Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remote attackers to perform protocol-downgrade attacks, cause a denial of service (application crash or CPU consumption), or possibly execute arbitrary code on a client system via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade samba-pythonUpgrade samba-swatUpgrade libsmbclient-develUpgrade samba-develUpgrade samba-docUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba3x-winbindUpgrade samba-domainjoin-guiUpgrade samba-winbind-modulesUpgrade samba-test-libsUpgrade samba3x-winbind-develUpgrade samba-dc-libsUpgrade samba3x-clientUpgrade libwbclient-develUpgrade samba-common-libsUpgrade libsmbclientUpgrade sambaUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba3x-swatUpgrade samba-libsUpgrade samba-winbind-krb5-locatorUpgrade libwbclientUpgrade ctdb-develUpgrade samba3x-docUpgrade samba-vfs-glusterfsUpgrade ctdbUpgrade samba-pidlUpgrade samba3x-domainjoin-guiUpgrade samba-dcUpgrade samba-client-libsUpgrade samba-glusterfsUpgrade samba3x-commonUpgrade samba-winbind-develUpgrade samba-testUpgrade samba-commonUpgrade samba3xUpgrade samba-test-develUpgrade ctdb-tests | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 10, 2016 |
| Freebsd | — | Upgrade samba41Upgrade samba36Upgrade samba43Upgrade samba44Upgrade samba4Upgrade samba42 | Dec 10, 2025 | Apr 12, 2016 |
| Hpux | — | Update CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest version | Aug 11, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade python-teventUpgrade libwbclientUpgrade libldbUpgrade samba-pythonUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-libsUpgrade samba-winbindUpgrade samba-common-libsUpgrade libsmbclientUpgrade libteventUpgrade pytallocUpgrade samba-client-libsUpgrade python-tdbUpgrade samba-winbind-clientsUpgrade libtdbUpgrade samba-common-toolsUpgrade samba-clientUpgrade tdb-toolsUpgrade libtalloc | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade samba-vfs-glusterfsUpgrade samba-winbindUpgrade samba4-develUpgrade libtdbUpgrade samba-docUpgrade samba-test-develUpgrade openchange-develUpgrade libtdb-develUpgrade samba-common-libsUpgrade samba3x-domainjoin-guiUpgrade samba4-commonUpgrade samba4-winbind-krb5-locatorUpgrade libwbclient-develUpgrade ipa-server-dnsUpgrade pyldb-develUpgrade samba-pythonUpgrade python-teventUpgrade samba-winbind-krb5-locatorUpgrade samba4-pythonUpgrade pyldbUpgrade openchange-clientUpgrade samba-winbind-clientsUpgrade samba-glusterfsUpgrade samba-dc-libsUpgrade libldbUpgrade ctdb-testsUpgrade ipa-serverUpgrade ipa-clientUpgrade libldb-develUpgrade samba3x-commonUpgrade ctdb-develUpgrade samba-clientUpgrade samba-dcUpgrade samba4-dc-libsUpgrade samba-common-toolsUpgrade sambaUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba4-testUpgrade samba3x-clientUpgrade samba-swatUpgrade libwbclientUpgrade libtalloc-develUpgrade ipa-server-trust-adUpgrade ipa-pythonUpgrade samba-libsUpgrade pytalloc-develUpgrade samba-winbind-develUpgrade python-tdbUpgrade samba-domainjoin-guiUpgrade samba4-winbind-clientsUpgrade openchange-devel-docsUpgrade libteventUpgrade ipa-server-selinuxUpgrade samba-testUpgrade samba4-libsUpgrade samba4-dcUpgrade samba3x-swatUpgrade samba3x-winbindUpgrade pytallocUpgrade samba-client-libsUpgrade samba4-winbindUpgrade samba-pidlUpgrade libtallocUpgrade tdb-toolsUpgrade samba4Upgrade samba4-pidlUpgrade libsmbclient-develUpgrade openchangeUpgrade samba-test-libsUpgrade ipa-admintoolsUpgrade samba-commonUpgrade ldb-toolsUpgrade libtevent-develUpgrade ctdbUpgrade samba3xUpgrade samba-develUpgrade samba3x-winbind-develUpgrade samba4-clientUpgrade samba3x-doc | Apr 24, 2016 | Apr 24, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.2R5Update Pulse Connect Secure to version 8.1R10 | Oct 28, 2020 | Apr 25, 2016 |
| Samba | — | Upgrade to Samba version 4.4.2Upgrade to Samba version 4.2.11Upgrade to Samba version 4.3.8 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade libsamdb0Upgrade libsmbldap0Upgrade samba-32bitUpgrade libtevent-util0-32bitUpgrade libsmbconf0-32bitUpgrade samba-docUpgrade samba-develUpgrade libldb-develUpgrade libsamba-credentials-develUpgrade libndr1Upgrade libsmbclient-raw0-32bitUpgrade ctdbUpgrade libsmbclient-develUpgrade libsamba-policy0Upgrade libwbclient0Upgrade samba-x86Upgrade libwbclient0-x86Upgrade samba-pythonUpgrade libtevent0-x86Upgrade libdcerpc-binding0Upgrade libsmbclient-raw0Upgrade libsamba-passdb0-32bitUpgrade libndr-nbt-develUpgrade libtdb1-32bitUpgrade libndr-krb5pac0-32bitUpgrade libwbclient0-32bitUpgrade samba-winbindUpgrade libndr-standard0-32bitUpgrade libtalloc2-x86Upgrade libsamba-util-develUpgrade libsmbldap2-32bitUpgrade libsmbconf0Upgrade libsmbsharemodes0Upgrade libsamba-errors-develUpgrade libsmbldap-develUpgrade libdcerpc-develUpgrade libtalloc-develUpgrade libsamba-errors0Upgrade libndr-nbt0Upgrade samba-cephUpgrade libsmbldap0-32bitUpgrade libtalloc2Upgrade samba-libs-32bitUpgrade libsamba-hostconfig0Upgrade libndr-krb5pac-develUpgrade samba-winbind-32bitUpgrade libndr0Upgrade libsmbconf-develUpgrade samba-core-develUpgrade libwbclient-develUpgrade samba-python3Upgrade libtevent-util0Upgrade libdcerpc-atsvc0Upgrade libgensec0Upgrade sambaUpgrade libndr-krb5pac0Upgrade libsamba-hostconfig0-32bitUpgrade samba-libs-python3Upgrade libtevent-develUpgrade libnetapi0Upgrade libgensec-develUpgrade libsamba-passdb-develUpgrade libregistry-develUpgrade samba-test-develUpgrade ctdb-develUpgrade libndr-nbt0-32bitUpgrade samba-kdcUpgrade samba-client-x86Upgrade samba-clientUpgrade libsamba-errors0-32bitUpgrade libnetapi-develUpgrade libsamba-util0Upgrade libsmbclient-raw-develUpgrade ldapsmbUpgrade samba-dsdb-modulesUpgrade libsamdb0-32bitUpgrade libndr0-32bitUpgrade libsamba-policy0-python3Upgrade libdcerpc-samr0Upgrade libtevent-util-develUpgrade libsamba-credentials0Upgrade samba-libsUpgrade libgensec0-32bitUpgrade samba-krb-printingUpgrade libsamba-policy-develUpgrade libtdb1Upgrade libsamba-policy-python3-develUpgrade libdcerpc-samr-develUpgrade libregistry0Upgrade libsmbldap2Upgrade libtevent0Upgrade libsamba-util0-32bitUpgrade samba-winbind-x86Upgrade libsmbclient0-32bitUpgrade libndr1-32bitUpgrade libndr-standard0Upgrade libtdb1-x86Upgrade libsmbclient0Upgrade samba-testUpgrade libndr-standard-develUpgrade libtevent0-32bitUpgrade libdcerpc0-32bitUpgrade libsamba-passdb0Upgrade libtalloc2-32bitUpgrade libnetapi0-32bitUpgrade libndr-develUpgrade libdcerpc0Upgrade libsmbsharemodes-develUpgrade samba-client-32bitUpgrade libsamdb-develUpgrade libdcerpc-binding0-32bitUpgrade libsamba-hostconfig-develUpgrade libsamba-credentials0-32bitUpgrade libdcerpc-atsvc-develUpgrade libldb1Upgrade libtdb-develUpgrade libsmbclient0-x86Upgrade samba-libs-python3-32bit | Apr 13, 2016 | Apr 13, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub