A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result could include total domain compromise.
CVSS Details
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-bind-dyndb-ldapalma-upgrade-custodiaalma-upgrade-ipa-clientalma-upgrade-ipa-client-commonalma-upgrade-ipa-client-epnalma-upgrade-ipa-client-sambaalma-upgrade-ipa-commonalma-upgrade-ipa-healthcheckalma-upgrade-ipa-healthcheck-corealma-upgrade-ipa-python-compatalma-upgrade-ipa-selinuxalma-upgrade-ipa-serveralma-upgrade-ipa-server-commonalma-upgrade-ipa-server-dnsalma-upgrade-ipa-server-trust-adalma-upgrade-opendnssecalma-upgrade-python3-custodiaalma-upgrade-python3-ipaclientalma-upgrade-python3-ipalibalma-upgrade-python3-ipaserveralma-upgrade-python3-ipatestsalma-upgrade-python3-jwcryptoalma-upgrade-python3-kdcproxyalma-upgrade-python3-pyusbalma-upgrade-python3-qrcodealma-upgrade-python3-qrcode-corealma-upgrade-python3-yubicoalma-upgrade-slapi-nisalma-upgrade-softhsmalma-upgrade-softhsm-devel | May 4, 2022 | Feb 18, 2022 | |
| Alpine Linux | alpine-linux-upgrade-samba | Mar 26, 2024 | Feb 18, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-ipa-clientamazon-linux-ami-2-upgrade-ipa-client-commonamazon-linux-ami-2-upgrade-ipa-commonamazon-linux-ami-2-upgrade-ipa-debuginfoamazon-linux-ami-2-upgrade-ipa-python-compatamazon-linux-ami-2-upgrade-ipa-serveramazon-linux-ami-2-upgrade-ipa-server-commonamazon-linux-ami-2-upgrade-ipa-server-dnsamazon-linux-ami-2-upgrade-ipa-server-trust-adamazon-linux-ami-2-upgrade-python2-ipaclientamazon-linux-ami-2-upgrade-python2-ipalibamazon-linux-ami-2-upgrade-python2-ipaserver | Jul 21, 2023 | Feb 18, 2022 | |
| Centos_linux | — | centos-upgrade-bind-dyndb-ldapcentos-upgrade-bind-dyndb-ldap-debuginfocentos-upgrade-bind-dyndb-ldap-debugsourcecentos-upgrade-custodiacentos-upgrade-ipa-clientcentos-upgrade-ipa-client-commoncentos-upgrade-ipa-client-debuginfocentos-upgrade-ipa-client-epncentos-upgrade-ipa-client-sambacentos-upgrade-ipa-commoncentos-upgrade-ipa-debuginfocentos-upgrade-ipa-debugsourcecentos-upgrade-ipa-healthcheckcentos-upgrade-ipa-healthcheck-corecentos-upgrade-ipa-python-compatcentos-upgrade-ipa-selinuxcentos-upgrade-ipa-servercentos-upgrade-ipa-server-commoncentos-upgrade-ipa-server-debuginfocentos-upgrade-ipa-server-dnscentos-upgrade-ipa-server-trust-adcentos-upgrade-ipa-server-trust-ad-debuginfocentos-upgrade-opendnsseccentos-upgrade-opendnssec-debuginfocentos-upgrade-opendnssec-debugsourcecentos-upgrade-python2-ipaclientcentos-upgrade-python2-ipalibcentos-upgrade-python2-ipaservercentos-upgrade-python3-custodiacentos-upgrade-python3-ipaclientcentos-upgrade-python3-ipalibcentos-upgrade-python3-ipaservercentos-upgrade-python3-ipatestscentos-upgrade-python3-jwcryptocentos-upgrade-python3-kdcproxycentos-upgrade-python3-pyusbcentos-upgrade-python3-qrcodecentos-upgrade-python3-qrcode-corecentos-upgrade-python3-yubicocentos-upgrade-slapi-niscentos-upgrade-slapi-nis-debuginfocentos-upgrade-slapi-nis-debugsourcecentos-upgrade-softhsmcentos-upgrade-softhsm-debuginfocentos-upgrade-softhsm-debugsourcecentos-upgrade-softhsm-devel | Dec 16, 2021 | Dec 15, 2021 |
| Debian | debian-upgrade-samba | Nov 4, 2022 | Feb 18, 2022 | |
| Freebsd | freebsd-upgrade-package-samba413freebsd-upgrade-package-samba414freebsd-upgrade-package-samba415 | Nov 4, 2022 | Nov 10, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-net-fs-samba | Sep 18, 2023 | Feb 18, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libsmbclienthuawei-euleros-2_0_sp10-upgrade-libwbclienthuawei-euleros-2_0_sp10-upgrade-sambahuawei-euleros-2_0_sp10-upgrade-samba-clienthuawei-euleros-2_0_sp10-upgrade-samba-commonhuawei-euleros-2_0_sp10-upgrade-samba-common-toolshuawei-euleros-2_0_sp10-upgrade-samba-libshuawei-euleros-2_0_sp10-upgrade-samba-winbindhuawei-euleros-2_0_sp10-upgrade-samba-winbind-clientshuawei-euleros-2_0_sp10-upgrade-samba-winbind-modules | Feb 28, 2022 | Feb 18, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-libsmbclienthuawei-euleros-2_0_sp9-upgrade-libwbclienthuawei-euleros-2_0_sp9-upgrade-sambahuawei-euleros-2_0_sp9-upgrade-samba-clienthuawei-euleros-2_0_sp9-upgrade-samba-commonhuawei-euleros-2_0_sp9-upgrade-samba-common-toolshuawei-euleros-2_0_sp9-upgrade-samba-libshuawei-euleros-2_0_sp9-upgrade-samba-winbindhuawei-euleros-2_0_sp9-upgrade-samba-winbind-clientshuawei-euleros-2_0_sp9-upgrade-samba-winbind-modules | Mar 3, 2022 | Feb 18, 2022 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-library-samba-libsmbclient-4-13-8-11-4-42-0-1-113-0oracle-solaris-11-4-upgrade-service-network-samba-4-13-14-11-4-42-0-1-113-0 | Feb 17, 2022 | Feb 17, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-bind-dyndb-ldaporacle-linux-upgrade-custodiaoracle-linux-upgrade-ipa-clientoracle-linux-upgrade-ipa-client-commonoracle-linux-upgrade-ipa-client-epnoracle-linux-upgrade-ipa-client-sambaoracle-linux-upgrade-ipa-commonoracle-linux-upgrade-ipa-healthcheckoracle-linux-upgrade-ipa-healthcheck-coreoracle-linux-upgrade-ipa-python-compatoracle-linux-upgrade-ipa-selinuxoracle-linux-upgrade-ipa-serveroracle-linux-upgrade-ipa-server-commonoracle-linux-upgrade-ipa-server-dnsoracle-linux-upgrade-ipa-server-trust-adoracle-linux-upgrade-opendnssecoracle-linux-upgrade-python2-ipaclientoracle-linux-upgrade-python2-ipaliboracle-linux-upgrade-python2-ipaserveroracle-linux-upgrade-python3-custodiaoracle-linux-upgrade-python3-ipaclientoracle-linux-upgrade-python3-ipaliboracle-linux-upgrade-python3-ipaserveroracle-linux-upgrade-python3-ipatestsoracle-linux-upgrade-python3-jwcryptooracle-linux-upgrade-python3-kdcproxyoracle-linux-upgrade-python3-pyusboracle-linux-upgrade-python3-qrcodeoracle-linux-upgrade-python3-qrcode-coreoracle-linux-upgrade-python3-yubicooracle-linux-upgrade-slapi-nisoracle-linux-upgrade-softhsmoracle-linux-upgrade-softhsm-devel | Dec 17, 2021 | Nov 9, 2021 |
| Redhat_linux | redhat-upgrade-bind-dyndb-ldapredhat-upgrade-bind-dyndb-ldap-debuginforedhat-upgrade-bind-dyndb-ldap-debugsourceredhat-upgrade-custodiaredhat-upgrade-ipa-clientredhat-upgrade-ipa-client-commonredhat-upgrade-ipa-client-debuginforedhat-upgrade-ipa-client-epnredhat-upgrade-ipa-client-sambaredhat-upgrade-ipa-commonredhat-upgrade-ipa-debuginforedhat-upgrade-ipa-debugsourceredhat-upgrade-ipa-healthcheckredhat-upgrade-ipa-healthcheck-coreredhat-upgrade-ipa-idoverride-memberof-pluginredhat-upgrade-ipa-python-compatredhat-upgrade-ipa-selinuxredhat-upgrade-ipa-serverredhat-upgrade-ipa-server-commonredhat-upgrade-ipa-server-debuginforedhat-upgrade-ipa-server-dnsredhat-upgrade-ipa-server-trust-adredhat-upgrade-ipa-server-trust-ad-debuginforedhat-upgrade-opendnssecredhat-upgrade-opendnssec-debuginforedhat-upgrade-opendnssec-debugsourceredhat-upgrade-python2-ipaclientredhat-upgrade-python2-ipalibredhat-upgrade-python2-ipaserverredhat-upgrade-python3-custodiaredhat-upgrade-python3-ipaclientredhat-upgrade-python3-ipalibredhat-upgrade-python3-ipaserverredhat-upgrade-python3-ipatestsredhat-upgrade-python3-jwcryptoredhat-upgrade-python3-kdcproxyredhat-upgrade-python3-pyusbredhat-upgrade-python3-qrcoderedhat-upgrade-python3-qrcode-coreredhat-upgrade-python3-yubicoredhat-upgrade-slapi-nisredhat-upgrade-slapi-nis-debuginforedhat-upgrade-slapi-nis-debugsourceredhat-upgrade-softhsmredhat-upgrade-softhsm-debuginforedhat-upgrade-softhsm-debugsourceredhat-upgrade-softhsm-devel | Dec 16, 2021 | Dec 15, 2021 | |
| Rocky_linux | rocky-upgrade-bind-dyndb-ldaprocky-upgrade-bind-dyndb-ldap-debuginforocky-upgrade-bind-dyndb-ldap-debugsourcerocky-upgrade-ipa-clientrocky-upgrade-ipa-client-debuginforocky-upgrade-ipa-client-epnrocky-upgrade-ipa-client-sambarocky-upgrade-ipa-debuginforocky-upgrade-ipa-debugsourcerocky-upgrade-ipa-serverrocky-upgrade-ipa-server-debuginforocky-upgrade-ipa-server-trust-adrocky-upgrade-ipa-server-trust-ad-debuginforocky-upgrade-opendnssecrocky-upgrade-opendnssec-debuginforocky-upgrade-opendnssec-debugsourcerocky-upgrade-slapi-nisrocky-upgrade-slapi-nis-debuginforocky-upgrade-slapi-nis-debugsourcerocky-upgrade-softhsmrocky-upgrade-softhsm-debuginforocky-upgrade-softhsm-debugsourcerocky-upgrade-softhsm-devel | Mar 12, 2024 | Feb 18, 2022 | |
| Samba | samba-upgrade-4_13_14samba-upgrade-4_14_10samba-upgrade-4_15_2 | Mar 10, 2022 | Feb 18, 2022 | |
| Suse | — | suse-upgrade-ctdbsuse-upgrade-ctdb-pcp-pmdasuse-upgrade-ctdb-testssuse-upgrade-ldb-toolssuse-upgrade-libdcerpc-binding0suse-upgrade-libdcerpc-binding0-32bitsuse-upgrade-libdcerpc-binding0-64bitsuse-upgrade-libdcerpc-develsuse-upgrade-libdcerpc-samr-develsuse-upgrade-libdcerpc-samr0suse-upgrade-libdcerpc-samr0-32bitsuse-upgrade-libdcerpc-samr0-64bitsuse-upgrade-libdcerpc0suse-upgrade-libdcerpc0-32bitsuse-upgrade-libdcerpc0-64bitsuse-upgrade-libldb-develsuse-upgrade-libldb2suse-upgrade-libldb2-32bitsuse-upgrade-libndr-develsuse-upgrade-libndr-krb5pac-develsuse-upgrade-libndr-krb5pac0suse-upgrade-libndr-krb5pac0-32bitsuse-upgrade-libndr-krb5pac0-64bitsuse-upgrade-libndr-nbt-develsuse-upgrade-libndr-nbt0suse-upgrade-libndr-nbt0-32bitsuse-upgrade-libndr-nbt0-64bitsuse-upgrade-libndr-standard-develsuse-upgrade-libndr-standard0suse-upgrade-libndr-standard0-32bitsuse-upgrade-libndr-standard0-64bitsuse-upgrade-libndr1suse-upgrade-libndr1-32bitsuse-upgrade-libndr1-64bitsuse-upgrade-libnetapi-develsuse-upgrade-libnetapi-devel-32bitsuse-upgrade-libnetapi-devel-64bitsuse-upgrade-libnetapi0suse-upgrade-libnetapi0-32bitsuse-upgrade-libnetapi0-64bitsuse-upgrade-libsamba-credentials-develsuse-upgrade-libsamba-credentials0suse-upgrade-libsamba-credentials0-32bitsuse-upgrade-libsamba-credentials0-64bitsuse-upgrade-libsamba-errors-develsuse-upgrade-libsamba-errors0suse-upgrade-libsamba-errors0-32bitsuse-upgrade-libsamba-errors0-64bitsuse-upgrade-libsamba-hostconfig-develsuse-upgrade-libsamba-hostconfig0suse-upgrade-libsamba-hostconfig0-32bitsuse-upgrade-libsamba-hostconfig0-64bitsuse-upgrade-libsamba-passdb-develsuse-upgrade-libsamba-passdb0suse-upgrade-libsamba-passdb0-32bitsuse-upgrade-libsamba-passdb0-64bitsuse-upgrade-libsamba-policy-develsuse-upgrade-libsamba-policy-python3-develsuse-upgrade-libsamba-policy0-python3suse-upgrade-libsamba-policy0-python3-32bitsuse-upgrade-libsamba-policy0-python3-64bitsuse-upgrade-libsamba-util-develsuse-upgrade-libsamba-util0suse-upgrade-libsamba-util0-32bitsuse-upgrade-libsamba-util0-64bitsuse-upgrade-libsamdb-develsuse-upgrade-libsamdb0suse-upgrade-libsamdb0-32bitsuse-upgrade-libsamdb0-64bitsuse-upgrade-libsmbclient-develsuse-upgrade-libsmbclient0suse-upgrade-libsmbclient0-32bitsuse-upgrade-libsmbclient0-64bitsuse-upgrade-libsmbconf-develsuse-upgrade-libsmbconf0suse-upgrade-libsmbconf0-32bitsuse-upgrade-libsmbconf0-64bitsuse-upgrade-libsmbldap-develsuse-upgrade-libsmbldap2suse-upgrade-libsmbldap2-32bitsuse-upgrade-libsmbldap2-64bitsuse-upgrade-libtevent-util-develsuse-upgrade-libtevent-util0suse-upgrade-libtevent-util0-32bitsuse-upgrade-libtevent-util0-64bitsuse-upgrade-libwbclient-develsuse-upgrade-libwbclient0suse-upgrade-libwbclient0-32bitsuse-upgrade-libwbclient0-64bitsuse-upgrade-python3-ldbsuse-upgrade-python3-ldb-32bitsuse-upgrade-python3-ldb-develsuse-upgrade-sambasuse-upgrade-samba-ad-dcsuse-upgrade-samba-ad-dc-32bitsuse-upgrade-samba-ad-dc-64bitsuse-upgrade-samba-cephsuse-upgrade-samba-clientsuse-upgrade-samba-client-32bitsuse-upgrade-samba-client-64bitsuse-upgrade-samba-core-develsuse-upgrade-samba-docsuse-upgrade-samba-dsdb-modulessuse-upgrade-samba-gpupdatesuse-upgrade-samba-ldb-ldapsuse-upgrade-samba-libssuse-upgrade-samba-libs-32bitsuse-upgrade-samba-libs-64bitsuse-upgrade-samba-libs-python3suse-upgrade-samba-libs-python3-32bitsuse-upgrade-samba-libs-python3-64bitsuse-upgrade-samba-python3suse-upgrade-samba-testsuse-upgrade-samba-winbindsuse-upgrade-samba-winbind-32bitsuse-upgrade-samba-winbind-64bit | Nov 11, 2021 | Nov 10, 2021 |
| Ubuntu | ubuntu-upgrade-samba | Nov 12, 2021 | Nov 10, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub