It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Jul 26, 2018 | Jul 26, 2018 |
| Amazon_linux | — | Upgrade samba | Oct 13, 2017 | Sep 21, 2017 |
| Centos_linux | — | Upgrade samba4Upgrade samba4-dcUpgrade samba4-winbindUpgrade samba-common-libsUpgrade libsmbclient-develUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-krb5-printingUpgrade samba-docUpgrade sambaUpgrade samba-vfs-glusterfsUpgrade samba-pythonUpgrade samba-dcUpgrade samba4-dc-libsUpgrade samba-test-libsUpgrade samba4-pythonUpgrade samba4-clientUpgrade samba-winbindUpgrade samba-domainjoin-guiUpgrade samba4-winbind-clientsUpgrade samba-develUpgrade samba-dc-libsUpgrade samba-libsUpgrade samba-swatUpgrade samba-debuginfoUpgrade samba4-debuginfoUpgrade samba-winbind-develUpgrade samba-pidlUpgrade libwbclientUpgrade samba-winbind-modulesUpgrade samba4-pidlUpgrade samba4-commonUpgrade samba4-testUpgrade samba-common-toolsUpgrade samba4-winbind-krb5-locatorUpgrade samba-testUpgrade samba-glusterfsUpgrade libwbclient-develUpgrade samba-clientUpgrade samba-client-libsUpgrade samba4-libsUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade samba4-devel | Sep 25, 2017 | Sep 21, 2017 |
| Debian | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
| Hpux | — | Update CIFS-Server to the latest version | Jun 5, 2018 | May 31, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-pythonUpgrade samba-commonUpgrade libsmbclientUpgrade sambaUpgrade samba-common-libsUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-common-toolsUpgrade samba-libsUpgrade libwbclient | Nov 30, 2017 | Sep 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libwbclientUpgrade samba-commonUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-clientUpgrade samba-winbindUpgrade sambaUpgrade samba-common-toolsUpgrade samba-winbind-modules | Nov 30, 2017 | Sep 20, 2017 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3 | Nov 30, 2017 | Nov 30, 2017 |
| Oracle_linux | — | Upgrade libsmbclient-develUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba4-testUpgrade sambaUpgrade samba4-libsUpgrade samba-develUpgrade libwbclient-develUpgrade samba-docUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba-dc-libsUpgrade ctdb-testsUpgrade samba-domainjoin-guiUpgrade samba4-develUpgrade samba-commonUpgrade samba-client-libsUpgrade samba4-winbind-krb5-locatorUpgrade samba-libsUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba4-winbind-clientsUpgrade samba-swatUpgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba4-winbindUpgrade ctdbUpgrade samba-winbind-develUpgrade samba4-dcUpgrade samba-testUpgrade samba-pidlUpgrade samba-krb5-printingUpgrade samba-glusterfsUpgrade samba4Upgrade samba4-commonUpgrade libwbclientUpgrade samba-vfs-glusterfsUpgrade samba4-clientUpgrade samba-test-libsUpgrade samba4-pidlUpgrade samba4-pythonUpgrade samba-dcUpgrade samba4-dc-libs | Sep 27, 2017 | Sep 20, 2017 |
| Redhat_linux | — | Upgrade samba-winbind-krb5-locatorUpgrade samba-docUpgrade samba-domainjoin-guiUpgrade libsmbclientUpgrade samba-pythonUpgrade samba4-winbind-krb5-locatorUpgrade samba4-winbind-clientsUpgrade samba-winbind-clientsUpgrade samba-krb5-printingUpgrade samba-swatUpgrade samba-libsUpgrade samba-common-libsUpgrade samba-winbindUpgrade sambaUpgrade samba4-pythonUpgrade samba-client-libsUpgrade samba-dc-libsUpgrade samba-commonUpgrade libsmbclient-develUpgrade samba4-winbindUpgrade samba4-testUpgrade samba-winbind-modulesUpgrade samba4-dcUpgrade samba-winbind-develUpgrade samba4-libsUpgrade samba-common-toolsUpgrade samba4-develUpgrade samba-debuginfoUpgrade libwbclientUpgrade samba-clientUpgrade samba4-debuginfoUpgrade samba4-clientUpgrade samba-develUpgrade libwbclient-develUpgrade samba-test-libsUpgrade samba-glusterfsUpgrade samba4-pidlUpgrade samba-dcUpgrade samba4Upgrade samba4-commonUpgrade samba4-dc-libsNo solution existsUpgrade samba-testUpgrade samba-vfs-glusterfsUpgrade samba-pidl | Oct 4, 2017 | Sep 21, 2017 |
| Samba | — | Upgrade to Samba version 4.6.8Upgrade to Samba version 4.4.16Upgrade to Samba version 4.5.14 | Sep 29, 2017 | Sep 29, 2017 |
| Suse | — | Upgrade libndr0-32bitUpgrade libdcerpc0Upgrade libsmbldap2Upgrade libdcerpc-atsvc0Upgrade libtdb-develUpgrade libndr-krb5pac0-32bitUpgrade libsamba-errors-develUpgrade libsamba-policy-python3-develUpgrade libndr-nbt-develUpgrade libsamba-passdb0Upgrade libtevent-util0Upgrade samba-kdcUpgrade libgensec0Upgrade ctdbUpgrade libsamba-util0Upgrade libsamba-util-develUpgrade libsmbclient0Upgrade samba-libs-32bitUpgrade samba-x86Upgrade libsamba-hostconfig0-32bitUpgrade libsmbclient-raw0-32bitUpgrade ldapsmbUpgrade samba-client-x86Upgrade libsmbclient0-32bitUpgrade libwbclient0-32bitUpgrade libndr-develUpgrade libsamdb0-32bitUpgrade samba-libs-python3-32bitUpgrade samba-libs-python3Upgrade libndr-standard0Upgrade libdcerpc0-32bitUpgrade libnetapi-develUpgrade libdcerpc-binding0Upgrade libsamba-policy-develUpgrade libnetapi0-32bitUpgrade libsamdb0Upgrade samba-winbind-32bitUpgrade samba-docUpgrade libsamba-credentials0-32bitUpgrade libsamba-errors0Upgrade samba-winbindUpgrade libsmbsharemodes0Upgrade libldb-develUpgrade sambaUpgrade samba-krb-printingUpgrade libtdb1-32bitUpgrade libsamba-credentials-develUpgrade libtalloc2-32bitUpgrade libregistry0Upgrade libndr-nbt0Upgrade samba-core-develUpgrade libsamdb-develUpgrade libtdb1Upgrade libwbclient-develUpgrade libsmbconf-develUpgrade samba-clientUpgrade libdcerpc-samr-develUpgrade libsmbldap0Upgrade samba-pythonUpgrade libsamba-errors0-32bitUpgrade libsamba-passdb0-32bitUpgrade libsmbclient-raw0Upgrade libsamba-util0-32bitUpgrade samba-python3Upgrade libtevent-util-develUpgrade libsamba-policy0-python3Upgrade libwbclient0-x86Upgrade samba-dsdb-modulesUpgrade libndr1Upgrade libndr-standard0-32bitUpgrade libtevent-util0-32bitUpgrade samba-client-32bitUpgrade libsmbclient-develUpgrade libgensec0-32bitUpgrade libdcerpc-develUpgrade libndr-krb5pac-develUpgrade libsmbldap-develUpgrade samba-libsUpgrade libsmbldap0-32bitUpgrade libtevent0-x86Upgrade libsmbldap2-32bitUpgrade samba-develUpgrade libsamba-credentials0Upgrade libsmbconf0Upgrade libnetapi0Upgrade libsmbsharemodes-develUpgrade libldb1Upgrade libtdb1-x86Upgrade libsamba-hostconfig-develUpgrade libndr1-32bitUpgrade libsmbclient0-x86Upgrade libndr-nbt0-32bitUpgrade libtevent0Upgrade samba-cephUpgrade libsamba-hostconfig0Upgrade samba-32bitUpgrade libdcerpc-samr0Upgrade libtalloc-develUpgrade libtalloc2Upgrade samba-testUpgrade samba-test-develUpgrade libsamba-policy0Upgrade libtevent-develUpgrade libwbclient0Upgrade samba-winbind-x86Upgrade libsmbconf0-32bitUpgrade libndr-standard-develUpgrade libsamba-passdb-develUpgrade libndr-krb5pac0Upgrade libndr0Upgrade libdcerpc-binding0-32bitUpgrade libtevent0-32bitUpgrade libtalloc2-x86 | Oct 5, 2017 | Sep 21, 2017 |
| Ubuntu | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub