A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade heimdalUpgrade samba | Mar 26, 2024 | Oct 12, 2021 |
| Debian | — | Upgrade heimdalUpgrade samba | Nov 24, 2022 | Oct 12, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade samba-commonUpgrade samba-clientUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade samba-winbindUpgrade sambaUpgrade samba-winbind-clientsUpgrade libwbclient | Feb 28, 2022 | Oct 12, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sambaUpgrade samba-libsUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade samba-pythonUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-clientUpgrade libwbclientUpgrade samba-common-tools | Feb 24, 2022 | Oct 12, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-pythonUpgrade samba-commonUpgrade samba-libsUpgrade samba-common-libsUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade libwbclientUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-client | Mar 2, 2022 | Oct 12, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-clientUpgrade samba-commonUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade sambaUpgrade samba-winbindUpgrade samba-winbind-modules | Jan 28, 2022 | Oct 12, 2021 |
| Suse | — | Upgrade libheimntlm0Upgrade libwind0Upgrade libheimdal-develUpgrade libasn1-8Upgrade libotp0Upgrade libheimbase1Upgrade libroken18Upgrade libkadm5srv8Upgrade libhdb9Upgrade libhx509-5Upgrade libhcrypto4Upgrade libsl0Upgrade libgssapi3Upgrade libkadm5clnt7Upgrade libkafs0Upgrade libkdc2Upgrade libheimedit0Upgrade libkrb5-26 | Jan 17, 2023 | Oct 12, 2021 |
| Ubuntu | — | Upgrade heimdal-serversUpgrade libgssapi3-heimdalUpgrade libkrb5-26-heimdal (Ubuntu Pro)Upgrade heimdal-kdc (Ubuntu Pro)Upgrade heimdal-kcm (Ubuntu Pro)Upgrade heimdal-kcmUpgrade libkdc2-heimdal (Ubuntu Pro)Upgrade libgssapi3-heimdal (Ubuntu Pro)Upgrade libkrb5-26-heimdalUpgrade heimdal-servers (Ubuntu Pro)Upgrade heimdal-clients-x (Ubuntu Pro)Upgrade sambaUpgrade heimdal-clients (Ubuntu Pro)Upgrade heimdal-servers-x (Ubuntu Pro)Upgrade heimdal-clientsUpgrade libkdc2-heimdalUpgrade heimdal-kdc | Nov 12, 2021 | Oct 12, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub