There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and all samba 4.11.x versions before 4.11.5, essentially due to a call to realloc() while other local variables still point at the original buffer.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Jan 21, 2020 |
| Debian | — | Upgrade samba | Sep 14, 2023 | Jan 21, 2020 |
| Freebsd | — | Upgrade samba411Upgrade samba410 | Jan 27, 2020 | Jan 27, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libwbclientUpgrade python2-sambaUpgrade ctdb-testsUpgrade python2-samba-testUpgrade samba-winbindUpgrade samba-libsUpgrade samba-testUpgrade samba-client-libsUpgrade python3-sambaUpgrade samba-krb5-printingUpgrade samba-pidlUpgrade sambaUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade samba-winbind-modulesUpgrade ctdbUpgrade samba-winbind-krb5-locatorUpgrade python3-samba-testUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-commonUpgrade samba-test-libsUpgrade libsmbclient | Apr 21, 2020 | Jan 21, 2020 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Jan 21, 2020 |
| Samba | — | Upgrade to Samba 4.11.5 or later.Upgrade to Samba 4.10.12 or later.Upgrade to Samba 4.9.18 or later. | Jan 24, 2020 | Jan 21, 2020 |
| Suse | — | Upgrade libndr-nbt0Upgrade libdcerpc-samr-develUpgrade libsamba-passdb0Upgrade samba-client-32bitUpgrade samba-winbind-32bitUpgrade samba-python3Upgrade libwbclient-develUpgrade libndr-krb5pac-develUpgrade libsamba-policy-develUpgrade libldb-develUpgrade libndr-krb5pac0Upgrade ctdb-pcp-pmdaUpgrade libdcerpc0Upgrade libtevent-util0Upgrade libsamdb-develUpgrade libsamba-policy-python3-develUpgrade libsamba-policy0Upgrade libdcerpc-binding0Upgrade samba-docUpgrade libsamba-policy-python-develUpgrade libsmbclient-develUpgrade libdcerpc0-32bitUpgrade libsamdb0Upgrade sambaUpgrade samba-clientUpgrade libsmbldap2Upgrade libsmbclient0-32bitUpgrade samba-winbindUpgrade samba-libsUpgrade python-ldbUpgrade libsamba-hostconfig0Upgrade libsamba-credentials-develUpgrade libnetapi0-32bitUpgrade libndr-standard0Upgrade libwbclient0Upgrade libsamba-util-develUpgrade libndr-nbt-develUpgrade samba-libs-python-32bitUpgrade libsamdb0-32bitUpgrade libtevent-util-develUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-policy0-python3Upgrade libsamba-policy0-32bitUpgrade libsamba-util0-32bitUpgrade samba-ad-dc-32bitUpgrade samba-libs-pythonUpgrade libndr-nbt0-32bitUpgrade libsamba-passdb-develUpgrade libwbclient0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libndr-standard-develUpgrade samba-dsdb-modulesUpgrade libnetapi-develUpgrade libtevent-util0-32bitUpgrade samba-testUpgrade libsamba-credentials0-32bitUpgrade libnetapi0Upgrade libdcerpc-samr0-32bitUpgrade libsamba-errors0-32bitUpgrade libsamba-errors0Upgrade samba-libs-python3Upgrade libndr0-32bitUpgrade samba-cephUpgrade ldb-toolsUpgrade samba-libs-32bitUpgrade libsmbconf-develUpgrade libndr-develUpgrade libsamba-passdb0-32bitUpgrade libndr1Upgrade python-ldb-develUpgrade libldb1Upgrade libsmbclient0Upgrade libldb1-32bitUpgrade ctdb-testsUpgrade libsmbconf0-32bitUpgrade samba-libs-python3-32bitUpgrade libsamba-policy0-python3-32bitUpgrade samba-pidlUpgrade libsmbconf0Upgrade libsmbldap2-32bitUpgrade samba-pythonUpgrade libndr1-32bitUpgrade libsamba-errors-develUpgrade ctdbUpgrade libndr0Upgrade libndr-standard0-32bitUpgrade libsamba-credentials0Upgrade libdcerpc-binding0-32bitUpgrade libsmbldap-develUpgrade libdcerpc-develUpgrade samba-core-develUpgrade libsamba-hostconfig-develUpgrade libsamba-util0Upgrade samba-ad-dcUpgrade libdcerpc-samr0 | Jan 30, 2020 | Jan 21, 2020 |
| Ubuntu | — | Upgrade samba | Mar 2, 2020 | Jan 21, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub