The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka "BADLOCK."
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 12, 2016 |
| Centos_linux | — | Upgrade samba-client-libsUpgrade samba3x-winbind-develUpgrade ctdb-testsUpgrade samba3x-swatUpgrade libwbclient-develUpgrade samba-winbind-clientsUpgrade samba-docUpgrade samba-libsUpgrade samba3x-winbindUpgrade samba-domainjoin-guiUpgrade samba-clientUpgrade libwbclientUpgrade samba3x-commonUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade libsmbclient-develUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba-swatUpgrade samba-testUpgrade samba-test-develUpgrade sambaUpgrade samba-dcUpgrade libsmbclientUpgrade samba-test-libsUpgrade samba-develUpgrade samba-dc-libsUpgrade samba-winbind-develUpgrade samba-pythonUpgrade samba3x-domainjoin-guiUpgrade samba-commonUpgrade ctdb-develUpgrade samba3x-clientUpgrade samba-pidlUpgrade samba-winbind-modulesUpgrade ctdbUpgrade samba-glusterfsUpgrade samba3xUpgrade samba3x-docUpgrade samba-vfs-glusterfs | Jul 6, 2016 | Apr 12, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 12, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 10, 2016 |
| Freebsd | — | Upgrade samba42Upgrade samba43Upgrade samba44Upgrade samba4Upgrade samba36Upgrade samba41 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 12, 2016 |
| Hpux | — | Update CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest version | Aug 11, 2017 | Apr 12, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-pythonUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade libtallocUpgrade libwbclientUpgrade samba-libsUpgrade samba-winbindUpgrade libldbUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade sambaUpgrade python-teventUpgrade libtdbUpgrade libteventUpgrade python-tdbUpgrade samba-clientUpgrade samba-client-libsUpgrade pytallocUpgrade tdb-tools | Nov 30, 2017 | Apr 12, 2016 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 12, 2016 |
| Oracle_linux | — | Upgrade libtdbUpgrade samba-swatUpgrade libsmbclientUpgrade samba4-dcUpgrade samba4-dc-libsUpgrade samba3x-docUpgrade samba-common-libsUpgrade libldb-develUpgrade python-teventUpgrade ipa-pythonUpgrade ctdb-testsUpgrade samba-winbind-modulesUpgrade libwbclient-develUpgrade libtevent-develUpgrade samba4-develUpgrade samba-winbind-develUpgrade openchange-develUpgrade ipa-clientUpgrade samba-client-libsUpgrade openchange-clientUpgrade sambaUpgrade openchangeUpgrade libsmbclient-develUpgrade samba-pidlUpgrade samba4-pythonUpgrade ctdbUpgrade pyldb-develUpgrade samba-dcUpgrade libtallocUpgrade samba4-testUpgrade samba3xUpgrade samba-pythonUpgrade ipa-server-selinuxUpgrade samba-docUpgrade samba4-commonUpgrade libtalloc-develUpgrade samba4-winbind-krb5-locatorUpgrade samba4-libsUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-develUpgrade samba3x-clientUpgrade ipa-serverUpgrade samba-testUpgrade samba3x-winbind-develUpgrade samba3x-domainjoin-guiUpgrade libtdb-develUpgrade samba-domainjoin-guiUpgrade samba-dc-libsUpgrade libldbUpgrade samba4-winbind-clientsUpgrade samba-vfs-glusterfsUpgrade libwbclientUpgrade samba4-clientUpgrade ipa-server-trust-adUpgrade ipa-admintoolsUpgrade samba-common-toolsUpgrade pyldbUpgrade samba3x-swatUpgrade samba4-winbindUpgrade samba-test-develUpgrade samba-glusterfsUpgrade samba-winbind-krb5-locatorUpgrade ldb-toolsUpgrade pytalloc-develUpgrade samba-test-libsUpgrade ctdb-develUpgrade tdb-toolsUpgrade samba4Upgrade samba-commonUpgrade samba4-pidlUpgrade samba3x-winbindUpgrade samba-libsUpgrade pytallocUpgrade samba3x-commonUpgrade openchange-devel-docsUpgrade libteventUpgrade ipa-server-dnsUpgrade python-tdbUpgrade samba-client | Apr 13, 2016 | Apr 12, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.1R10Update Pulse Connect Secure to version 8.2R5 | Oct 28, 2020 | Apr 12, 2016 |
| Samba | — | Upgrade to Samba version 4.2.11Upgrade to Samba version 4.4.2Upgrade to Samba version 4.3.8 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade libndr-standard0-32bitUpgrade libsamba-passdb0-32bitUpgrade samba-dsdb-modulesUpgrade libtalloc2Upgrade libtalloc-develUpgrade libdcerpc-binding0Upgrade libgensec0-32bitUpgrade samba-libsUpgrade libsamba-util-develUpgrade libndr-nbt0Upgrade samba-python3Upgrade libndr-krb5pac0Upgrade libnetapi0-32bitUpgrade libsmbldap2-32bitUpgrade libndr-nbt0-32bitUpgrade samba-core-develUpgrade libgensec-develUpgrade libsmbsharemodes-develUpgrade libdcerpc-samr0Upgrade samba-32bitUpgrade libtevent0-x86Upgrade libsamba-policy0Upgrade samba-winbindUpgrade samba-winbind-x86Upgrade samba-pythonUpgrade libwbclient-develUpgrade libregistry-develUpgrade libndr-develUpgrade libwbclient0-32bitUpgrade libldb1Upgrade samba-testUpgrade libsmbldap-develUpgrade libtevent-util0-32bitUpgrade sambaUpgrade libsamba-hostconfig0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libdcerpc-develUpgrade libtevent-util0Upgrade libsamba-passdb-develUpgrade libsmbclient-raw-develUpgrade ldapsmbUpgrade libsamba-credentials0Upgrade libsamba-passdb0Upgrade libtalloc2-32bitUpgrade samba-libs-python3-32bitUpgrade libsmbclient-develUpgrade libtdb1-x86Upgrade libsamdb0Upgrade samba-docUpgrade samba-winbind-32bitUpgrade libndr-krb5pac-develUpgrade libtdb1Upgrade libtevent-develUpgrade libdcerpc0Upgrade libdcerpc-binding0-32bitUpgrade samba-libs-python3Upgrade libtevent0Upgrade libdcerpc-atsvc0Upgrade libwbclient0-x86Upgrade samba-x86Upgrade libsamba-policy-python3-develUpgrade libdcerpc0-32bitUpgrade libsamba-errors0Upgrade libtalloc2-x86Upgrade libsmbldap0-32bitUpgrade libndr1-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsamdb-develUpgrade libsmbclient0-32bitUpgrade ctdb-develUpgrade libnetapi-develUpgrade libsamba-hostconfig0Upgrade libndr0-32bitUpgrade libsmbclient0-x86Upgrade libdcerpc-atsvc-develUpgrade samba-clientUpgrade samba-client-32bitUpgrade samba-develUpgrade libldb-develUpgrade libsamba-credentials-develUpgrade libnetapi0Upgrade libndr0Upgrade libsmbclient-raw0Upgrade libsamba-errors0-32bitUpgrade libwbclient0Upgrade libsmbldap0Upgrade libsamdb0-32bitUpgrade samba-libs-32bitUpgrade libsamba-hostconfig-develUpgrade libregistry0Upgrade libtdb1-32bitUpgrade libndr-nbt-develUpgrade ctdbUpgrade libsamba-util0Upgrade libsmbconf-develUpgrade libsmbconf0Upgrade libsmbsharemodes0Upgrade libsamba-errors-develUpgrade libtevent0-32bitUpgrade libsmbconf0-32bitUpgrade libndr-standard0Upgrade samba-krb-printingUpgrade libndr-standard-develUpgrade libndr1Upgrade samba-client-x86Upgrade libsamba-util0-32bitUpgrade libsamba-policy0-python3Upgrade libdcerpc-samr-develUpgrade samba-cephUpgrade libtevent-util-develUpgrade libsamba-policy-develUpgrade libgensec0Upgrade libtdb-develUpgrade libsmbldap2Upgrade libsamba-credentials0-32bitUpgrade libsmbclient0Upgrade samba-kdcUpgrade samba-test-devel | Apr 13, 2016 | Apr 12, 2016 |
| Ubuntu | — | Upgrade samba | Apr 18, 2016 | Apr 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub