Description
Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain Controller (AD DC) is configured, allows remote authenticated users to set the LDB userAccountControl UF_SERVER_TRUST_ACCOUNT bit, and consequently gain privileges, by leveraging delegation of authority for user-account or computer-account creation.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | samba | 2:4.1.17+dfsg-1 | — |
| Debian 13 | samba | 2:4.1.17+dfsg-1 | — |
| Debian 12 | samba | 2:4.1.17+dfsg-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | samba | 2:4.1.6+dfsg-1ubuntu2.14.04.4 | USN-2481-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | samba | 4.5.0-1.1 | openSUSE-SU-2024:10069-1 |
Advisories 2
- USN-2481-1 samba vulnerability Ubuntu Security Notices (USN) · Apr 22, 2026
- openSUSE-SU-2024:10069-1 ctdb-4.5.0-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- SSA:2015-020-01 vendor-advisory
- openSUSE-SU-2016:1064 vendor-advisory
- https://download.samba.org/pub/samba/patches/security/samba-4.1.15-CVE-2014-8143.patch
- 1031615 vdb-entry
- samba-cve20148143-priv-esc(100596) vdb-entry
- https://download.samba.org/pub/samba/patches/security/samba-4.0.23-CVE-2014-8143.patch
- https://www.samba.org/samba/security/CVE-2014-8143
- 72278 vdb-entry
- 62594 third-party-advisory
- openSUSE-SU-2015:0375 vendor-advisory
- USN-2481-1 vendor-advisory