgrade libsamba-passdb0Upgrade libdcerpc0-32bitUpgrade samba-client-32bitUpgrade ctdb-pcp-pmdaUpgrade libtevent-util0Upgrade samba-winbind-32bitUpgrade libndr-krb5pac-develUpgrade samba-winbindUpgrade libsmbclient0-32bitUpgrade python-ldbUpgrade libsamba-util-develUpgrade libsamba-hostconfig0Upgrade libsamba-policy-develUpgrade libsamba-policy-python-develUpgrade samba-docUpgrade libndr-standard0Upgrade libdcerpc-binding0Upgrade samba-libs-pythonUpgrade libnetapi0-32bitUpgrade libwbclient-develUpgrade libsmbclient-develUpgrade libndr-krb5pac0Upgrade samba-libsUpgrade libdcerpc0Upgrade libsamba-credentials-devel | Jan 30, 2020 | Jan 21, 2020 |
| Ubuntu | — | Upgrade samba | Mar 2, 2020 | Jan 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub