Synced 02 Nov 2026 18:30 UTC Account

Is Samba 4.9.18 patched?

Samba · cycle 4.9 · end of life
4.9.180/100Critical · exploited

Current stable (4.25.1): 97/100

Minimum safe version4.21.0

4.9.18 has 23 open critical-or-high vulnerabilities. Run 4.21.0 or later to clear them. See what 4.21.0 fixes →

Upgrade impact: Minor upgrade. Minor releases are usually backwards-compatible, but can add or change behaviour — test in staging before production.

1 of the vulnerability affecting 4.9.18 is linked to ransomware campaigns (CISA KEV) — prioritise patching.
Health score0/100
Open issues53
Exploited now1
Cycle 4.9 EOL2020-03-03
Latest release4.25.1

Summary iPlain-English security status for Samba 4.9.18, built from its CVEs, active-exploitation data, end-of-life date and latest release.

Samba 4.9.18 is part of the 4.9 release line. 1 actively-exploited vulnerability affects it (CISA KEV). 1 is linked to ransomware campaigns (CISA KEV). The minimum safe version is 4.21.0 — upgrade to it or later to clear the open critical/high issues. The 4.9 line reached end-of-life on 2020-03-03, so it no longer receives security patches. The latest supported Samba release is 4.25.1.

Known issues affecting 4.9.18

Exploited first, then by exploitation probability.

CVE-2020-1472 MEDIUM exploited ransomware EPSS 99% → fixed in 4.12.7 CVE-2021-44142 HIGH EPSS 74% → fixed in 4.15.5 CVE-2023-34966 HIGH EPSS 62% → fixed in 4.18.5 CVE-2023-34967 MEDIUM EPSS 61% → fixed in 4.18.5 CVE-2020-17049 MEDIUM EPSS 14% → fixed in 4.15.1 CVE-2022-42898 HIGH EPSS 7% → fixed in 4.17.3 CVE-2021-20277 HIGH EPSS 4% → fixed in 4.14.1 CVE-2022-37967 HIGH EPSS 4% → fixed in 4.17.4 CVE-2020-10745 HIGH EPSS 4% → fixed in 4.12.4 CVE-2022-3437 MEDIUM EPSS 4% → fixed in 4.17.2 CVE-2020-27840 HIGH EPSS 4% → fixed in 4.14.1 CVE-2020-10704 HIGH EPSS 4% → fixed in 4.12.2 CVE-2019-3824 MEDIUM EPSS 3% → fixed in 4.10.0 CVE-2023-3961 CRITICAL EPSS 3% → fixed in 4.19.1 CVE-2020-10760 MEDIUM EPSS 3% → fixed in 4.12.4 CVE-2022-37966 HIGH EPSS 3% → fixed in 4.17.4 CVE-2026-4408 CRITICAL EPSS 3% → fixed in 4.21.0 CVE-2020-10730 MEDIUM EPSS 2% → fixed in 4.12.4 CVE-2022-38023 HIGH EPSS 2% → fixed in 4.17.4 CVE-2021-3670 MEDIUM EPSS 2% → fixed in 4.16.0

Other Samba versions

Check another release line of Samba.

Samba 4.25.1Samba 4.24.8Samba 4.23.13Samba 4.22.11Samba 4.21.10Samba 4.20.8Samba 4.19.9Samba 4.18.11Samba 4.17.12Samba 4.16.11Samba 4.15.13Samba 4.14.14Samba 4.13.17Samba 4.12.15Samba 4.11.17Samba 4.10.18Samba 4.8.12Samba 4.7.12Samba 4.6.16Samba 4.5.16Samba 4.4.16Samba 4.3.13Samba 4.2.14Samba 4.1.23Samba 4.0.26Samba 3.6.25Samba 3.5.22Samba 3.4.17Samba 3.3.16Samba 3.2.15Samba 3.0.37

Frequently asked

Is Samba 4.9.18 patched?

No — 1 actively-exploited vulnerability affects Samba 4.9.18. Upgrade to at least 4.21.0.

What version should I upgrade Samba 4.9.18 to?

Upgrade Samba 4.9.18 to at least 4.21.0 to clear its 23 open critical-or-high vulnerabilities.

When does Samba 4.9 reach end-of-life?

Samba 4.9 reached end-of-life on 2020-03-03 and no longer receives security patches.

What is the latest version of Samba?

The latest supported Samba release is 4.25.1.

Is Samba 4.9.18 still receiving security updates?

No — Samba 4.9.18 is on the 4.9 line, which reached end-of-life on 2020-03-03 and no longer receives security updates. Upgrade to 4.25.1 or later to stay supported.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Samba's official advisory before you patch or upgrade.