The samldb_check_user_account_control_acl function in dsdb/samdb/ldb_modules/samldb.c in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not properly check for administrative privileges during creation of machine accounts, which allows remote authenticated users to bypass intended access restrictions by leveraging the existence of a domain with both a Samba DC and a Windows DC, a similar issue to CVE-2015-2535.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ldbUpgrade samba | Aug 30, 2017 | Dec 29, 2015 |
| Debian | — | Upgrade samba | Jan 4, 2016 | Dec 29, 2015 |
| Freebsd | — | Upgrade samba43Upgrade samba36Upgrade samba4Upgrade samba42Upgrade samba41Upgrade ldb | Dec 10, 2025 | Dec 19, 2015 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Dec 29, 2015 |
| Samba | — | Upgrade to Samba version 4.3.3Upgrade to Samba version 4.1.22Upgrade to Samba version 4.2.7 | Mar 24, 2016 | Dec 29, 2015 |
| Suse | — | Upgrade samba-winbindUpgrade libsmbclient-raw0-32bitUpgrade sambaUpgrade libdcerpc-samr-develUpgrade samba-32bitUpgrade libsmbsharemodes0Upgrade samba-docUpgrade libndr-nbt-develUpgrade libsmbclient-develUpgrade libndr-krb5pac0Upgrade libsamba-policy0Upgrade libwbclient0-32bitUpgrade samba-python3Upgrade libsmbclient0-32bitUpgrade libregistry-develUpgrade libtevent-util-develUpgrade samba-winbind-32bitUpgrade libtevent-util0-32bitUpgrade libsamba-passdb-develUpgrade libsamba-passdb0-32bitUpgrade libdcerpc-atsvc0Upgrade libtevent-util0Upgrade libregistry0Upgrade libsamba-credentials-develUpgrade libtdb1Upgrade libsamba-policy-develUpgrade samba-libsUpgrade samba-clientUpgrade libpdb0Upgrade libwbclient0Upgrade libsamdb-develUpgrade libsamba-passdb0Upgrade libtalloc2Upgrade libdcerpc0-32bitUpgrade libdcerpc0Upgrade libsamba-policy0-python3Upgrade libsamba-util-develUpgrade samba-libs-python3-32bitUpgrade pytallocUpgrade libtevent0-32bitUpgrade libsmbclient-raw-develUpgrade libsamba-util0-32bitUpgrade libndr-krb5pac-develUpgrade libtalloc2-32bitUpgrade libtalloc-develUpgrade libtevent0Upgrade libgensec-develUpgrade samba-dsdb-modulesUpgrade libndr-standard0-32bitUpgrade libdcerpc-binding0Upgrade libsamba-credentials0Upgrade libndr-nbt0Upgrade libsamba-policy-python3-develUpgrade libnetapi0-32bitUpgrade libsamdb0-32bitUpgrade libtevent-develUpgrade libsmbclient0Upgrade libsmbldap0-32bitUpgrade libndr0-32bitUpgrade tdb-toolsUpgrade libnetapi-develUpgrade libsmbldap2Upgrade libdcerpc-develUpgrade ctdbUpgrade libdcerpc-binding0-32bitUpgrade libsmbsharemodes-develUpgrade libldb-develUpgrade libndr-standard0Upgrade samba-test-develUpgrade libgensec0-32bitUpgrade libsamba-credentials0-32bitUpgrade samba-libs-python3Upgrade libsmbconf-develUpgrade samba-client-32bitUpgrade libndr1Upgrade libdcerpc-samr0Upgrade libsmbldap0Upgrade libsamba-hostconfig0Upgrade samba-libs-32bitUpgrade libsamba-errors0Upgrade libsmbconf0Upgrade samba-core-develUpgrade samba-pythonUpgrade libsamba-hostconfig-develUpgrade libpdb0-32bitUpgrade libsmbconf0-32bitUpgrade libsmbclient-raw0Upgrade libndr-standard-develUpgrade libnetapi0Upgrade libndr-krb5pac0-32bitUpgrade pytalloc-32bitUpgrade libtdb-develUpgrade libgensec0Upgrade libsmbldap-develUpgrade libsmbldap2-32bitUpgrade libsamba-util0Upgrade libsamdb0Upgrade libtdb1-32bitUpgrade pytalloc-develUpgrade samba-kdcUpgrade libldb1Upgrade pyldbUpgrade libsamba-hostconfig0-32bitUpgrade libndr1-32bitUpgrade libwbclient-develUpgrade libpdb-develUpgrade libdcerpc-atsvc-develUpgrade libndr-develUpgrade pyldb-develUpgrade libldb1-32bitUpgrade libndr-nbt0-32bitUpgrade samba-cephUpgrade libsamba-errors0-32bitUpgrade libsamba-errors-develUpgrade libndr0 | Jan 4, 2016 | Dec 18, 2015 |
| Ubuntu | — | Upgrade samba | Feb 2, 2016 | Dec 29, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub