A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects, allowing an attacker to read or alter the contents of the connection via a man-in-the-middle attack.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Jul 27, 2018 | Jul 27, 2018 |
| Amazon_linux | — | Upgrade samba | Oct 13, 2017 | Sep 21, 2017 |
| Centos_linux | — | Upgrade libwbclientUpgrade samba-test-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-dc-libsUpgrade samba-common-libsUpgrade samba-testUpgrade samba-common-toolsUpgrade samba-krb5-printingUpgrade samba-clientUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade sambaUpgrade libwbclient-develUpgrade samba-commonUpgrade libsmbclient-develUpgrade samba-dcUpgrade samba-develUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-debuginfoUpgrade samba-winbindUpgrade samba-pidlUpgrade samba-vfs-glusterfs | Sep 25, 2017 | Sep 21, 2017 |
| Debian | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
| Hpux | — | Update CIFS-Server to the latest version | Jun 5, 2018 | May 31, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libwbclientUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-libsUpgrade samba-common-libsUpgrade samba-pythonUpgrade samba-client-libsUpgrade libsmbclientUpgrade sambaUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-common | Nov 30, 2017 | Sep 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-winbind-clientsUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade libwbclientUpgrade samba-libsUpgrade sambaUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-common-libs | Nov 30, 2017 | Sep 20, 2017 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3 | Nov 30, 2017 | Nov 30, 2017 |
| Oracle_linux | — | Upgrade samba-commonUpgrade samba-common-toolsUpgrade samba-dc-libsUpgrade sambaUpgrade libwbclient-develUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-pythonUpgrade ctdbUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba-dcUpgrade samba-clientUpgrade samba-vfs-glusterfsUpgrade samba-libsUpgrade ctdb-testsUpgrade samba-pidlUpgrade samba-testUpgrade libwbclientUpgrade libsmbclient-develUpgrade samba-develUpgrade samba-krb5-printingUpgrade samba-client-libs | Sep 27, 2017 | Sep 20, 2017 |
| Redhat_linux | — | Upgrade samba-commonNo solution existsUpgrade samba-dcUpgrade samba-debuginfoUpgrade libwbclientUpgrade samba-vfs-glusterfsUpgrade samba-testUpgrade samba-pidlUpgrade samba-krb5-printingUpgrade sambaUpgrade samba-client-libsUpgrade samba-develUpgrade samba-winbindUpgrade libsmbclient-develUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-dc-libsUpgrade samba-common-toolsUpgrade samba-test-libsUpgrade samba-clientUpgrade samba-libsUpgrade libwbclient-devel | Oct 4, 2017 | Sep 21, 2017 |
| Samba | — | Upgrade to Samba version 4.6.8Upgrade to Samba version 4.4.16Upgrade to Samba version 4.5.14 | Sep 29, 2017 | Sep 29, 2017 |
| Suse | — | Upgrade libsamba-hostconfig0-32bitUpgrade samba-core-develUpgrade libndr-krb5pac-develUpgrade libdcerpc-binding0-32bitUpgrade libwbclient-develUpgrade samba-32bitUpgrade libsamba-passdb0Upgrade libndr-nbt-develUpgrade samba-clientUpgrade libsmbclient-develUpgrade libsamba-credentials-develUpgrade libsamba-credentials0Upgrade libdcerpc0Upgrade libsamba-policy-python3-develUpgrade libwbclient0Upgrade samba-dsdb-modulesUpgrade samba-python3Upgrade samba-libs-python3-32bitUpgrade libnetapi0-32bitUpgrade libsamba-util-develUpgrade libsamba-policy-develUpgrade libndr-standard0-32bitUpgrade samba-libsUpgrade libsmbclient-raw0-32bitUpgrade libsamdb0-32bitUpgrade libsmbclient0-32bitUpgrade libtevent-util0-32bitUpgrade libndr-krb5pac0Upgrade libwbclient0-32bitUpgrade libtevent-util0Upgrade libdcerpc0-32bitUpgrade libregistry0Upgrade libsamba-passdb-develUpgrade libdcerpc-samr-develUpgrade libsamba-passdb0-32bitUpgrade libdcerpc-atsvc0Upgrade libsamba-policy0Upgrade samba-client-32bitUpgrade libsamba-util0Upgrade libndr-develUpgrade samba-pythonUpgrade libndr-nbt0Upgrade ctdbUpgrade libndr1Upgrade libsmbldap0Upgrade libndr-standard0Upgrade samba-libs-python3Upgrade samba-winbindUpgrade libsmbconf0Upgrade libsamba-errors0Upgrade samba-cephUpgrade samba-test-develUpgrade libsamba-credentials0-32bitUpgrade libsamdb-develUpgrade samba-docUpgrade libsmbconf-develUpgrade samba-winbind-32bitUpgrade libnetapi-develUpgrade samba-kdcUpgrade libsamba-hostconfig0Upgrade libsmbldap2Upgrade samba-libs-32bitUpgrade libsmbldap0-32bitUpgrade libsmbclient-raw0Upgrade libndr0Upgrade libgensec0-32bitUpgrade libdcerpc-binding0Upgrade libsmbldap2-32bitUpgrade libsmbldap-develUpgrade libsamdb0Upgrade libsamba-hostconfig-develUpgrade libndr-krb5pac0-32bitUpgrade libtevent-util-develUpgrade libndr-nbt0-32bitUpgrade libsmbconf0-32bitUpgrade libndr1-32bitUpgrade libsamba-errors0-32bitUpgrade libdcerpc-samr0Upgrade libsamba-policy0-python3Upgrade libndr0-32bitUpgrade libsamba-util0-32bitUpgrade libgensec0Upgrade libnetapi0Upgrade libndr-standard-develUpgrade sambaUpgrade libsmbclient0Upgrade libsamba-errors-develUpgrade libdcerpc-devel | Oct 5, 2017 | Sep 21, 2017 |
| Ubuntu | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub