Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade ctdbUpgrade samba-testUpgrade samba-pidlUpgrade samba-winbind-develUpgrade samba3x-domainjoin-guiUpgrade samba-dcUpgrade samba-glusterfsUpgrade ctdb-develUpgrade samba3x-docUpgrade samba3xUpgrade samba-vfs-glusterfsUpgrade samba-commonUpgrade samba3x-commonUpgrade samba3x-clientUpgrade samba-test-develUpgrade ctdb-testsUpgrade samba-winbind-clientsUpgrade libwbclient-develUpgrade sambaUpgrade samba-winbindUpgrade libsmbclient-develUpgrade libwbclientUpgrade samba3x-winbind-develUpgrade samba-dc-libsUpgrade samba-client-libsUpgrade samba-swatUpgrade samba3x-swatUpgrade samba-pythonUpgrade samba-test-libsUpgrade samba-libsUpgrade samba-docUpgrade samba-common-toolsUpgrade samba-domainjoin-guiUpgrade samba-develUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libsUpgrade samba3x-winbindUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade libsmbclient | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 17, 2016 |
| Freebsd | — | Upgrade samba36Upgrade samba43Upgrade samba41Upgrade samba44Upgrade samba42Upgrade samba4 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Hpux | — | Update CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest version | Aug 11, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade tdb-toolsUpgrade libtdbUpgrade libldbUpgrade libwbclientUpgrade python-tdbUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade libteventUpgrade samba-clientUpgrade pytallocUpgrade libtallocUpgrade libsmbclientUpgrade sambaUpgrade samba-winbindUpgrade samba-commonUpgrade samba-pythonUpgrade python-teventUpgrade samba-libs | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade samba-winbind-clientsUpgrade samba-vfs-glusterfsUpgrade samba4-dc-libsUpgrade ipa-server-trust-adUpgrade samba-test-develUpgrade samba3x-winbind-develUpgrade ctdb-develUpgrade samba4-clientUpgrade samba-glusterfsUpgrade samba4-winbindUpgrade samba-common-toolsUpgrade samba-test-libsUpgrade libtdb-develUpgrade samba-libsUpgrade samba3x-commonUpgrade samba-common-libsUpgrade ldb-toolsUpgrade samba-dc-libsUpgrade samba4Upgrade samba-testUpgrade libteventUpgrade samba3x-winbindUpgrade samba-winbind-krb5-locatorUpgrade libldbUpgrade openchangeUpgrade samba-commonUpgrade ipa-serverUpgrade samba-domainjoin-guiUpgrade pytallocUpgrade ipa-clientUpgrade samba-clientUpgrade pyldbUpgrade samba-develUpgrade samba3x-swatUpgrade libsmbclient-develUpgrade samba4-pidlUpgrade samba4-winbind-clientsUpgrade libwbclientUpgrade samba4-pythonUpgrade python-teventUpgrade sambaUpgrade libtdbUpgrade samba3x-docUpgrade samba4-commonUpgrade samba-swatUpgrade samba-docUpgrade samba-dcUpgrade openchange-develUpgrade samba4-dcUpgrade libtallocUpgrade samba-client-libsUpgrade libsmbclientUpgrade ipa-server-dnsUpgrade ipa-server-selinuxUpgrade samba4-libsUpgrade ipa-admintoolsUpgrade samba-winbindUpgrade samba-pythonUpgrade openchange-clientUpgrade pyldb-develUpgrade ipa-pythonUpgrade libtevent-develUpgrade ctdb-testsUpgrade samba4-develUpgrade libtalloc-develUpgrade samba-pidlUpgrade samba3x-clientUpgrade pytalloc-develUpgrade libwbclient-develUpgrade samba4-testUpgrade ctdbUpgrade libldb-develUpgrade tdb-toolsUpgrade samba-winbind-modulesUpgrade python-tdbUpgrade samba4-winbind-krb5-locatorUpgrade samba3x-domainjoin-guiUpgrade samba-winbind-develUpgrade openchange-devel-docsUpgrade samba3x | Apr 24, 2016 | Apr 24, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 12, 2016 |
| Samba | — | Upgrade to Samba version 4.2.11Upgrade to Samba version 4.3.8Upgrade to Samba version 4.4.2 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade libtevent-util-develUpgrade libndr-nbt-develUpgrade libsmbldap0Upgrade libsamba-util0-32bitUpgrade libsamba-passdb-develUpgrade libgensec0Upgrade libsamba-credentials-develUpgrade samba-libs-32bitUpgrade libsmbclient0Upgrade libdcerpc0Upgrade libwbclient0Upgrade samba-clientUpgrade libsmbsharemodes-develUpgrade libsamba-policy-python3-develUpgrade ctdb-develUpgrade libsmbclient-develUpgrade libsamba-util0Upgrade libsamba-errors-develUpgrade libsmbclient0-32bitUpgrade ctdbUpgrade samba-krb-printingUpgrade libndr-standard0Upgrade libndr-krb5pac0-32bitUpgrade libndr0-32bitUpgrade libdcerpc-binding0-32bitUpgrade samba-testUpgrade libsamba-credentials0Upgrade libsamba-credentials0-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-policy0-python3Upgrade libsamba-errors0-32bitUpgrade libsamba-hostconfig0Upgrade libtdb-develUpgrade libtalloc2-32bitUpgrade samba-develUpgrade samba-kdcUpgrade samba-libsUpgrade libtdb1Upgrade libdcerpc0-32bitUpgrade ldapsmbUpgrade libldb1Upgrade libsamdb-develUpgrade libsmbldap0-32bitUpgrade libnetapi0-32bitUpgrade samba-client-32bitUpgrade libtevent0-32bitUpgrade libsamdb0-32bitUpgrade libtevent-util0Upgrade libsmbconf-develUpgrade libsmbclient-raw0Upgrade libsmbldap2Upgrade libsamba-passdb0Upgrade libdcerpc-atsvc-develUpgrade libnetapi-develUpgrade samba-client-x86Upgrade libregistry0Upgrade libsamba-policy-develUpgrade samba-test-develUpgrade libndr-standard-develUpgrade libsmbclient0-x86Upgrade libndr-nbt0Upgrade libsmbconf0-32bitUpgrade libwbclient-develUpgrade libtevent-develUpgrade libndr1Upgrade samba-winbind-32bitUpgrade libtalloc-develUpgrade libldb-develUpgrade libtevent0-x86Upgrade libsamba-util-develUpgrade samba-libs-python3Upgrade libtevent-util0-32bitUpgrade libndr-krb5pac0Upgrade libsmbldap2-32bitUpgrade samba-pythonUpgrade libsamdb0Upgrade libsmbsharemodes0Upgrade libgensec-develUpgrade libndr-develUpgrade libnetapi0Upgrade libndr1-32bitUpgrade libtalloc2-x86Upgrade libsmbldap-develUpgrade samba-docUpgrade libdcerpc-atsvc0Upgrade libdcerpc-samr0Upgrade libsmbclient-raw-develUpgrade libndr0Upgrade samba-libs-python3-32bitUpgrade libndr-nbt0-32bitUpgrade libsamba-errors0Upgrade samba-core-develUpgrade samba-32bitUpgrade libsamba-passdb0-32bitUpgrade libgensec0-32bitUpgrade libsmbconf0Upgrade libtevent0Upgrade libtdb1-32bitUpgrade samba-winbindUpgrade libtdb1-x86Upgrade samba-x86Upgrade samba-cephUpgrade libdcerpc-develUpgrade libndr-krb5pac-develUpgrade libsmbclient-raw0-32bitUpgrade libwbclient0-32bitUpgrade libregistry-develUpgrade libsamba-policy0Upgrade libsamba-hostconfig0-32bitUpgrade libndr-standard0-32bitUpgrade samba-python3Upgrade libtalloc2Upgrade libdcerpc-binding0Upgrade sambaUpgrade samba-winbind-x86Upgrade libsamba-hostconfig-develUpgrade samba-dsdb-modulesUpgrade libwbclient0-x86 | Apr 13, 2016 | Apr 13, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub