Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate) checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the winbindd privileged pipe can cause winbindd to cache elevated access permissions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | May 11, 2017 |
| Amazon_linux | — | — | May 31, 2017 | Dec 19, 2016 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 11, 2017 |
| Centos_linux | — | Upgrade samba-vfs-glusterfsUpgrade samba-swatUpgrade samba-clientUpgrade samba4-dcUpgrade samba-winbind-develUpgrade samba-winbind-clientsUpgrade samba4-pythonUpgrade samba4-clientUpgrade samba-testUpgrade samba-client-libsUpgrade samba4-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbindUpgrade samba-commonUpgrade samba4-debuginfoUpgrade samba-pythonUpgrade libsmbclient-develUpgrade samba-krb5-printingUpgrade samba4Upgrade samba4-winbindUpgrade samba-test-libsUpgrade samba-common-toolsUpgrade samba4-pidlUpgrade samba4-winbind-krb5-locatorUpgrade samba-glusterfsUpgrade samba4-testUpgrade samba4-develUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-dcUpgrade samba4-commonUpgrade samba-pidlUpgrade samba-winbind-modulesUpgrade samba4-dc-libsUpgrade samba-dc-libsUpgrade libwbclient-develUpgrade samba-debuginfo | May 24, 2017 | Dec 19, 2016 |
| Debian | — | Upgrade samba | Dec 20, 2016 | Dec 19, 2016 |
| Freebsd | — | Upgrade samba42Upgrade samba4Upgrade samba41Upgrade samba43Upgrade samba36Upgrade samba44Upgrade samba45 | Dec 28, 2016 | Dec 26, 2016 |
| Oracle_linux | — | Upgrade libwbclient-develUpgrade samba-swatUpgrade samba-client-libsUpgrade libsmbclientUpgrade samba-domainjoin-guiUpgrade sambaUpgrade ctdb-testsUpgrade samba-libsUpgrade samba4-develUpgrade samba4-commonUpgrade samba-pythonUpgrade samba-pidlUpgrade samba4-libsUpgrade samba4-pythonUpgrade samba-winbindUpgrade samba-docUpgrade samba-krb5-printingUpgrade samba4-testUpgrade libwbclientUpgrade samba4-winbind-krb5-locatorUpgrade samba-testUpgrade libsmbclient-develUpgrade samba-glusterfsUpgrade samba4-clientUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba-vfs-glusterfsUpgrade samba-test-libsUpgrade samba4-winbindUpgrade samba-winbind-develUpgrade ctdbUpgrade samba-develUpgrade samba-dc-libsUpgrade samba-winbind-modulesUpgrade samba4-dcUpgrade samba-common-toolsUpgrade samba4-winbind-clientsUpgrade samba4Upgrade samba-dcUpgrade samba-commonUpgrade samba4-dc-libsUpgrade samba-clientUpgrade samba4-pidlUpgrade samba-common-libs | Mar 28, 2017 | Dec 19, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 9.0R1Update Pulse Connect Secure to version 8.2R11Update Pulse Connect Secure to version 8.3R5Update Pulse Connect Secure to version 8.1R14 | Oct 28, 2020 | May 11, 2017 |
| Redhat_linux | — | Upgrade samba-vfs-glusterfsUpgrade samba-pidlUpgrade samba4-libsUpgrade samba4-pidlUpgrade samba4-winbindUpgrade samba-debuginfoUpgrade samba-krb5-printingUpgrade ctdbUpgrade samba4-clientUpgrade libwbclientUpgrade samba-testNo solution existsUpgrade libsmbclient-develUpgrade samba-domainjoin-guiUpgrade samba-develUpgrade samba4-debuginfoUpgrade samba-libsUpgrade samba4Upgrade samba-test-libsUpgrade samba4-winbind-clientsUpgrade samba-commonUpgrade samba4-pythonUpgrade samba-winbindUpgrade samba-dc-libsUpgrade libwbclient-develUpgrade samba-clientUpgrade samba4-dc-libsUpgrade samba-dcUpgrade libsmbclientUpgrade samba4-dcUpgrade samba4-testUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade ctdb-testsUpgrade samba-glusterfsUpgrade samba-common-toolsUpgrade samba-pythonUpgrade samba-docUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-winbind-develUpgrade samba-common-libsUpgrade samba4-winbind-krb5-locatorUpgrade samba4-commonUpgrade samba4-develUpgrade samba-swat | Mar 21, 2017 | Dec 19, 2016 |
| Samba | — | Upgrade to Samba version 4.5.3Upgrade to Samba version 4.4.8Upgrade to Samba version 4.3.13 | Dec 20, 2016 | Dec 20, 2016 |
| Suse | — | Upgrade samba-32bitUpgrade ctdb-develUpgrade samba-docUpgrade libnetapi0Upgrade libsmbclient-raw0-32bitUpgrade libndr0-32bitUpgrade libdcerpc-atsvc0Upgrade libndr-nbt-develUpgrade libsamba-util-develUpgrade samba-pythonUpgrade libsmbconf-develUpgrade libsmbsharemodes0Upgrade libdcerpc-binding0Upgrade ldapsmbUpgrade libndr-develUpgrade libsmbconf0Upgrade libsamba-passdb0-32bitUpgrade libsamba-util0Upgrade libsamba-policy0Upgrade libsmbldap0Upgrade samba-libs-python3-32bitUpgrade libsmbldap0-32bitUpgrade libndr-krb5pac-develUpgrade libnetapi-develUpgrade sambaUpgrade samba-libs-python3Upgrade libsmbclient0-32bitUpgrade samba-x86Upgrade samba-winbind-32bitUpgrade samba-core-develUpgrade libdcerpc-develUpgrade libndr-krb5pac0-32bitUpgrade libsamba-policy-develUpgrade libndr0Upgrade libdcerpc0-32bitUpgrade samba-winbindUpgrade samba-libs-32bitUpgrade libsamdb0Upgrade libtevent-util0Upgrade libtalloc2-x86Upgrade libsmbldap2-32bitUpgrade ctdbUpgrade libsamba-hostconfig0Upgrade libtevent-develUpgrade libndr-krb5pac0Upgrade libwbclient0-32bitUpgrade libtevent0-x86Upgrade libwbclient0-x86Upgrade libtevent-util0-32bitUpgrade libldb-develUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-errors0Upgrade libsmbldap2Upgrade samba-cephUpgrade libndr-nbt0Upgrade libsmbconf0-32bitUpgrade libtdb1-32bitUpgrade libwbclient-develUpgrade libsamba-credentials-develUpgrade libdcerpc-samr-develUpgrade libsmbclient-raw-develUpgrade samba-python3Upgrade libndr1Upgrade libsamba-errors-develUpgrade samba-testUpgrade samba-client-x86Upgrade samba-kdcUpgrade libsamba-passdb0Upgrade libregistry-develUpgrade libtevent-util-develUpgrade libldb1Upgrade libsmbclient0-x86Upgrade libtevent0-32bitUpgrade libsamba-passdb-develUpgrade libtalloc2-32bitUpgrade samba-krb-printingUpgrade libregistry0Upgrade libndr-standard0Upgrade libdcerpc-binding0-32bitUpgrade libndr-standard-develUpgrade libtdb1-x86Upgrade libsamba-policy-python3-develUpgrade libgensec-develUpgrade libsamba-errors0-32bitUpgrade libdcerpc-atsvc-develUpgrade libsmbclient0Upgrade libtevent0Upgrade libtdb-develUpgrade samba-libsUpgrade libndr-standard0-32bitUpgrade libndr-nbt0-32bitUpgrade samba-test-develUpgrade libsamba-credentials0-32bitUpgrade libsamdb-develUpgrade libndr1-32bitUpgrade libsamba-util0-32bitUpgrade libsamdb0-32bitUpgrade samba-client-32bitUpgrade samba-winbind-x86Upgrade samba-dsdb-modulesUpgrade libsamba-policy0-python3Upgrade libdcerpc-samr0Upgrade libnetapi0-32bitUpgrade libsmbclient-raw0Upgrade libwbclient0Upgrade samba-clientUpgrade libtalloc-develUpgrade libsamba-hostconfig-develUpgrade libsamba-credentials0Upgrade libdcerpc0Upgrade libsmbldap-develUpgrade libsmbclient-develUpgrade libsmbsharemodes-develUpgrade samba-develUpgrade libtdb1Upgrade libgensec0-32bitUpgrade libgensec0Upgrade libtalloc2 | Dec 28, 2016 | Dec 19, 2016 |
| Suse Suse | — | Upgrade libsamba-policy-develUpgrade libsamba-hostconfig0-debuginfo-32bitUpgrade libregistry0-debuginfoUpgrade libldb1Upgrade libdcerpc-samr0Upgrade libsmbclient0-32bitUpgrade libsamdb0-debuginfo-32bitUpgrade libndr0-debuginfo-32bitUpgrade libsamba-policy0-32bitUpgrade libsamdb-develUpgrade libtevent0Upgrade libsamba-util0-32bitUpgrade libsamba-errors0-debuginfoUpgrade libsamba-errors0-32bitUpgrade libsamba-credentials0-debuginfo-32bitUpgrade libndr-standard0Upgrade libndr-standard-develUpgrade libndr-develUpgrade libgensec0-debuginfoUpgrade libdcerpc0-32bitUpgrade libdcerpc-atsvc0-debuginfoUpgrade samba-client-debuginfoUpgrade libtdb-develUpgrade libdcerpc0Upgrade libsmbsharemodes-develUpgrade libsamba-passdb-develUpgrade libregistry0Upgrade libregistry-develUpgrade libndr-krb5pac0-debuginfo-32bitUpgrade libdcerpc-samr0-debuginfo-32bitUpgrade libdcerpc-binding0-debuginfoUpgrade libdcerpc-atsvc0-debuginfo-32bitUpgrade samba-libs-debuginfoUpgrade libdcerpc-binding0-32bitUpgrade libndr0-32bitUpgrade libndr-nbt0-debuginfo-32bitUpgrade libgensec0-debuginfo-32bitUpgrade samba-test-develUpgrade samba-test-debuginfoUpgrade samba-libs-debuginfo-32bitUpgrade libtdb1-x86Upgrade libtdb1Upgrade libsmbclient0-x86Upgrade libsamba-util0Upgrade samba-testUpgrade samba-client-x86Upgrade samba-clientUpgrade libtevent-util-develUpgrade libtevent-util0-debuginfoUpgrade libsamba-credentials0-32bitUpgrade libsamba-credentials0Upgrade libnetapi0-32bitUpgrade samba-client-32bitUpgrade libtalloc2-32bitUpgrade libnetapi-develUpgrade libdcerpc-atsvc-develUpgrade libndr-nbt0-32bitUpgrade libtevent0-32bitUpgrade libgensec-develUpgrade samba-libsUpgrade ldapsmbUpgrade samba-python-debuginfoUpgrade ctdb-develUpgrade samba-krb-printingUpgrade libsmbclient-raw-develUpgrade libsamba-passdb0Upgrade libsamba-hostconfig-develUpgrade libndr-standard0-debuginfoUpgrade libdcerpc-binding0-debuginfo-32bitUpgrade libsamba-util0-debuginfo-32bitUpgrade libdcerpc-samr-develUpgrade libsmbclient-raw0-debuginfoUpgrade libregistry0-32bitUpgrade libsmbconf0-debuginfo-32bitUpgrade libsmbclient0Upgrade libsamdb0-32bitUpgrade samba-winbind-32bitUpgrade libsamba-passdb0-debuginfoUpgrade libsamba-hostconfig0Upgrade libsmbsharemodes0Upgrade libsamdb0-debuginfoUpgrade libndr-standard0-32bitUpgrade libndr-nbt-develUpgrade libwbclient0Upgrade libsmbldap0-debuginfoUpgrade samba-libs-32bitUpgrade libtalloc2-x86Upgrade libsmbldap-develUpgrade libsmbconf0Upgrade libsmbconf-develUpgrade libsamba-credentials-develUpgrade libsmbclient-develUpgrade libsamba-hostconfig0-debuginfoUpgrade libnetapi0Upgrade libndr-nbt0Upgrade libgensec0Upgrade libdcerpc0-debuginfoUpgrade ctdb-tests-debuginfoUpgrade samba-pythonUpgrade libndr-standard0-debuginfo-32bitUpgrade libndr-krb5pac-develUpgrade libdcerpc-samr0-debuginfoUpgrade libdcerpc-binding0Upgrade samba-docUpgrade samba-core-develUpgrade libwbclient0-debuginfo-32bitUpgrade libtevent-util0Upgrade libtevent-develUpgrade libsmbldap0-32bitUpgrade libsamba-errors0Upgrade libsamba-errors0-debuginfo-32bitUpgrade ctdb-testsUpgrade libsmbconf0-32bitUpgrade libsmbclient-raw0-debuginfo-32bitUpgrade libsamba-util-develUpgrade libsamba-passdb0-debuginfo-32bitUpgrade libnetapi0-debuginfo-32bitUpgrade libndr0-debuginfoUpgrade libgensec0-32bitUpgrade libdcerpc-samr0-32bitUpgrade libdcerpc-atsvc0Upgrade samba-debuginfo-32bitUpgrade libsmbclient-raw0-32bitUpgrade libsmbclient-raw0Upgrade libsamba-policy0-debuginfo-32bitUpgrade libsamba-policy0-debuginfoUpgrade libndr-krb5pac0Upgrade libldb-develUpgrade libdcerpc-atsvc0-32bitUpgrade samba-winbindUpgrade libsmbclient0-debuginfo-32bitUpgrade libndr-nbt0-debuginfoUpgrade libndr-krb5pac0-debuginfoUpgrade libsamba-credentials0-debuginfoUpgrade libregistry0-debuginfo-32bitUpgrade libsamba-errors-develUpgrade libsmbconf0-debuginfoUpgrade libtalloc-develUpgrade libtevent-util0-debuginfo-32bitUpgrade libsamba-policy0Upgrade libsamba-hostconfig0-32bitUpgrade libwbclient0-x86Upgrade libwbclient-develUpgrade libsamba-util0-debuginfoUpgrade ctdb-debuginfoUpgrade samba-winbind-debuginfo-32bitUpgrade samba-debugsourceUpgrade samba-32bitUpgrade libwbclient0-debuginfoUpgrade libwbclient0-32bitUpgrade samba-client-debuginfo-32bitUpgrade libtevent0-x86Upgrade libtdb1-32bitUpgrade libtalloc2Upgrade libdcerpc-develUpgrade samba-develUpgrade libnetapi0-debuginfoUpgrade libndr0Upgrade libdcerpc0-debuginfo-32bitUpgrade samba-winbind-x86Upgrade samba-pidlUpgrade libsmbclient0-debuginfoUpgrade libtevent-util0-32bitUpgrade libsmbldap0-debuginfo-32bitUpgrade libsmbldap0Upgrade libsamdb0Upgrade libsamba-passdb0-32bitUpgrade samba-debuginfoUpgrade sambaUpgrade libndr-krb5pac0-32bitUpgrade samba-winbind-debuginfoUpgrade ctdbUpgrade samba-x86 | Jul 28, 2017 | Dec 27, 2016 |
| Ubuntu | — | Upgrade libsmbclientUpgrade sambaUpgrade winbind | Dec 20, 2016 | Dec 19, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub