Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof LDAPS and HTTPS servers and obtain sensitive information via a crafted certificate.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade samba-vfs-glusterfsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade ctdb-develUpgrade samba-commonUpgrade ctdbUpgrade samba-dcUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-test-libsUpgrade samba-common-libsUpgrade samba-develUpgrade libsmbclientUpgrade sambaUpgrade libwbclientUpgrade libsmbclient-develUpgrade ctdb-testsUpgrade samba-winbindUpgrade samba-testUpgrade samba-test-develUpgrade samba-libsUpgrade samba-pythonUpgrade samba-client-libsUpgrade libwbclient-develUpgrade samba-pidl | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| Freebsd | — | Upgrade samba4Upgrade samba42Upgrade samba44Upgrade samba43Upgrade samba41Upgrade samba36 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libldbUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-libsUpgrade pytallocUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade libteventUpgrade libwbclientUpgrade libtallocUpgrade libtdbUpgrade libsmbclientUpgrade python-teventUpgrade tdb-toolsUpgrade samba-pythonUpgrade python-tdbUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade samba-develUpgrade libteventUpgrade ctdb-testsUpgrade samba4-pidlUpgrade ipa-server-selinuxUpgrade samba4-pythonUpgrade ldb-toolsUpgrade libtalloc-develUpgrade samba-libsUpgrade openchangeUpgrade python-tdbUpgrade samba4Upgrade libwbclientUpgrade samba-client-libsUpgrade libtevent-develUpgrade libtallocUpgrade samba-testUpgrade ipa-admintoolsUpgrade openchange-devel-docsUpgrade samba4-libsUpgrade samba4-dcUpgrade samba-test-develUpgrade samba-pidlUpgrade libsmbclient-develUpgrade samba4-winbind-clientsUpgrade tdb-toolsUpgrade samba4-develUpgrade samba4-clientUpgrade pytalloc-develUpgrade samba-winbind-clientsUpgrade libldbUpgrade samba-vfs-glusterfsUpgrade ipa-clientUpgrade samba4-winbind-krb5-locatorUpgrade samba-winbind-modulesUpgrade pyldbUpgrade libwbclient-develUpgrade samba-clientUpgrade libsmbclientUpgrade libldb-develUpgrade ctdb-develUpgrade openchange-develUpgrade samba-winbind-krb5-locatorUpgrade samba4-winbindUpgrade samba-pythonUpgrade samba-common-toolsUpgrade openchange-clientUpgrade ipa-pythonUpgrade ipa-serverUpgrade samba-common-libsUpgrade python-teventUpgrade ipa-server-trust-adUpgrade samba-test-libsUpgrade samba4-commonUpgrade pytallocUpgrade pyldb-develUpgrade libtdbUpgrade samba-dc-libsUpgrade libtdb-develUpgrade samba-dcUpgrade samba-winbindUpgrade sambaUpgrade ctdbUpgrade samba-commonUpgrade ipa-server-dnsUpgrade samba4-dc-libsUpgrade samba4-test | Apr 13, 2016 | Apr 13, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.1R10Update Pulse Connect Secure to version 8.2R5 | Oct 28, 2020 | Apr 25, 2016 |
| Samba | — | Upgrade to Samba version 4.3.8Upgrade to Samba version 4.4.2Upgrade to Samba version 4.2.11 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade libndr-krb5pac0Upgrade libnetapi0-32bitUpgrade libdcerpc-samr-develUpgrade samba-testUpgrade libdcerpc-atsvc0Upgrade libndr-nbt0-32bitUpgrade libndr-krb5pac-develUpgrade libldb1Upgrade libtevent0Upgrade libtdb1Upgrade libsamba-policy0Upgrade samba-python3Upgrade libsamba-hostconfig0-32bitUpgrade libsmbclient-raw-develUpgrade libregistry-develUpgrade libndr-develUpgrade libregistry0Upgrade libsamdb-develUpgrade ldapsmbUpgrade libtevent-util0-32bitUpgrade libndr-nbt-develUpgrade libsmbclient-raw0-32bitUpgrade libtalloc2-32bitUpgrade libsamdb0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libwbclient0-32bitUpgrade libsamba-util-develUpgrade libndr-standard0-32bitUpgrade libtevent-util0Upgrade libdcerpc0Upgrade samba-libsUpgrade samba-test-develUpgrade libtevent-develUpgrade samba-winbind-x86Upgrade libsamba-policy-python3-develUpgrade libtevent0-x86Upgrade samba-clientUpgrade libsamba-credentials0Upgrade libsmbclient0-x86Upgrade libsamba-policy-develUpgrade libdcerpc0-32bitUpgrade libwbclient0-x86Upgrade libsamba-credentials-develUpgrade libndr-standard-develUpgrade samba-client-32bitUpgrade samba-core-develUpgrade libtalloc-develUpgrade samba-libs-python3-32bitUpgrade libsamba-passdb0-32bitUpgrade libwbclient-develUpgrade libsamba-passdb-develUpgrade libsmbsharemodes-develUpgrade libsamba-passdb0Upgrade libsmbclient0-32bitUpgrade libsamdb0Upgrade libldb-develUpgrade samba-develUpgrade libsamba-util0-32bitUpgrade ctdbUpgrade libsmbclient-develUpgrade libsmbconf0Upgrade libsmbldap2-32bitUpgrade libtalloc2Upgrade libsmbconf0-32bitUpgrade libsmbsharemodes0Upgrade libsamba-hostconfig-develUpgrade libsmbldap2Upgrade libndr0-32bitUpgrade libsmbldap-develUpgrade libtevent0-32bitUpgrade libgensec-develUpgrade samba-pythonUpgrade libsamba-policy0-python3Upgrade libtdb-develUpgrade libnetapi-develUpgrade libdcerpc-atsvc-develUpgrade samba-client-x86Upgrade libsamba-credentials0-32bitUpgrade sambaUpgrade libwbclient0Upgrade samba-cephUpgrade libgensec0Upgrade libsamba-errors-develUpgrade samba-libs-python3Upgrade libsmbclient0Upgrade libsmbldap0-32bitUpgrade libdcerpc-binding0Upgrade samba-dsdb-modulesUpgrade libtevent-util-develUpgrade libsamba-errors0Upgrade libgensec0-32bitUpgrade libsamba-util0Upgrade samba-krb-printingUpgrade libtalloc2-x86Upgrade libnetapi0Upgrade ctdb-develUpgrade libndr-krb5pac0-32bitUpgrade samba-docUpgrade samba-kdcUpgrade libdcerpc-samr0Upgrade libsmbconf-develUpgrade libsmbclient-raw0Upgrade libsamba-errors0-32bitUpgrade samba-winbindUpgrade samba-winbind-32bitUpgrade samba-x86Upgrade libsamba-hostconfig0Upgrade libdcerpc-develUpgrade libsmbldap0Upgrade libtdb1-x86Upgrade libtdb1-32bitUpgrade libndr-nbt0Upgrade libndr1Upgrade samba-32bitUpgrade samba-libs-32bitUpgrade libndr1-32bitUpgrade libndr0Upgrade libndr-standard0 | Apr 13, 2016 | Apr 13, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub