There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and all samba 4.11.x versions before 4.11.5, essentially due to a call to realloc() while other local variables still point at the original buffer.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Jan 21, 2020 |
| Debian | — | Upgrade samba | Sep 14, 2023 | Jan 21, 2020 |
| Freebsd | — | Upgrade samba410Upgrade samba411 | Jan 27, 2020 | Jan 27, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-samba-testUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-winbindUpgrade samba-krb5-printingUpgrade libwbclientUpgrade ctdb-testsUpgrade python2-sambaUpgrade python3-sambaUpgrade samba-testUpgrade samba-pidlUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-test-libsUpgrade libsmbclientUpgrade samba-dc-libsUpgrade samba-common-toolsUpgrade sambaUpgrade samba-commonUpgrade python3-samba-testUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-winbind-krb5-locatorUpgrade ctdb | Apr 21, 2020 | Jan 21, 2020 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Jan 21, 2020 |
| Samba | — | Upgrade to Samba 4.9.18 or later.Upgrade to Samba 4.11.5 or later.Upgrade to Samba 4.10.12 or later. | Jan 24, 2020 | Jan 21, 2020 |
| Suse | — | Upgrade libsamba-policy-python-develUpgrade samba-docUpgrade libdcerpc0Upgrade libsamba-hostconfig0Upgrade libdcerpc-binding0Upgrade samba-clientUpgrade libsamba-credentials-develUpgrade libdcerpc-samr-develUpgrade sambaUpgrade libsmbclient-develUpgrade libsamba-hostconfig0-32bitUpgrade samba-libsUpgrade libdcerpc0-32bitUpgrade libsamdb0-32bitUpgrade libldb-develUpgrade samba-ad-dc-32bitUpgrade libsamdb0Upgrade libsamba-policy0-32bitUpgrade libsamba-policy0-python3Upgrade samba-libs-python-32bitUpgrade libnetapi0-32bitUpgrade libndr-nbt-develUpgrade libwbclient0Upgrade libsmbclient0-32bitUpgrade samba-libs-pythonUpgrade libsamba-policy-python3-develUpgrade libsamba-passdb0Upgrade samba-client-32bitUpgrade libndr-krb5pac-develUpgrade python-ldbUpgrade libsamba-policy0Upgrade libndr-nbt0Upgrade libtevent-util0Upgrade libsamba-util-develUpgrade libsamba-policy-develUpgrade samba-winbindUpgrade libsamba-util0-32bitUpgrade samba-python3Upgrade libndr-standard0Upgrade libtevent-util-develUpgrade libsmbldap2Upgrade libsamdb-develUpgrade samba-winbind-32bitUpgrade ctdb-pcp-pmdaUpgrade libwbclient-develUpgrade libndr-krb5pac0Upgrade libldb1-32bitUpgrade libsmbconf-develUpgrade libndr0-32bitUpgrade libsamba-passdb-develUpgrade libwbclient0-32bitUpgrade ldb-toolsUpgrade libsamba-passdb0-32bitUpgrade samba-testUpgrade libndr1Upgrade libsamba-credentials0Upgrade libsamba-credentials0-32bitUpgrade libndr-nbt0-32bitUpgrade samba-libs-32bitUpgrade libnetapi-develUpgrade libtevent-util0-32bitUpgrade libndr-standard0-32bitUpgrade libdcerpc-samr0-32bitUpgrade samba-pythonUpgrade libndr-krb5pac0-32bitUpgrade python-ldb-develUpgrade samba-ad-dcUpgrade libsamba-hostconfig-develUpgrade libndr-standard-develUpgrade ctdbUpgrade libdcerpc-samr0Upgrade libsamba-util0Upgrade libdcerpc-develUpgrade libnetapi0Upgrade libdcerpc-binding0-32bitUpgrade libndr-develUpgrade samba-dsdb-modulesUpgrade libsamba-errors-develUpgrade libsmbldap-develUpgrade samba-core-develUpgrade libsamba-errors0Upgrade libsamba-errors0-32bitUpgrade libsamba-policy0-python3-32bitUpgrade samba-pidlUpgrade libsmbldap2-32bitUpgrade samba-libs-python3-32bitUpgrade libndr0Upgrade libndr1-32bitUpgrade ctdb-testsUpgrade libsmbconf0-32bitUpgrade libsmbclient0Upgrade libldb1Upgrade libsmbconf0Upgrade samba-libs-python3Upgrade samba-ceph | Jan 30, 2020 | Jan 21, 2020 |
| Ubuntu | — | Upgrade samba | Mar 2, 2020 | Jan 21, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub