There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and all samba 4.11.x versions before 4.11.5, essentially due to a call to realloc() while other local variables still point at the original buffer.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Jan 21, 2020 |
| Debian | — | Upgrade samba | Sep 14, 2023 | Jan 21, 2020 |
| Freebsd | — | Upgrade samba411Upgrade samba410 | Jan 27, 2020 | Jan 27, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-libsUpgrade samba-client-libsUpgrade samba-winbindUpgrade python2-samba-testUpgrade samba-testUpgrade samba-pidlUpgrade samba-krb5-printingUpgrade python3-sambaUpgrade python2-sambaUpgrade libwbclientUpgrade ctdb-testsUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade samba-clientUpgrade python3-samba-testUpgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade samba-test-libsUpgrade libsmbclientUpgrade sambaUpgrade ctdbUpgrade samba-common | Apr 21, 2020 | Jan 21, 2020 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Jan 21, 2020 |
| Samba | — | Upgrade to Samba 4.10.12 or later.Upgrade to Samba 4.9.18 or later.Upgrade to Samba 4.11.5 or later. | Jan 24, 2020 | Jan 21, 2020 |
| Suse | — | Upgrade libsamba-credentials-develUpgrade samba-winbindUpgrade samba-libsUpgrade libdcerpc0Upgrade samba-docUpgrade samba-ad-dc-32bitUpgrade libsmbclient-develUpgrade libndr-standard0Upgrade libwbclient0Upgrade libndr-krb5pac0Upgrade sambaUpgrade samba-winbind-32bitUpgrade libdcerpc0-32bitUpgrade libwbclient-develUpgrade libsamdb0Upgrade libldb-develUpgrade samba-clientUpgrade libtevent-util0Upgrade libsamba-policy-python-develUpgrade libsamba-policy0-32bitUpgrade libndr-krb5pac-develUpgrade libsamba-util-develUpgrade libdcerpc-binding0Upgrade samba-libs-python-32bitUpgrade libsamba-hostconfig0Upgrade python-ldbUpgrade libsamba-policy-develUpgrade libsmbclient0-32bitUpgrade libnetapi0-32bitUpgrade ctdb-pcp-pmdaUpgrade samba-python3Upgrade samba-client-32bitUpgrade libsamdb0-32bitUpgrade libsmbldap2Upgrade samba-libs-pythonUpgrade libtevent-util-develUpgrade libsamba-policy0Upgrade libdcerpc-samr-develUpgrade libndr-nbt0Upgrade libsamba-util0-32bitUpgrade libsamba-passdb0Upgrade libsamba-hostconfig0-32bitUpgrade libsamba-policy0-python3Upgrade libsamba-policy-python3-develUpgrade libsamdb-develUpgrade libndr-nbt-develUpgrade libndr-nbt0-32bitUpgrade samba-dsdb-modulesUpgrade libsmbldap-develUpgrade libdcerpc-samr0-32bitUpgrade samba-testUpgrade libndr0-32bitUpgrade ctdb-testsUpgrade libndr0Upgrade libsamba-hostconfig-develUpgrade libsmbclient0Upgrade samba-ad-dcUpgrade libdcerpc-samr0Upgrade libsmbldap2-32bitUpgrade libsamba-passdb-develUpgrade libndr-standard-develUpgrade libnetapi0Upgrade libnetapi-develUpgrade libsamba-errors-develUpgrade libdcerpc-develUpgrade libndr-develUpgrade libdcerpc-binding0-32bitUpgrade libsmbconf-develUpgrade samba-cephUpgrade samba-libs-32bitUpgrade libsamba-passdb0-32bitUpgrade libsamba-credentials0-32bitUpgrade libwbclient0-32bitUpgrade libndr1-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsmbconf0Upgrade ctdbUpgrade libldb1-32bitUpgrade libldb1Upgrade libndr-standard0-32bitUpgrade samba-pythonUpgrade libsmbconf0-32bitUpgrade libsamba-credentials0Upgrade libtevent-util0-32bitUpgrade libsamba-util0Upgrade samba-pidlUpgrade libsamba-policy0-python3-32bitUpgrade samba-libs-python3-32bitUpgrade ldb-toolsUpgrade samba-core-develUpgrade libndr1Upgrade python-ldb-develUpgrade samba-libs-python3Upgrade libsamba-errors0-32bitUpgrade libsamba-errors0 | Jan 30, 2020 | Jan 21, 2020 |
| Ubuntu | — | Upgrade samba | Mar 2, 2020 | Jan 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub