The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka "BADLOCK."
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 12, 2016 |
| Centos_linux | — | Upgrade samba-glusterfsUpgrade samba-commonUpgrade samba-test-libsUpgrade samba-testUpgrade samba3x-docUpgrade ctdb-develUpgrade samba-dcUpgrade libsmbclientUpgrade samba3x-domainjoin-guiUpgrade samba-dc-libsUpgrade samba-vfs-glusterfsUpgrade samba-winbindUpgrade samba-test-develUpgrade samba-swatUpgrade ctdbUpgrade samba-winbind-modulesUpgrade samba3xUpgrade samba-pythonUpgrade sambaUpgrade samba-winbind-develUpgrade samba3x-clientUpgrade samba-common-libsUpgrade samba-develUpgrade samba-pidlUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade ctdb-testsUpgrade samba-domainjoin-guiUpgrade samba-libsUpgrade libsmbclient-develUpgrade samba3x-commonUpgrade libwbclientUpgrade samba-docUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade libwbclient-develUpgrade samba3x-winbind-develUpgrade samba-clientUpgrade samba3x-winbindUpgrade samba3x-swat | Jul 6, 2016 | Apr 12, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 12, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 10, 2016 |
| Freebsd | — | Upgrade samba44Upgrade samba4Upgrade samba42Upgrade samba43Upgrade samba36Upgrade samba41 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 12, 2016 |
| Hpux | — | Update CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest version | Aug 11, 2017 | Apr 12, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-libsUpgrade libsmbclientUpgrade samba-commonUpgrade libtallocUpgrade samba-common-toolsUpgrade samba-winbindUpgrade libwbclientUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade python-teventUpgrade samba-pythonUpgrade libldbUpgrade samba-winbind-modulesUpgrade sambaUpgrade tdb-toolsUpgrade pytallocUpgrade libteventUpgrade samba-client-libsUpgrade python-tdbUpgrade samba-clientUpgrade libtdb | Nov 30, 2017 | Apr 12, 2016 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 12, 2016 |
| Oracle_linux | — | Upgrade samba4-winbindUpgrade samba-commonUpgrade samba3x-winbindUpgrade samba4Upgrade samba-libsUpgrade samba4-pidlUpgrade pytalloc-develUpgrade tdb-toolsUpgrade samba-test-develUpgrade samba-clientUpgrade ipa-server-dnsUpgrade samba-testUpgrade libldbUpgrade pytallocUpgrade libteventUpgrade openchange-devel-docsUpgrade samba3x-commonUpgrade samba-glusterfsUpgrade ctdb-develUpgrade libtdb-develUpgrade samba3x-winbind-develUpgrade samba3x-domainjoin-guiUpgrade samba-vfs-glusterfsUpgrade samba-winbind-krb5-locatorUpgrade samba-domainjoin-guiUpgrade samba-dc-libsUpgrade samba4-winbind-clientsUpgrade ldb-toolsUpgrade pyldbUpgrade samba-common-toolsUpgrade samba3x-swatUpgrade ipa-admintoolsUpgrade samba4-clientUpgrade samba-test-libsUpgrade python-tdbUpgrade libwbclientUpgrade ipa-server-trust-adUpgrade samba-common-libsUpgrade libldb-develUpgrade samba3x-clientUpgrade ipa-pythonUpgrade samba-client-libsUpgrade openchangeUpgrade ctdb-testsUpgrade samba3x-docUpgrade openchange-develUpgrade samba4-winbind-krb5-locatorUpgrade libtalloc-develUpgrade libwbclient-develUpgrade libsmbclient-develUpgrade libtallocUpgrade samba3xUpgrade pyldb-develUpgrade ipa-serverUpgrade libtevent-develUpgrade samba4-pythonUpgrade samba-develUpgrade sambaUpgrade samba4-develUpgrade samba-pythonUpgrade libtdbUpgrade samba-winbind-modulesUpgrade samba4-dcUpgrade python-teventUpgrade libsmbclientUpgrade samba-swatUpgrade samba4-dc-libsUpgrade samba-winbindUpgrade samba-dcUpgrade ctdbUpgrade samba-winbind-develUpgrade samba4-commonUpgrade samba-docUpgrade samba4-testUpgrade samba-pidlUpgrade samba4-libsUpgrade ipa-server-selinuxUpgrade samba-winbind-clientsUpgrade ipa-clientUpgrade openchange-client | Apr 13, 2016 | Apr 12, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.1R10Update Pulse Connect Secure to version 8.2R5 | Oct 28, 2020 | Apr 12, 2016 |
| Samba | — | Upgrade to Samba version 4.3.8Upgrade to Samba version 4.4.2Upgrade to Samba version 4.2.11 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade samba-python3Upgrade libsamba-passdb-develUpgrade samba-libs-python3-32bitUpgrade libsamba-passdb0-32bitUpgrade libtevent-util0-32bitUpgrade libsamba-policy0Upgrade libdcerpc-atsvc0Upgrade libtalloc2Upgrade libdcerpc-binding0-32bitUpgrade libtalloc-develUpgrade libtevent-develUpgrade samba-dsdb-modulesUpgrade libndr-develUpgrade libsmbclient-raw-develUpgrade samba-docUpgrade samba-winbind-x86Upgrade libwbclient0-x86Upgrade libdcerpc-binding0Upgrade libsamba-passdb0Upgrade libtalloc2-32bitUpgrade libnetapi0-32bitUpgrade libndr-nbt0Upgrade libndr-krb5pac-develUpgrade libndr-standard0-32bitUpgrade libndr-nbt0-32bitUpgrade libdcerpc0Upgrade libsamba-hostconfig0-32bitUpgrade libsmbclient-raw0-32bitUpgrade ldapsmbUpgrade libsamdb0Upgrade libtdb1-x86Upgrade libtevent0Upgrade samba-core-develUpgrade libtdb1Upgrade samba-32bitUpgrade libwbclient-develUpgrade libsmbldap2-32bitUpgrade libsamba-util-develUpgrade libldb1Upgrade sambaUpgrade libsmbldap-develUpgrade samba-pythonUpgrade libdcerpc-develUpgrade samba-testUpgrade libregistry-develUpgrade libgensec-develUpgrade libgensec0-32bitUpgrade libwbclient0-32bitUpgrade libsamba-credentials0Upgrade libndr-krb5pac0Upgrade samba-libsUpgrade samba-winbind-32bitUpgrade libsmbclient-develUpgrade libtevent-util0Upgrade samba-winbindUpgrade libtevent0-x86Upgrade libsmbsharemodes-develUpgrade libdcerpc-samr0Upgrade samba-libs-python3Upgrade libsmbclient0-x86Upgrade libnetapi0Upgrade libwbclient0Upgrade libsmbconf0Upgrade libsamba-errors0-32bitUpgrade libtevent0-32bitUpgrade samba-client-32bitUpgrade libsamba-policy-python3-develUpgrade libsmbclient-raw0Upgrade ctdb-develUpgrade libdcerpc-atsvc-develUpgrade libndr0-32bitUpgrade libndr-standard-develUpgrade libsamdb-develUpgrade libdcerpc0-32bitUpgrade samba-test-develUpgrade libtalloc2-x86Upgrade libsamba-errors0Upgrade libsamba-util0-32bitUpgrade libndr-standard0Upgrade samba-clientUpgrade libndr-nbt-develUpgrade libregistry0Upgrade libsmbldap0Upgrade libsmbclient0Upgrade libsmbconf-develUpgrade samba-kdcUpgrade libsamba-credentials0-32bitUpgrade libsamba-hostconfig-develUpgrade libsamba-util0Upgrade ctdbUpgrade samba-x86Upgrade libsamdb0-32bitUpgrade libsmbconf0-32bitUpgrade libtdb1-32bitUpgrade samba-develUpgrade samba-client-x86Upgrade libndr-krb5pac0-32bitUpgrade libndr1-32bitUpgrade libtevent-util-develUpgrade libdcerpc-samr-develUpgrade libnetapi-develUpgrade libsamba-policy-develUpgrade libsmbldap2Upgrade libndr1Upgrade samba-cephUpgrade libndr0Upgrade libldb-develUpgrade libsamba-credentials-develUpgrade libtdb-develUpgrade libsamba-policy0-python3Upgrade libgensec0Upgrade libsmbldap0-32bitUpgrade samba-libs-32bitUpgrade libsamba-hostconfig0Upgrade libsmbsharemodes0Upgrade samba-krb-printingUpgrade libsmbclient0-32bitUpgrade libsamba-errors-devel | Apr 13, 2016 | Apr 12, 2016 |
| Ubuntu | — | Upgrade samba | Apr 18, 2016 | Apr 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub