The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "server signing = mandatory" setting, which allows man-in-the-middle attackers to spoof SMB servers by modifying the client-server data stream.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade samba-winbind-clientsUpgrade ctdb-develUpgrade samba-winbindUpgrade sambaUpgrade libwbclientUpgrade ctdbUpgrade samba-develUpgrade samba-test-libsUpgrade samba-clientUpgrade samba-vfs-glusterfsUpgrade samba-dcUpgrade libsmbclient-develUpgrade samba-pythonUpgrade samba-dc-libsUpgrade samba-commonUpgrade samba-libsUpgrade samba-common-libsUpgrade samba-pidlUpgrade samba-testUpgrade libwbclient-develUpgrade samba-test-develUpgrade samba-winbind-modulesUpgrade ctdb-testsUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-winbind-krb5-locatorUpgrade libsmbclient | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| Freebsd | — | Upgrade samba43Upgrade samba4Upgrade samba41Upgrade samba42Upgrade samba44Upgrade samba36 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade tdb-toolsUpgrade libteventUpgrade libldbUpgrade libtdbUpgrade samba-clientUpgrade pytallocUpgrade python-tdbUpgrade libwbclientUpgrade samba-winbindUpgrade python-teventUpgrade sambaUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade libtallocUpgrade samba-commonUpgrade samba-client-libsUpgrade samba-libsUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-common-tools | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade libteventUpgrade libsmbclientUpgrade ctdb-develUpgrade libldb-develUpgrade pyldbUpgrade samba-dc-libsUpgrade libtallocUpgrade openchange-clientUpgrade libtevent-develUpgrade samba4-winbind-krb5-locatorUpgrade ipa-clientUpgrade samba-client-libsUpgrade samba4-dc-libsUpgrade libtdbUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba4-develUpgrade libwbclient-develUpgrade python-teventUpgrade samba-winbindUpgrade ipa-server-dnsUpgrade ipa-server-selinuxUpgrade openchange-develUpgrade pyldb-develUpgrade samba-winbind-clientsUpgrade ctdb-testsUpgrade ipa-serverUpgrade samba-common-libsUpgrade samba-test-develUpgrade samba4-commonUpgrade samba4-testUpgrade samba-winbind-krb5-locatorUpgrade ldb-toolsUpgrade ctdbUpgrade samba-pidlUpgrade samba4-winbindUpgrade openchange-devel-docsUpgrade samba4-winbind-clientsUpgrade samba4-pidlUpgrade samba-vfs-glusterfsUpgrade samba-libsUpgrade sambaUpgrade libtdb-develUpgrade ipa-pythonUpgrade samba4Upgrade samba-develUpgrade python-tdbUpgrade samba4-libsUpgrade libldbUpgrade libwbclientUpgrade samba-testUpgrade libtalloc-develUpgrade samba-common-toolsUpgrade samba4-pythonUpgrade pytalloc-develUpgrade ipa-admintoolsUpgrade samba4-clientUpgrade samba-clientUpgrade samba-commonUpgrade samba4-dcUpgrade tdb-toolsUpgrade openchangeUpgrade libsmbclient-develUpgrade pytallocUpgrade samba-dcUpgrade samba-test-libsUpgrade ipa-server-trust-ad | Apr 13, 2016 | Apr 13, 2016 |
| Samba | — | Upgrade to Samba version 4.4.2Upgrade to Samba version 4.2.11Upgrade to Samba version 4.3.8 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade libndr-develUpgrade samba-clientUpgrade libsamba-policy-develUpgrade libsamdb0Upgrade libtevent-util0-32bitUpgrade sambaUpgrade libsamba-passdb0-32bitUpgrade libsmbconf0-32bitUpgrade libndr0-32bitUpgrade libdcerpc-atsvc0-32bitUpgrade libsmbclient-raw0-debuginfo-32bitUpgrade libwbclient0-32bitUpgrade libnetapi-develUpgrade samba-core-develUpgrade samba-debugsourceUpgrade libdcerpc-samr0-32bitUpgrade libsamba-policy0-debuginfo-32bitUpgrade libndr-nbt-develUpgrade libdcerpc0-debuginfoUpgrade libdcerpc-binding0Upgrade libnetapi0Upgrade libregistry-develUpgrade libwbclient0-debuginfo-32bitUpgrade samba-winbind-debuginfoUpgrade libsamba-credentials-develUpgrade libsamba-credentials0-32bitUpgrade libndr-krb5pac0-debuginfoUpgrade libregistry0-debuginfo-32bitUpgrade libdcerpc-develUpgrade ctdb-develUpgrade libsmbconf-develUpgrade samba-docUpgrade libtevent-util0-debuginfo-32bitUpgrade libtevent-util0Upgrade libwbclient0-debuginfoUpgrade libndr-krb5pac-develUpgrade samba-libs-32bitUpgrade libsmbclient-raw0Upgrade ctdb-pcp-pmdaUpgrade libdcerpc-atsvc0-debuginfoUpgrade libdcerpc-binding0-debuginfo-32bitUpgrade samba-winbindUpgrade libdcerpc0-32bitUpgrade libgensec0Upgrade libsmbldap0Upgrade libsamba-util0Upgrade libsamdb0-debuginfoUpgrade libsmbclient0-debuginfo-32bitUpgrade libdcerpc-atsvc0Upgrade samba-pythonUpgrade libsmbclient-raw0-32bitUpgrade libndr-nbt0-debuginfoUpgrade samba-client-debuginfoUpgrade libdcerpc-samr-develUpgrade ctdb-debuginfoUpgrade libsmbclient0-32bitUpgrade libsmbconf0-debuginfoUpgrade libwbclient-develUpgrade libgensec0-debuginfo-32bitUpgrade libsamba-util0-debuginfoUpgrade samba-winbind-debuginfo-32bitUpgrade libsamba-util-develUpgrade libsamba-hostconfig0-32bitUpgrade samba-debuginfoUpgrade libsamba-hostconfig0-debuginfoUpgrade libndr-nbt0-debuginfo-32bitUpgrade libdcerpc-samr0-debuginfoUpgrade libndr-nbt0Upgrade samba-winbind-32bitUpgrade libsmbldap0-debuginfoUpgrade libsamba-policy0-debuginfoUpgrade ctdb-testsUpgrade libndr-krb5pac0Upgrade libsamba-passdb0-debuginfoUpgrade libsamba-credentials0-debuginfoUpgrade libsmbclient0Upgrade libdcerpc-binding0-debuginfoUpgrade libgensec0-debuginfoUpgrade libregistry0Upgrade libnetapi0-debuginfo-32bitUpgrade libndr-standard0-debuginfo-32bitUpgrade libsamdb-develUpgrade libndr-krb5pac0-debuginfo-32bitUpgrade libndr-nbt0-32bitUpgrade libsmbldap0-debuginfo-32bitUpgrade libtevent-util-develUpgrade libregistry0-32bitUpgrade libsamdb0-32bitUpgrade ctdbUpgrade libsmbconf0Upgrade samba-libsUpgrade libndr0-debuginfoUpgrade libsamba-hostconfig-develUpgrade samba-testUpgrade libsmbldap-develUpgrade libndr-standard0-32bitUpgrade libnetapi0-32bitUpgrade libndr0Upgrade libsamba-passdb-develUpgrade libsamba-policy0Upgrade libnetapi0-debuginfoUpgrade samba-libs-debuginfo-32bitUpgrade libdcerpc-samr0-debuginfo-32bitUpgrade libsamba-credentials0Upgrade libgensec-develUpgrade samba-debuginfo-32bitUpgrade samba-client-debuginfo-32bitUpgrade libsamba-passdb0Upgrade samba-test-develUpgrade libsamba-hostconfig0Upgrade libdcerpc-samr0Upgrade ctdb-pcp-pmda-debuginfoUpgrade libsmbldap0-32bitUpgrade samba-client-32bitUpgrade samba-python-debuginfoUpgrade ctdb-tests-debuginfoUpgrade samba-32bitUpgrade libsamba-policy0-32bitUpgrade samba-libs-debuginfoUpgrade libndr-standard0-debuginfoUpgrade libdcerpc-binding0-32bitUpgrade libsamba-hostconfig0-debuginfo-32bitUpgrade libdcerpc0-debuginfo-32bitUpgrade libdcerpc-atsvc0-debuginfo-32bitUpgrade libsamba-util0-32bitUpgrade libndr-standard0Upgrade libsamdb0-debuginfo-32bitUpgrade libsmbclient-raw0-debuginfoUpgrade libdcerpc-atsvc-develUpgrade libsamba-credentials0-debuginfo-32bitUpgrade libgensec0-32bitUpgrade libsmbclient0-debuginfoUpgrade libndr-krb5pac0-32bitUpgrade libdcerpc0Upgrade libsamba-passdb0-debuginfo-32bitUpgrade libtevent-util0-debuginfoUpgrade libregistry0-debuginfoUpgrade libwbclient0Upgrade libsmbclient-raw-develUpgrade libsamba-util0-debuginfo-32bitUpgrade libndr-standard-develUpgrade libsmbclient-develUpgrade libsmbconf0-debuginfo-32bitUpgrade libndr0-debuginfo-32bitUpgrade samba-pidlUpgrade samba-test-debuginfo | Apr 20, 2016 | Apr 20, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub