Description
Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS management server (dnsserver) RPC server process.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | samba | 2:4.9.5+dfsg-5 | — |
| Debian 13 | samba | 2:4.9.5+dfsg-5 | — |
| Debian 12 | samba | 2:4.9.5+dfsg-5 | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP1 | samba | 4.9.5+git.176.375e1f05788-3.6.1 | SUSE-SU-2019:1574-1 |
| SLES 2 | samba | 4.9.5+git.176.375e1f05788-3.6.1 | SUSE-SU-2019:1574-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE Enterprise Storage 6 | samba | 4.9.5+git.176.375e1f05788-3.6.1 | SUSE-SU-2019:1574-2 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | samba | 4.14.6+git.182.2205d5224e3-1.1 | openSUSE-SU-2024:11365-1 |
| openSUSE Leap 15.1 | samba | 4.9.5+git.176.375e1f05788-lp151.2.3.1 | openSUSE-SU-2019:1755-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | samba | 4.10.5-r0 | — |
| Alpine v3.23 | samba | 4.10.5-r0 | — |
| Alpine v3.22 | samba | 4.10.5-r0 | — |
| Alpine v3.21 | samba | 4.10.5-r0 | — |
| Alpine v3.20 | samba | 4.10.5-r0 | — |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | samba | 4.10.5-r0 | — |
| Alpine v3.18 | samba | 4.10.5-r0 | — |
| Alpine v3.17 | samba | 4.10.5-r0 | — |
| Alpine v3.16 | samba | 4.10.5-r0 | — |
| Alpine v3.15 | samba | 4.10.5-r0 | — |
| Alpine v3.14 | samba | 4.10.5-r0 | — |
| Alpine v3.13 | samba | 4.10.5-r0 | — |
| Alpine v3.12 | samba | 4.10.5-r0 | — |
| Alpine v3.11 | samba | 4.10.5-r0 | — |
| Alpine v3.10 | samba | 4.10.5-r0 | — |
Advisories 4
- openSUSE-SU-2019:1755-1 Security update for samba SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11365-1 ctdb-4.14.6+git.182.2205d5224e3-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:1574-2 Security update for samba SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:1574-1 Security update for samba SUSE / openSUSE Security Updates · Feb 4, 2026
References
- https://www.samba.org/samba/security/CVE-2019-12435.html
- USN-4018-1 vendor-advisory
- 108825 vdb-entry
- https://www.synology.com/security/advisory/Synology_SA_19_27
- FEDORA-2019-8015e5dc40 vendor-advisory
- FEDORA-2019-8966706e33 vendor-advisory
- openSUSE-SU-2019:1755 vendor-advisory