The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade samba-dc-libsUpgrade samba-pidlUpgrade samba-test-develUpgrade samba3x-clientUpgrade ctdb-develUpgrade samba3x-domainjoin-guiUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-swatUpgrade samba-common-libsUpgrade samba3x-winbind-develUpgrade samba-client-libsUpgrade samba-glusterfsUpgrade samba-dcUpgrade samba-clientUpgrade samba3x-commonUpgrade samba3x-docUpgrade samba3x-winbindUpgrade samba3xUpgrade libwbclient-develUpgrade samba-testUpgrade samba-winbind-modulesUpgrade ctdb-testsUpgrade libsmbclient-develUpgrade samba-commonUpgrade ctdbUpgrade samba-test-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-domainjoin-guiUpgrade samba-common-toolsUpgrade libwbclientUpgrade sambaUpgrade samba-pythonUpgrade samba-winbind-develUpgrade samba-vfs-glusterfsUpgrade samba3x-swatUpgrade samba-winbindUpgrade samba-docUpgrade samba-libsUpgrade samba-devel | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| Freebsd | — | Upgrade samba4Upgrade samba44Upgrade samba42Upgrade samba41Upgrade samba36Upgrade samba43 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Hpux | — | Update CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest version | Aug 11, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-libsUpgrade libteventUpgrade samba-winbindUpgrade python-teventUpgrade libtallocUpgrade libsmbclientUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade samba-pythonUpgrade libwbclientUpgrade sambaUpgrade python-tdbUpgrade pytallocUpgrade libldbUpgrade samba-clientUpgrade tdb-toolsUpgrade libtdbUpgrade samba-client-libs | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade samba3x-commonUpgrade samba4-libsUpgrade ldb-toolsUpgrade libtdbUpgrade samba3x-winbind-develUpgrade samba4-commonUpgrade samba-test-libsUpgrade pyldbUpgrade samba-common-toolsUpgrade samba-test-develUpgrade samba4Upgrade libteventUpgrade openchange-develUpgrade samba-client-libsUpgrade ipa-clientUpgrade libtallocUpgrade ipa-server-trust-adUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba4-pidlUpgrade samba-common-libsUpgrade ipa-serverUpgrade samba-glusterfsUpgrade openchangeUpgrade samba3x-clientUpgrade samba-testUpgrade samba3x-swatUpgrade pytallocUpgrade samba4-clientUpgrade libtevent-develUpgrade samba-dc-libsUpgrade samba3x-winbindUpgrade samba-winbind-krb5-locatorUpgrade sambaUpgrade samba-pythonUpgrade samba-domainjoin-guiUpgrade samba4-dcUpgrade libwbclientUpgrade samba3x-domainjoin-guiUpgrade samba4-winbindUpgrade ipa-server-selinuxUpgrade samba-winbindUpgrade pyldb-develUpgrade openchange-clientUpgrade samba3x-docUpgrade libsmbclientUpgrade libwbclient-develUpgrade samba4-testUpgrade ctdb-develUpgrade ctdbUpgrade pytalloc-develUpgrade samba-winbind-develUpgrade samba-swatUpgrade python-teventUpgrade libldb-develUpgrade samba4-winbind-clientsUpgrade samba-commonUpgrade samba-vfs-glusterfsUpgrade samba4-winbind-krb5-locatorUpgrade python-tdbUpgrade samba-develUpgrade libtalloc-develUpgrade samba4-dc-libsUpgrade ctdb-testsUpgrade samba-dcUpgrade tdb-toolsUpgrade ipa-server-dnsUpgrade samba-pidlUpgrade openchange-devel-docsUpgrade samba4-develUpgrade samba4-pythonUpgrade libldbUpgrade samba3xUpgrade samba-docUpgrade samba-winbind-modulesUpgrade libsmbclient-develUpgrade ipa-pythonUpgrade ipa-admintoolsUpgrade samba-libsUpgrade libtdb-devel | Apr 24, 2016 | Apr 24, 2016 |
| Samba | — | Upgrade to Samba version 4.3.8Upgrade to Samba version 4.2.11Upgrade to Samba version 4.4.2 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade libsamba-passdb0-32bitUpgrade libsmbsharemodes-develUpgrade libsmbclient-raw0-32bitUpgrade libsamdb-develUpgrade libregistry-develUpgrade libndr1-32bitUpgrade libtevent-develUpgrade libwbclient-develUpgrade samba-test-develUpgrade libwbclient0-32bitUpgrade libsamdb0-32bitUpgrade libsamba-errors0Upgrade libtalloc2Upgrade libndr0-32bitUpgrade libsamba-passdb-develUpgrade libldb-develUpgrade libnetapi-develUpgrade libndr-standard-develUpgrade libdcerpc-atsvc-develUpgrade libsamba-hostconfig-develUpgrade libsamba-errors-develUpgrade samba-dsdb-modulesUpgrade libndr-krb5pac0Upgrade libsamba-passdb0Upgrade libsmbclient-raw0Upgrade libdcerpc-samr0Upgrade libsmbldap-develUpgrade libsmbclient0-x86Upgrade libtdb1-32bitUpgrade samba-clientUpgrade libtevent-util0-32bitUpgrade libsmbconf-develUpgrade libtdb1-x86Upgrade libsamba-util0Upgrade samba-testUpgrade libsamdb0Upgrade samba-python3Upgrade libsamba-hostconfig0-32bitUpgrade libldb1Upgrade libndr-develUpgrade libsamba-policy-python3-develUpgrade samba-client-32bitUpgrade libsmbldap0Upgrade libgensec0-32bitUpgrade samba-core-develUpgrade libndr-nbt0-32bitUpgrade libdcerpc0Upgrade ctdb-develUpgrade libdcerpc-binding0-32bitUpgrade libsmbldap2Upgrade libndr-krb5pac-develUpgrade libwbclient0-x86Upgrade libnetapi0-32bitUpgrade libregistry0Upgrade libtalloc2-32bitUpgrade libtevent0-x86Upgrade libdcerpc-atsvc0Upgrade libtdb1Upgrade samba-libs-python3-32bitUpgrade libsmbldap0-32bitUpgrade samba-krb-printingUpgrade ldapsmbUpgrade libtevent0Upgrade libsmbldap2-32bitUpgrade libsamba-util-develUpgrade libsamba-errors0-32bitUpgrade libsamba-policy0Upgrade libsamba-credentials-develUpgrade libsmbconf0Upgrade libndr0Upgrade libsamba-credentials0-32bitUpgrade samba-libs-python3Upgrade libdcerpc0-32bitUpgrade libsamba-hostconfig0Upgrade libsamba-credentials0Upgrade libsmbclient-raw-develUpgrade libtevent-util-develUpgrade libndr1Upgrade libsmbsharemodes0Upgrade libwbclient0Upgrade samba-develUpgrade libsmbclient-develUpgrade samba-pythonUpgrade libdcerpc-samr-develUpgrade libtevent-util0Upgrade samba-x86Upgrade libsmbconf0-32bitUpgrade libtevent0-32bitUpgrade libndr-standard0Upgrade samba-client-x86Upgrade libgensec0Upgrade samba-winbindUpgrade libndr-standard0-32bitUpgrade libnetapi0Upgrade libndr-krb5pac0-32bitUpgrade samba-docUpgrade libsmbclient0Upgrade samba-libs-32bitUpgrade samba-winbind-x86Upgrade libtalloc2-x86Upgrade libtalloc-develUpgrade libndr-nbt-develUpgrade libgensec-develUpgrade libdcerpc-binding0Upgrade libsamba-policy0-python3Upgrade libdcerpc-develUpgrade samba-cephUpgrade libsamba-util0-32bitUpgrade libndr-nbt0Upgrade samba-winbind-32bitUpgrade libtdb-develUpgrade samba-kdcUpgrade ctdbUpgrade libsmbclient0-32bitUpgrade libsamba-policy-develUpgrade samba-32bitUpgrade sambaUpgrade samba-libs | Apr 13, 2016 | Apr 13, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub