The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 allows man-in-the-middle attackers to perform protocol-downgrade attacks by modifying the client-server data stream to remove application-layer flags or encryption settings, as demonstrated by clearing the NTLMSSP_NEGOTIATE_SEAL or NTLMSSP_NEGOTIATE_SIGN option to disrupt LDAP security.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade samba3x-swatUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba3x-clientUpgrade samba-test-develUpgrade samba-dc-libsUpgrade samba-test-libsUpgrade samba3x-commonUpgrade samba-testUpgrade samba3x-winbind-develUpgrade samba-glusterfsUpgrade samba-clientUpgrade samba-client-libsUpgrade samba3x-winbindUpgrade samba-common-libsUpgrade samba3x-domainjoin-guiUpgrade samba-winbind-krb5-locatorUpgrade samba-docUpgrade libsmbclientUpgrade samba3x-docUpgrade samba-winbind-modulesUpgrade samba-pythonUpgrade samba-winbind-develUpgrade libwbclient-develUpgrade samba-libsUpgrade ctdbUpgrade ctdb-testsUpgrade samba-swatUpgrade samba-winbindUpgrade samba-develUpgrade samba-pidlUpgrade samba-commonUpgrade samba-vfs-glusterfsUpgrade sambaUpgrade samba-domainjoin-guiUpgrade samba-winbind-clientsUpgrade samba-dcUpgrade samba3xUpgrade ctdb-develUpgrade libsmbclient-devel | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 17, 2016 |
| Freebsd | — | Upgrade samba41Upgrade samba36Upgrade samba43Upgrade samba4Upgrade samba42Upgrade samba44 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Hpux | — | Update CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest version | Aug 11, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade tdb-toolsUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade libldbUpgrade samba-pythonUpgrade samba-libsUpgrade sambaUpgrade samba-common-libsUpgrade samba-commonUpgrade samba-clientUpgrade samba-common-toolsUpgrade python-tdbUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade libsmbclientUpgrade libtallocUpgrade python-teventUpgrade pytallocUpgrade libwbclientUpgrade libtdbUpgrade libtevent | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade samba3x-commonUpgrade samba-test-develUpgrade pyldbUpgrade samba4-pidlUpgrade samba4-pythonUpgrade samba-client-libsUpgrade ipa-admintoolsUpgrade samba-libsUpgrade samba3x-swatUpgrade samba4Upgrade openchange-devel-docsUpgrade libwbclientUpgrade samba-testUpgrade libsmbclient-develUpgrade samba4-clientUpgrade samba4-dcUpgrade samba3x-docUpgrade samba3xUpgrade samba4-winbindUpgrade samba-test-libsUpgrade libteventUpgrade samba3x-domainjoin-guiUpgrade samba-pidlUpgrade ipa-server-dnsUpgrade libtalloc-develUpgrade samba-commonUpgrade ctdb-testsUpgrade ldb-toolsUpgrade samba4-winbind-clientsUpgrade samba4-libsUpgrade tdb-toolsUpgrade python-tdbUpgrade libtevent-develUpgrade pytalloc-develUpgrade samba-develUpgrade libtallocUpgrade ipa-server-selinuxUpgrade openchange-develUpgrade samba-winbind-clientsUpgrade samba3x-winbindUpgrade samba-pythonUpgrade samba4-commonUpgrade ipa-server-trust-adUpgrade samba-swatUpgrade ipa-clientUpgrade libwbclient-develUpgrade pytallocUpgrade samba-winbind-krb5-locatorUpgrade libtdbUpgrade libldb-develUpgrade ctdb-develUpgrade libtdb-develUpgrade openchangeUpgrade pyldb-develUpgrade openchange-clientUpgrade samba-dcUpgrade samba3x-winbind-develUpgrade samba-clientUpgrade samba4-develUpgrade samba4-testUpgrade samba4-winbind-krb5-locatorUpgrade samba-common-libsUpgrade samba4-dc-libsUpgrade sambaUpgrade libldbUpgrade ipa-pythonUpgrade samba-winbindUpgrade ctdbUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-vfs-glusterfsUpgrade ipa-serverUpgrade samba-dc-libsUpgrade samba3x-clientUpgrade python-tevent | Apr 24, 2016 | Apr 24, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.2R5Update Pulse Connect Secure to version 8.1R10 | Oct 28, 2020 | Apr 25, 2016 |
| Samba | — | Upgrade to Samba version 4.2.11Upgrade to Samba version 4.4.2Upgrade to Samba version 4.3.8 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade libsmbclient-raw-develUpgrade libtdb1Upgrade ctdb-develUpgrade libsmbclient-raw0-32bitUpgrade libwbclient0-x86Upgrade samba-test-develUpgrade samba-libs-python3-32bitUpgrade libtalloc2-32bitUpgrade libsmbldap0Upgrade libdcerpc-atsvc0Upgrade libnetapi-develUpgrade samba-docUpgrade libsmbldap-develUpgrade libnetapi0-32bitUpgrade libdcerpc-atsvc-develUpgrade libtevent-util0-32bitUpgrade libsamdb0Upgrade libndr1-32bitUpgrade libndr-develUpgrade libsamba-passdb0Upgrade libsmbsharemodes-develUpgrade libsamba-util0Upgrade samba-core-develUpgrade libsamba-hostconfig0-32bitUpgrade libndr0-32bitUpgrade libtevent-develUpgrade libsamba-errors0Upgrade libwbclient-develUpgrade libdcerpc0Upgrade libndr-krb5pac0Upgrade libsmbldap2Upgrade libsamdb0-32bitUpgrade libregistry-develUpgrade libdcerpc0-32bitUpgrade libsmbclient0-32bitUpgrade libtevent0-x86Upgrade samba-libs-python3Upgrade libdcerpc-binding0-32bitUpgrade libsamba-errors-develUpgrade libldb-develUpgrade libsamba-policy0Upgrade libtdb1-32bitUpgrade libsamba-passdb0-32bitUpgrade samba-winbindUpgrade samba-pythonUpgrade libsmbclient-raw0Upgrade samba-python3Upgrade samba-winbind-32bitUpgrade libsamba-hostconfig-develUpgrade libsamba-credentials-develUpgrade libdcerpc-binding0Upgrade samba-x86Upgrade libsmbconf-develUpgrade libndr-nbt0-32bitUpgrade libndr-krb5pac-develUpgrade samba-32bitUpgrade libwbclient0-32bitUpgrade libsmbldap0-32bitUpgrade sambaUpgrade libndr1Upgrade libsmbconf0Upgrade samba-kdcUpgrade libsamba-credentials0Upgrade libsmbclient0-x86Upgrade libdcerpc-samr0Upgrade samba-dsdb-modulesUpgrade samba-develUpgrade samba-libs-32bitUpgrade libtevent-util-develUpgrade samba-libsUpgrade libndr-nbt0Upgrade libnetapi0Upgrade libsamba-util-develUpgrade libgensec0-32bitUpgrade libtalloc-develUpgrade libldb1Upgrade ctdbUpgrade samba-cephUpgrade samba-clientUpgrade libgensec0Upgrade libndr-nbt-develUpgrade samba-krb-printingUpgrade libtevent-util0Upgrade libsamba-util0-32bitUpgrade libsmbclient-develUpgrade ldapsmbUpgrade libdcerpc-develUpgrade libtevent0-32bitUpgrade libtdb1-x86Upgrade libsamba-policy0-python3Upgrade libsamba-hostconfig0Upgrade samba-client-x86Upgrade samba-client-32bitUpgrade libsamba-policy-develUpgrade libndr-standard0Upgrade libsmbclient0Upgrade libsamdb-develUpgrade libregistry0Upgrade libtalloc2Upgrade libsmbsharemodes0Upgrade libgensec-develUpgrade libndr-krb5pac0-32bitUpgrade libsmbconf0-32bitUpgrade libtevent0Upgrade libdcerpc-samr-develUpgrade libwbclient0Upgrade libsamba-policy-python3-develUpgrade libtdb-develUpgrade libndr-standard0-32bitUpgrade samba-winbind-x86Upgrade libsmbldap2-32bitUpgrade libsamba-errors0-32bitUpgrade libtalloc2-x86Upgrade samba-testUpgrade libndr-standard-develUpgrade libndr0Upgrade libsamba-credentials0-32bitUpgrade libsamba-passdb-devel | Apr 13, 2016 | Apr 13, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub