A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, will be restarted after a short delay, but it is easy for an authenticated non administrative attacker to crash it again as soon as it returns. The Samba DNS server itself will continue to operate, but many RPC services will not.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Dec 2, 2020 |
| Debian | — | Upgrade samba | Nov 24, 2020 | Nov 24, 2020 |
| Freebsd | — | Upgrade samba411Upgrade samba413Upgrade samba410Upgrade samba412 | Nov 1, 2020 | Oct 30, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Dec 29, 2020 | Dec 2, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-client-libsUpgrade libwbclientUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade sambaUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-winbind | Feb 22, 2021 | Dec 2, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libwbclientUpgrade samba-clientUpgrade samba-winbindUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade sambaUpgrade samba-commonUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade libsmbclient | Jan 20, 2021 | Dec 2, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-libsUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade libwbclientUpgrade libsmbclientUpgrade sambaUpgrade samba-pythonUpgrade samba-commonUpgrade samba-winbind-modules | Mar 24, 2021 | Dec 2, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-sambaUpgrade samba-winbind-modulesUpgrade python2-samba-testUpgrade samba-client-libsUpgrade python3-sambaUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-clientUpgrade ctdb-testsUpgrade libsmbclientUpgrade samba-krb5-printingUpgrade samba-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade samba-test-libsUpgrade samba-winbindUpgrade sambaUpgrade python3-samba-testUpgrade samba-commonUpgrade samba-testUpgrade samba-common-libsUpgrade samba-pidlUpgrade ctdb | Feb 2, 2021 | Dec 2, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-winbind-modulesUpgrade libwbclientUpgrade samba-libsUpgrade sambaUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-client | Jan 5, 2021 | Dec 2, 2020 |
| Samba | — | Upgrade to Samba 4.12.9 or later.Upgrade to Samba 4.11.15 or later.Upgrade to Samba 4.13.1 or later. | Dec 2, 2020 | Dec 2, 2020 |
| Suse | — | Upgrade libdcerpc-develUpgrade libdcerpc-samr0-32bitUpgrade sambaUpgrade libndr1-32bitUpgrade samba-winbindUpgrade libsmbldap2-32bitUpgrade libsamba-util0Upgrade ctdb-pcp-pmdaUpgrade libndr-krb5pac-develUpgrade libndr-standard0Upgrade libsamba-errors0Upgrade libsamdb0Upgrade libwbclient-develUpgrade samba-core-develUpgrade libsamba-errors0-32bitUpgrade libsmbclient0Upgrade samba-clientUpgrade libwbclient0-32bitUpgrade samba-winbind-32bitUpgrade libsamba-passdb0-32bitUpgrade libndr-nbt0Upgrade libtevent-util0-32bitUpgrade samba-libs-python3-32bitUpgrade libsamba-credentials-develUpgrade libsamba-util-develUpgrade libdcerpc0-32bitUpgrade libdcerpc-binding0Upgrade libsamba-hostconfig0-32bitUpgrade libsamba-credentials0-32bitUpgrade samba-ad-dc-32bitUpgrade samba-libs-32bitUpgrade libndr-krb5pac0Upgrade samba-libs-python3Upgrade libnetapi-devel-32bitUpgrade libnetapi-develUpgrade libsmbconf-develUpgrade samba-pythonUpgrade libndr-develUpgrade samba-python3Upgrade libdcerpc-samr-develUpgrade ctdbUpgrade libnetapi0-32bitUpgrade libsamba-errors-develUpgrade libsamba-policy-develUpgrade libndr0-32bitUpgrade libtevent-util0Upgrade libnetapi0Upgrade libsmbldap0Upgrade libsamba-policy-python3-develUpgrade samba-docUpgrade samba-ad-dcUpgrade libsmbclient0-32bitUpgrade libsmbldap2Upgrade ctdb-testsUpgrade libndr-nbt-develUpgrade samba-client-32bitUpgrade libsamba-passdb0Upgrade libdcerpc-binding0-32bitUpgrade libdcerpc-samr0Upgrade libsmbldap0-32bitUpgrade libndr-standard0-32bitUpgrade libsamdb-develUpgrade libsamdb0-32bitUpgrade libndr-krb5pac0-32bitUpgrade samba-cephUpgrade libndr0Upgrade libsamba-hostconfig-develUpgrade libtevent-util-develUpgrade samba-testUpgrade libsamba-hostconfig0Upgrade samba-libs-python-32bitUpgrade libsamba-policy-python-develUpgrade libsamba-policy0Upgrade libndr-nbt0-32bitUpgrade samba-pidlUpgrade samba-libs-pythonUpgrade libdcerpc0Upgrade libsamba-policy0-32bitUpgrade libsmbconf0-32bitUpgrade libsamba-policy0-python3-32bitUpgrade samba-dsdb-modulesUpgrade samba-libsUpgrade libndr-standard-develUpgrade libsamba-policy0-python3Upgrade libsamba-util0-32bitUpgrade libsamba-credentials0Upgrade libsmbclient-develUpgrade libsmbconf0Upgrade libsamba-passdb-develUpgrade libndr1Upgrade libwbclient0Upgrade libsmbldap-devel | Oct 31, 2020 | Oct 29, 2020 |
| Ubuntu | — | Upgrade sambaUpgrade samba (Ubuntu Pro) | Nov 3, 2020 | Oct 29, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub