There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and all samba 4.11.x versions before 4.11.5, essentially due to a call to realloc() while other local variables still point at the original buffer.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Jan 21, 2020 |
| Debian | — | Upgrade samba | Sep 14, 2023 | Jan 21, 2020 |
| Freebsd | — | Upgrade samba411Upgrade samba410 | Jan 27, 2020 | Jan 27, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-winbind-clientsUpgrade samba-test-libsUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade samba-commonUpgrade python3-samba-testUpgrade samba-clientUpgrade samba-common-libsUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-dc-libsUpgrade ctdbUpgrade ctdb-testsUpgrade samba-winbindUpgrade samba-pidlUpgrade samba-client-libsUpgrade python2-samba-testUpgrade samba-testUpgrade samba-libsUpgrade samba-krb5-printingUpgrade python3-sambaUpgrade python2-sambaUpgrade libwbclient | Apr 21, 2020 | Jan 21, 2020 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Jan 21, 2020 |
| Samba | — | Upgrade to Samba 4.10.12 or later.Upgrade to Samba 4.11.5 or later.Upgrade to Samba 4.9.18 or later. | Jan 24, 2020 | Jan 21, 2020 |
| Suse | — | Upgrade libndr-krb5pac0Upgrade libsmbldap2Upgrade libndr-nbt-develUpgrade libsamba-policy-python-develUpgrade samba-winbindUpgrade libsamba-policy-develUpgrade libwbclient-develUpgrade libsamba-credentials-develUpgrade samba-clientUpgrade samba-libsUpgrade samba-docUpgrade libdcerpc-binding0Upgrade libsamdb-develUpgrade libdcerpc0Upgrade libndr-standard0Upgrade libnetapi0-32bitUpgrade libtevent-util0Upgrade libndr-krb5pac-develUpgrade ctdb-pcp-pmdaUpgrade libsmbclient-develUpgrade samba-winbind-32bitUpgrade samba-libs-pythonUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-util-develUpgrade libdcerpc-samr-develUpgrade libsamba-passdb0Upgrade libdcerpc0-32bitUpgrade libsamba-policy-python3-develUpgrade libsamba-util0-32bitUpgrade libldb-develUpgrade libndr-nbt0Upgrade libsamba-hostconfig0Upgrade libtevent-util-develUpgrade samba-python3Upgrade samba-ad-dc-32bitUpgrade libsmbclient0-32bitUpgrade sambaUpgrade libsamba-policy0-python3Upgrade python-ldbUpgrade libwbclient0Upgrade libsamba-policy0Upgrade libsamdb0-32bitUpgrade samba-libs-python-32bitUpgrade libsamba-policy0-32bitUpgrade libsamdb0Upgrade samba-client-32bitUpgrade libnetapi-develUpgrade libndr0Upgrade libtevent-util0-32bitUpgrade libsmbldap2-32bitUpgrade libsmbconf0Upgrade libsmbclient0Upgrade libsamba-passdb0-32bitUpgrade libdcerpc-samr0-32bitUpgrade libndr0-32bitUpgrade libndr-develUpgrade samba-dsdb-modulesUpgrade libdcerpc-binding0-32bitUpgrade libsamba-passdb-develUpgrade libnetapi0Upgrade samba-ad-dcUpgrade libdcerpc-develUpgrade samba-core-develUpgrade samba-cephUpgrade libndr-nbt0-32bitUpgrade libsmbldap-develUpgrade libsamba-errors-develUpgrade samba-libs-python3Upgrade libsamba-errors0Upgrade python-ldb-develUpgrade libsamba-errors0-32bitUpgrade libsamba-util0Upgrade libndr1Upgrade samba-libs-32bitUpgrade ldb-toolsUpgrade libsmbconf-develUpgrade libndr-krb5pac0-32bitUpgrade libsamba-credentials0-32bitUpgrade samba-testUpgrade samba-pythonUpgrade libldb1-32bitUpgrade libldb1Upgrade libsmbconf0-32bitUpgrade libsamba-credentials0Upgrade libndr-standard0-32bitUpgrade ctdbUpgrade libndr-standard-develUpgrade libdcerpc-samr0Upgrade libsamba-hostconfig-develUpgrade libsamba-policy0-python3-32bitUpgrade samba-libs-python3-32bitUpgrade libwbclient0-32bitUpgrade libndr1-32bitUpgrade ctdb-testsUpgrade samba-pidl | Jan 30, 2020 | Jan 21, 2020 |
| Ubuntu | — | Upgrade samba | Mar 2, 2020 | Jan 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub