The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade libwbclient-develUpgrade samba-swatUpgrade samba3xUpgrade samba3x-commonUpgrade ctdb-develUpgrade samba-dcUpgrade samba-clientUpgrade samba-client-libsUpgrade samba3x-winbindUpgrade samba-test-develUpgrade samba-dc-libsUpgrade samba3x-clientUpgrade samba3x-docUpgrade samba3x-winbind-develUpgrade samba3x-domainjoin-guiUpgrade ctdb-testsUpgrade samba-glusterfsUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-testUpgrade samba-pidlUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade libwbclientUpgrade libsmbclient-develUpgrade samba-winbind-develUpgrade samba-winbind-krb5-locatorUpgrade samba-develUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-domainjoin-guiUpgrade samba-pythonUpgrade samba-test-libsUpgrade ctdbUpgrade samba3x-swatUpgrade sambaUpgrade samba-docUpgrade samba-winbindUpgrade samba-vfs-glusterfs | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| Freebsd | — | Upgrade samba36Upgrade samba41Upgrade samba43Upgrade samba44Upgrade samba42Upgrade samba4 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Hpux | — | Update CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest version | Aug 11, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libsmbclientUpgrade libwbclientUpgrade samba-pythonUpgrade samba-libsUpgrade libteventUpgrade sambaUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade python-teventUpgrade libtallocUpgrade libtdbUpgrade pytallocUpgrade python-tdbUpgrade samba-clientUpgrade libldbUpgrade samba-client-libsUpgrade tdb-tools | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade pytallocUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade ipa-clientUpgrade openchangeUpgrade samba4-libsUpgrade samba-test-develUpgrade ldb-toolsUpgrade samba4-clientUpgrade samba-clientUpgrade samba3x-winbind-develUpgrade samba3x-swatUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libsUpgrade samba4-pidlUpgrade samba-testUpgrade samba3x-commonUpgrade libtdbUpgrade openchange-develUpgrade ipa-server-trust-adUpgrade samba4Upgrade samba3x-winbindUpgrade libtallocUpgrade libteventUpgrade samba3x-clientUpgrade samba-glusterfsUpgrade ipa-serverUpgrade libtevent-develUpgrade samba4-commonUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-test-libsUpgrade pyldbUpgrade samba-winbind-modulesUpgrade samba4-winbind-krb5-locatorUpgrade ctdb-develUpgrade openchange-clientUpgrade ipa-server-selinuxUpgrade samba3x-domainjoin-guiUpgrade samba-develUpgrade libtalloc-develUpgrade python-tdbUpgrade samba-vfs-glusterfsUpgrade libsmbclient-develUpgrade libtdb-develUpgrade ipa-pythonUpgrade ipa-admintoolsUpgrade tdb-toolsUpgrade samba-libsUpgrade samba-dcUpgrade sambaUpgrade samba-winbindUpgrade samba4-develUpgrade samba3x-docUpgrade libwbclientUpgrade samba-docUpgrade libldbUpgrade samba3xUpgrade pytalloc-develUpgrade samba-swatUpgrade samba4-testUpgrade samba-commonUpgrade openchange-devel-docsUpgrade samba4-pythonUpgrade libwbclient-develUpgrade samba4-winbindUpgrade libsmbclientUpgrade ctdbUpgrade samba-winbind-develUpgrade ipa-server-dnsUpgrade samba-pythonUpgrade ctdb-testsUpgrade samba-domainjoin-guiUpgrade samba4-dcUpgrade pyldb-develUpgrade samba4-dc-libsUpgrade libldb-develUpgrade samba4-winbind-clientsUpgrade python-teventUpgrade samba-pidl | Apr 24, 2016 | Apr 24, 2016 |
| Samba | — | Upgrade to Samba version 4.2.11Upgrade to Samba version 4.3.8Upgrade to Samba version 4.4.2 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade libwbclient0-32bitUpgrade libsamba-util0Upgrade samba-core-develUpgrade libsamdb0Upgrade libtevent-develUpgrade libtdb1Upgrade libndr1-32bitUpgrade samba-testUpgrade libsamba-errors-develUpgrade libgensec0-32bitUpgrade libdcerpc0Upgrade samba-dsdb-modulesUpgrade libdcerpc-binding0-32bitUpgrade libsmbldap0Upgrade libsmbclient0-x86Upgrade samba-libs-python3-32bitUpgrade libsmbclient-raw0Upgrade libndr-develUpgrade libsamba-hostconfig0-32bitUpgrade libnetapi0-32bitUpgrade libdcerpc-atsvc0Upgrade libsmbconf-develUpgrade libsmbsharemodes-develUpgrade libregistry0Upgrade libtevent0-x86Upgrade samba-python3Upgrade libsamba-policy-python3-develUpgrade libnetapi-develUpgrade libdcerpc-samr0Upgrade libtdb1-x86Upgrade libtalloc2-32bitUpgrade libsmbldap2Upgrade libsmbldap-develUpgrade libtevent-util0-32bitUpgrade libsamba-passdb0Upgrade libwbclient0-x86Upgrade samba-clientUpgrade ctdb-develUpgrade libsamba-hostconfig-develUpgrade libndr-standard-develUpgrade libldb1Upgrade libregistry-develUpgrade samba-client-32bitUpgrade libdcerpc-atsvc-develUpgrade libsamdb0-32bitUpgrade libsamdb-develUpgrade libsamba-passdb0-32bitUpgrade libsamba-passdb-develUpgrade samba-test-develUpgrade libndr0-32bitUpgrade libtalloc2Upgrade libndr-krb5pac-develUpgrade libtdb1-32bitUpgrade libsamba-errors0Upgrade libldb-develUpgrade libndr-krb5pac0Upgrade libwbclient-develUpgrade libsmbclient-raw0-32bitUpgrade libndr-nbt0-32bitUpgrade ctdbUpgrade libtalloc2-x86Upgrade libsmbclient-raw-develUpgrade libtevent0Upgrade libnetapi0Upgrade libtdb-develUpgrade libtevent-util0Upgrade samba-kdcUpgrade libndr-krb5pac0-32bitUpgrade samba-develUpgrade libsamba-hostconfig0Upgrade samba-docUpgrade samba-winbind-32bitUpgrade libtalloc-develUpgrade libtevent-util-develUpgrade samba-libs-python3Upgrade samba-winbind-x86Upgrade samba-winbindUpgrade libsamba-credentials0Upgrade samba-x86Upgrade libndr0Upgrade samba-client-x86Upgrade libgensec0Upgrade libndr-standard0Upgrade libtevent0-32bitUpgrade libsmbconf0-32bitUpgrade samba-krb-printingUpgrade samba-32bitUpgrade libsmbldap0-32bitUpgrade sambaUpgrade libsamba-policy-develUpgrade libsmbclient0-32bitUpgrade libsamba-credentials-develUpgrade libsamba-errors0-32bitUpgrade libsmbconf0Upgrade libsamba-util-develUpgrade ldapsmbUpgrade samba-libsUpgrade libsamba-policy0Upgrade libsmbldap2-32bitUpgrade libndr-nbt0Upgrade libsmbclient-develUpgrade libsmbclient0Upgrade samba-libs-32bitUpgrade libdcerpc-samr-develUpgrade libwbclient0Upgrade samba-pythonUpgrade libdcerpc-binding0Upgrade libsamba-util0-32bitUpgrade libsamba-policy0-python3Upgrade samba-cephUpgrade libsamba-credentials0-32bitUpgrade libndr-standard0-32bitUpgrade libdcerpc0-32bitUpgrade libndr-nbt-develUpgrade libgensec-develUpgrade libdcerpc-develUpgrade libndr1Upgrade libsmbsharemodes0 | Apr 13, 2016 | Apr 13, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub