There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and all samba 4.11.x versions before 4.11.5, essentially due to a call to realloc() while other local variables still point at the original buffer.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Jan 21, 2020 |
| Debian | — | Upgrade samba | Sep 14, 2023 | Jan 21, 2020 |
| Freebsd | — | Upgrade samba411Upgrade samba410 | Jan 27, 2020 | Jan 27, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Jan 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libsmbclientUpgrade sambaUpgrade samba-commonUpgrade python3-samba-testUpgrade ctdbUpgrade samba-clientUpgrade samba-test-libsUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade samba-pidlUpgrade samba-krb5-printingUpgrade samba-winbindUpgrade samba-testUpgrade samba-client-libsUpgrade python2-samba-testUpgrade python3-sambaUpgrade libwbclientUpgrade python2-sambaUpgrade ctdb-tests | Apr 21, 2020 | Jan 21, 2020 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Jan 21, 2020 |
| Samba | — | Upgrade to Samba 4.10.12 or later.Upgrade to Samba 4.11.5 or later.Upgrade to Samba 4.9.18 or later. | Jan 24, 2020 | Jan 21, 2020 |
| Suse | — | Upgrade samba-ad-dcUpgrade libldb1-32bitUpgrade libdcerpc-samr0Upgrade libsamba-credentials0Upgrade libsamba-hostconfig-develUpgrade samba-pythonUpgrade libsamba-util0Upgrade libndr-standard-develUpgrade libsmbconf-develUpgrade ctdbUpgrade ldb-toolsUpgrade libndr1-32bitUpgrade libndr0-32bitUpgrade samba-libs-32bitUpgrade python-ldb-develUpgrade libldb1Upgrade libnetapi-develUpgrade samba-testUpgrade ctdb-testsUpgrade libsamba-passdb-develUpgrade libndr-standard0-32bitUpgrade libndr-nbt0-32bitUpgrade libwbclient0-32bitUpgrade libtevent-util0-32bitUpgrade libsmbconf0Upgrade libsamba-credentials0-32bitUpgrade libsmbconf0-32bitUpgrade libndr0Upgrade libndr-krb5pac0-32bitUpgrade libsmbldap-develUpgrade samba-pidlUpgrade samba-cephUpgrade samba-libs-python3-32bitUpgrade libsamba-policy0-python3-32bitUpgrade libsmbclient0Upgrade libndr1Upgrade samba-libs-python3Upgrade libsmbldap2-32bitUpgrade libdcerpc-samr0-32bitUpgrade libsamba-errors0Upgrade libndr-develUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc-develUpgrade libsamba-errors-develUpgrade libsamba-passdb0-32bitUpgrade libsamba-errors0-32bitUpgrade samba-dsdb-modulesUpgrade libnetapi0Upgrade samba-core-develUpgrade libndr-krb5pac-develUpgrade samba-python3Upgrade samba-libsUpgrade libndr-standard0Upgrade samba-clientUpgrade samba-libs-pythonUpgrade samba-winbindUpgrade libndr-nbt-develUpgrade libnetapi0-32bitUpgrade libwbclient0Upgrade libsmbclient0-32bitUpgrade libsmbldap2Upgrade samba-docUpgrade libdcerpc-binding0Upgrade libsamba-passdb0Upgrade libdcerpc0Upgrade python-ldbUpgrade libsmbclient-develUpgrade libsamba-hostconfig0Upgrade libsamba-policy0Upgrade libsamdb-develUpgrade libsamba-policy-python3-develUpgrade libdcerpc-samr-develUpgrade samba-ad-dc-32bitUpgrade libdcerpc0-32bitUpgrade libsamdb0Upgrade libldb-develUpgrade sambaUpgrade libwbclient-develUpgrade libndr-krb5pac0Upgrade samba-winbind-32bitUpgrade libsamba-util-develUpgrade libsamba-credentials-develUpgrade libtevent-util0Upgrade ctdb-pcp-pmdaUpgrade libsamba-policy-python-develUpgrade libsamba-policy-develUpgrade libsamba-util0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libsamdb0-32bitUpgrade samba-libs-python-32bitUpgrade libtevent-util-develUpgrade libsamba-policy0-python3Upgrade libsamba-policy0-32bitUpgrade libndr-nbt0Upgrade samba-client-32bit | Jan 30, 2020 | Jan 21, 2020 |
| Ubuntu | — | Upgrade samba | Mar 2, 2020 | Jan 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub