The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain controller is configured, allows remote attackers to spoof the computer name of a secure channel's endpoint, and obtain sensitive session information, by running a crafted application and leveraging the ability to sniff network traffic, a related issue to CVE-2015-0005.
CVSS Details
- CVSS 3.1 Base Score: 6.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade libwbclientUpgrade libwbclient-develUpgrade samba-libsUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-winbind-krb5-locatorUpgrade samba-swatUpgrade samba-domainjoin-guiUpgrade samba3x-clientUpgrade samba3x-winbindUpgrade samba3x-winbind-develUpgrade libsmbclient-develUpgrade samba3x-swatUpgrade ctdb-testsUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba3x-commonUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-pythonUpgrade samba3x-docUpgrade ctdbUpgrade samba-dcUpgrade ctdb-develUpgrade samba-glusterfsUpgrade samba-winbindUpgrade samba-winbind-develUpgrade samba-docUpgrade samba-common-libsUpgrade samba3xUpgrade samba-test-libsUpgrade samba-test-develUpgrade samba-testUpgrade samba-dc-libsUpgrade samba-develUpgrade samba3x-domainjoin-guiUpgrade samba-pidlUpgrade samba-vfs-glusterfsUpgrade samba | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| Freebsd | — | Upgrade samba44Upgrade samba43Upgrade samba42Upgrade samba41Upgrade samba4Upgrade samba36 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Hpux | — | Update CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest version | Aug 11, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libwbclientUpgrade libldbUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade libsmbclientUpgrade python-teventUpgrade samba-commonUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade sambaUpgrade samba-pythonUpgrade samba-clientUpgrade pytallocUpgrade libteventUpgrade libtdbUpgrade libtallocUpgrade python-tdbUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade tdb-tools | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade pyldb-develUpgrade samba3x-docUpgrade libwbclient-develUpgrade libtdbUpgrade samba3x-clientUpgrade samba4-winbind-krb5-locatorUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba3x-winbind-develUpgrade ctdb-testsUpgrade pyldbUpgrade samba-common-toolsUpgrade python-teventUpgrade samba-dc-libsUpgrade libsmbclientUpgrade samba4-commonUpgrade ipa-clientUpgrade openchange-develUpgrade ipa-server-dnsUpgrade samba3x-winbindUpgrade samba4-dc-libsUpgrade samba-swatUpgrade samba-dcUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade ctdb-develUpgrade samba4-testUpgrade samba3xUpgrade samba-docUpgrade samba3x-commonUpgrade samba-glusterfsUpgrade samba3x-domainjoin-guiUpgrade openchange-clientUpgrade samba-client-libsUpgrade libldb-develUpgrade samba-test-develUpgrade libldbUpgrade ipa-serverUpgrade samba4-develUpgrade samba-vfs-glusterfsUpgrade ipa-admintoolsUpgrade ldb-toolsUpgrade samba-test-libsUpgrade libtalloc-develUpgrade samba4-winbind-clientsUpgrade ipa-server-selinuxUpgrade samba-winbind-krb5-locatorUpgrade pytalloc-develUpgrade libteventUpgrade ipa-server-trust-adUpgrade samba-pythonUpgrade pytallocUpgrade ipa-pythonUpgrade samba-commonUpgrade samba-libsUpgrade samba-testUpgrade sambaUpgrade libtdb-develUpgrade samba-domainjoin-guiUpgrade samba-develUpgrade tdb-toolsUpgrade samba-winbind-develUpgrade samba4-pidlUpgrade samba4Upgrade samba3x-swatUpgrade openchangeUpgrade libwbclientUpgrade samba4-dcUpgrade ctdbUpgrade samba4-winbindUpgrade libtallocUpgrade samba4-pythonUpgrade samba4-libsUpgrade samba4-clientUpgrade libtevent-develUpgrade libsmbclient-develUpgrade openchange-devel-docsUpgrade samba-pidlUpgrade python-tdb | Apr 24, 2016 | Apr 24, 2016 |
| Samba | — | Upgrade to Samba version 4.4.2Upgrade to Samba version 4.3.8Upgrade to Samba version 4.2.11 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade libdcerpc-develUpgrade libdcerpc-samr0Upgrade libndr0Upgrade libtalloc2Upgrade libgensec0Upgrade samba-dsdb-modulesUpgrade samba-krb-printingUpgrade libsamba-passdb-develUpgrade libgensec0-32bitUpgrade libsmbconf0-32bitUpgrade samba-winbind-x86Upgrade libsmbsharemodes0Upgrade samba-pythonUpgrade libsamba-credentials0-32bitUpgrade libnetapi0Upgrade libsmbldap2-32bitUpgrade libsmbldap0Upgrade libtevent-util-develUpgrade samba-kdcUpgrade samba-cephUpgrade libndr-krb5pac0-32bitUpgrade ctdb-develUpgrade libtdb1-32bitUpgrade libsmbldap0-32bitUpgrade sambaUpgrade libndr-develUpgrade samba-libs-python3Upgrade libtalloc2-x86Upgrade libndr1Upgrade libldb1Upgrade libsamba-errors0-32bitUpgrade libnetapi-develUpgrade libtdb1-x86Upgrade libsamba-hostconfig-develUpgrade samba-client-x86Upgrade samba-32bitUpgrade libtevent0-32bitUpgrade libsamba-errors-develUpgrade libndr1-32bitUpgrade libsmbclient-raw0Upgrade libgensec-develUpgrade libsmbldap-develUpgrade samba-winbindUpgrade libdcerpc-atsvc-develUpgrade libsmbconf0Upgrade libsamba-errors0Upgrade libndr-nbt0Upgrade libtdb-develUpgrade libtevent-util0-32bitUpgrade libdcerpc-binding0Upgrade libndr0-32bitUpgrade samba-libs-32bitUpgrade libsmbconf-develUpgrade samba-develUpgrade libsamba-credentials0Upgrade samba-docUpgrade samba-winbind-32bitUpgrade libsmbclient0Upgrade ctdbUpgrade samba-test-develUpgrade libsamba-hostconfig0Upgrade libsamba-util0-32bitUpgrade samba-testUpgrade libsamba-util0Upgrade libndr-nbt0-32bitUpgrade libwbclient0Upgrade libndr-standard-develUpgrade libdcerpc0-32bitUpgrade libsmbclient0-32bitUpgrade libtdb1Upgrade libsamdb0Upgrade libregistry0Upgrade libndr-standard0Upgrade ldapsmbUpgrade libsamba-credentials-develUpgrade libsmbclient-raw0-32bitUpgrade libndr-standard0-32bitUpgrade libsamba-util-develUpgrade libndr-krb5pac-develUpgrade libsamba-policy-python3-develUpgrade samba-libs-python3-32bitUpgrade libsamba-policy0Upgrade libsamba-policy-develUpgrade libsamba-passdb0Upgrade libtevent0Upgrade samba-libsUpgrade libsamba-passdb0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libwbclient0-32bitUpgrade libsamdb0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libsmbclient-develUpgrade libtevent-develUpgrade libregistry-develUpgrade samba-client-32bitUpgrade libnetapi0-32bitUpgrade samba-x86Upgrade libndr-nbt-develUpgrade libsmbsharemodes-develUpgrade libsmbldap2Upgrade libndr-krb5pac0Upgrade libwbclient-develUpgrade libdcerpc-atsvc0Upgrade samba-clientUpgrade libdcerpc-samr-develUpgrade libsamba-policy0-python3Upgrade libsamdb-develUpgrade libsmbclient-raw-develUpgrade libsmbclient0-x86Upgrade libtalloc2-32bitUpgrade libtevent-util0Upgrade libldb-develUpgrade libtevent0-x86Upgrade libdcerpc0Upgrade libwbclient0-x86Upgrade samba-python3Upgrade libtalloc-develUpgrade samba-core-devel | Apr 13, 2016 | Apr 13, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub