USN-4244-1

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/notices/USN-4244-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-4244-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-4244-1
Upstream
Related
Published
2020-01-21T12:59:17.278513Z
Modified
2025-07-16T08:48:00.237315Z
Summary
samba vulnerabilities
Details

It was discovered that Samba did not automatically replicate ACLs set to inherit down a subtree on AD Directory, contrary to expectations. This issue was only addressed in Ubuntu 18.04 LTS, Ubuntu 19.04 and Ubuntu 19.10. (CVE-2019-14902)

Robert Święcki discovered that Samba incorrectly handled certain character conversions when the log level is set to 3 or above. In certain environments, a remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service. (CVE-2019-14907)

Christian Naumer discovered that Samba incorrectly handled DNS zone scavenging. This issue could possibly result in some incorrect data being written to the DB. This issue only applied to Ubuntu 19.04 and Ubuntu 19.10. (CVE-2019-19344)

References

Affected packages

Ubuntu:16.04:LTS / samba

Package

Name
samba
Purl
pkg:deb/ubuntu/samba@2:4.3.11+dfsg-0ubuntu0.16.04.25?arch=source&distro=xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2:4.3.11+dfsg-0ubuntu0.16.04.25

Affected versions

2:4.*

2:4.1.17+dfsg-4ubuntu2
2:4.1.20+dfsg-1ubuntu1
2:4.1.20+dfsg-1ubuntu2
2:4.1.20+dfsg-1ubuntu3
2:4.1.20+dfsg-1ubuntu5
2:4.3.3+dfsg-1ubuntu1
2:4.3.3+dfsg-1ubuntu2
2:4.3.3+dfsg-1ubuntu3
2:4.3.6+dfsg-1ubuntu1
2:4.3.8+dfsg-0ubuntu1
2:4.3.9+dfsg-0ubuntu0.16.04.1
2:4.3.9+dfsg-0ubuntu0.16.04.2
2:4.3.9+dfsg-0ubuntu0.16.04.3
2:4.3.11+dfsg-0ubuntu0.16.04.1
2:4.3.11+dfsg-0ubuntu0.16.04.3
2:4.3.11+dfsg-0ubuntu0.16.04.5
2:4.3.11+dfsg-0ubuntu0.16.04.6
2:4.3.11+dfsg-0ubuntu0.16.04.7
2:4.3.11+dfsg-0ubuntu0.16.04.8
2:4.3.11+dfsg-0ubuntu0.16.04.9
2:4.3.11+dfsg-0ubuntu0.16.04.10
2:4.3.11+dfsg-0ubuntu0.16.04.11
2:4.3.11+dfsg-0ubuntu0.16.04.12
2:4.3.11+dfsg-0ubuntu0.16.04.13
2:4.3.11+dfsg-0ubuntu0.16.04.15
2:4.3.11+dfsg-0ubuntu0.16.04.16
2:4.3.11+dfsg-0ubuntu0.16.04.17
2:4.3.11+dfsg-0ubuntu0.16.04.18
2:4.3.11+dfsg-0ubuntu0.16.04.19
2:4.3.11+dfsg-0ubuntu0.16.04.20
2:4.3.11+dfsg-0ubuntu0.16.04.21
2:4.3.11+dfsg-0ubuntu0.16.04.23
2:4.3.11+dfsg-0ubuntu0.16.04.24

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "ctdb",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "ctdb-dbgsym",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "libnss-winbind",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "libnss-winbind-dbgsym",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "libpam-winbind",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "libpam-winbind-dbgsym",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "libparse-pidl-perl",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "libparse-pidl-perl-dbgsym",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "libsmbclient",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "libsmbclient-dbgsym",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "libsmbclient-dev",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "libsmbclient-dev-dbgsym",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "libwbclient-dev",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "libwbclient-dev-dbgsym",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "libwbclient0",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "libwbclient0-dbgsym",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "python-samba",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "registry-tools",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "registry-tools-dbgsym",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "samba",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "samba-common",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "samba-common-bin",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "samba-common-bin-dbgsym",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "samba-dbg",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "samba-dbgsym",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "samba-dev",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "samba-dev-dbgsym",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "samba-dsdb-modules",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "samba-dsdb-modules-dbgsym",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "samba-libs",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "samba-libs-dbgsym",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "samba-testsuite",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "samba-testsuite-dbgsym",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "samba-vfs-modules",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "samba-vfs-modules-dbgsym",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "smbclient",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "smbclient-dbgsym",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "winbind",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        },
        {
            "binary_name": "winbind-dbgsym",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
        }
    ]
}

Ubuntu:18.04:LTS / samba

Package

Name
samba
Purl
pkg:deb/ubuntu/samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.15?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2:4.7.6+dfsg~ubuntu-0ubuntu2.15

Affected versions

2:4.*

2:4.6.7+dfsg-1ubuntu3
2:4.7.1+dfsg-1ubuntu1
2:4.7.3+dfsg-1ubuntu1
2:4.7.4+dfsg-1ubuntu1
2:4.7.6+dfsg~ubuntu-0ubuntu1
2:4.7.6+dfsg~ubuntu-0ubuntu2
2:4.7.6+dfsg~ubuntu-0ubuntu2.2
2:4.7.6+dfsg~ubuntu-0ubuntu2.4
2:4.7.6+dfsg~ubuntu-0ubuntu2.5
2:4.7.6+dfsg~ubuntu-0ubuntu2.6
2:4.7.6+dfsg~ubuntu-0ubuntu2.7
2:4.7.6+dfsg~ubuntu-0ubuntu2.9
2:4.7.6+dfsg~ubuntu-0ubuntu2.10
2:4.7.6+dfsg~ubuntu-0ubuntu2.11
2:4.7.6+dfsg~ubuntu-0ubuntu2.13
2:4.7.6+dfsg~ubuntu-0ubuntu2.14

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "ctdb",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "ctdb-dbgsym",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "libnss-winbind",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "libnss-winbind-dbgsym",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "libpam-winbind",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "libpam-winbind-dbgsym",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "libparse-pidl-perl",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "libsmbclient",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "libsmbclient-dbgsym",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "libsmbclient-dev",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "libwbclient-dev",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "libwbclient0",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "libwbclient0-dbgsym",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "python-samba",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "python-samba-dbgsym",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "registry-tools",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "registry-tools-dbgsym",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "samba",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "samba-common",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "samba-common-bin",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "samba-common-bin-dbgsym",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "samba-dbgsym",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "samba-dev",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "samba-dsdb-modules",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "samba-dsdb-modules-dbgsym",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "samba-libs",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "samba-libs-dbgsym",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "samba-testsuite",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "samba-testsuite-dbgsym",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "samba-vfs-modules",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "samba-vfs-modules-dbgsym",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "smbclient",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "smbclient-dbgsym",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "winbind",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        },
        {
            "binary_name": "winbind-dbgsym",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
        }
    ]
}