A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects, allowing an attacker to read or alter the contents of the connection via a man-in-the-middle attack.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Jul 27, 2018 | Jul 27, 2018 |
| Amazon_linux | — | Upgrade samba | Oct 13, 2017 | Sep 21, 2017 |
| Centos_linux | — | Upgrade samba-common-libsUpgrade samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade samba-test-libsUpgrade samba-dc-libsUpgrade samba-krb5-printingUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-client-libsUpgrade libsmbclientUpgrade sambaUpgrade samba-winbindUpgrade samba-pidlUpgrade samba-vfs-glusterfsUpgrade libwbclient-develUpgrade libsmbclient-develUpgrade samba-commonUpgrade samba-dcUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-develUpgrade samba-pythonUpgrade samba-debuginfoUpgrade samba-libs | Sep 25, 2017 | Sep 21, 2017 |
| Debian | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
| Hpux | — | Update CIFS-Server to the latest version | Jun 5, 2018 | May 31, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-commonUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade libwbclientUpgrade libsmbclientUpgrade samba-libsUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-pythonUpgrade samba-common-libs | Nov 30, 2017 | Sep 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-commonUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade libwbclientUpgrade samba-pythonUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-winbindUpgrade samba-clientUpgrade libsmbclientUpgrade samba-common-libs | Nov 30, 2017 | Sep 20, 2017 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3 | Nov 30, 2017 | Nov 30, 2017 |
| Oracle_linux | — | Upgrade samba-testUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-krb5-printingUpgrade samba-pidlUpgrade samba-develUpgrade libsmbclient-develUpgrade ctdb-testsUpgrade samba-libsUpgrade sambaUpgrade samba-winbindUpgrade ctdbUpgrade samba-dcUpgrade samba-commonUpgrade samba-test-libsUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade libwbclient-develUpgrade samba-pythonUpgrade samba-common-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade samba-vfs-glusterfsUpgrade samba-common-toolsUpgrade samba-dc-libs | Sep 27, 2017 | Sep 20, 2017 |
| Redhat_linux | — | Upgrade samba-testUpgrade samba-dcUpgrade libwbclientUpgrade samba-vfs-glusterfsUpgrade samba-commonUpgrade samba-krb5-printingUpgrade samba-pidlUpgrade samba-debuginfoNo solution existsUpgrade samba-pythonUpgrade libsmbclient-develUpgrade libsmbclientUpgrade samba-common-libsUpgrade sambaUpgrade samba-test-libsUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade libwbclient-develUpgrade samba-dc-libsUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-winbind-krb5-locatorUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-develUpgrade samba-libs | Oct 4, 2017 | Sep 21, 2017 |
| Samba | — | Upgrade to Samba version 4.5.14Upgrade to Samba version 4.6.8Upgrade to Samba version 4.4.16 | Sep 29, 2017 | Sep 29, 2017 |
| Suse | — | Upgrade libsmbldap0Upgrade sambaUpgrade libndr-standard0Upgrade libndr1-32bitUpgrade libdcerpc-binding0Upgrade libsamba-errors0Upgrade libtevent-util-develUpgrade libsamba-errors0-32bitUpgrade libnetapi0Upgrade samba-libs-python3Upgrade samba-pythonUpgrade samba-winbindUpgrade libsamba-util0Upgrade libsamba-hostconfig-develUpgrade libndr1Upgrade libsamba-hostconfig0Upgrade ctdbUpgrade samba-client-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsmbclient-raw0Upgrade libsmbconf-develUpgrade libgensec0Upgrade libsamdb-develUpgrade samba-docUpgrade libndr-standard-develUpgrade samba-test-develUpgrade libgensec0-32bitUpgrade libsamba-util0-32bitUpgrade samba-winbind-32bitUpgrade libndr0-32bitUpgrade libsmbconf0Upgrade libdcerpc-samr0Upgrade libsmbconf0-32bitUpgrade samba-kdcUpgrade libnetapi-develUpgrade libdcerpc-develUpgrade libsmbldap2Upgrade samba-libs-32bitUpgrade libndr0Upgrade libsamdb0Upgrade libndr-nbt0-32bitUpgrade libsmbldap2-32bitUpgrade libsamba-credentials0-32bitUpgrade libsmbldap0-32bitUpgrade libsamba-errors-develUpgrade libsamba-policy0-python3Upgrade libsmbclient0Upgrade libsmbldap-develUpgrade samba-cephUpgrade libndr-nbt0Upgrade libndr-develUpgrade libsamba-hostconfig0-32bitUpgrade libndr-krb5pac0Upgrade libndr-standard0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libsamba-policy-develUpgrade libwbclient0-32bitUpgrade libsamba-policy0Upgrade libdcerpc-samr-develUpgrade libnetapi0-32bitUpgrade libdcerpc0Upgrade libsamba-credentials-develUpgrade samba-dsdb-modulesUpgrade libndr-krb5pac-develUpgrade libtevent-util0-32bitUpgrade libtevent-util0Upgrade libsamdb0-32bitUpgrade samba-libsUpgrade libsmbclient0-32bitUpgrade libsamba-util-develUpgrade libsamba-policy-python3-develUpgrade libdcerpc0-32bitUpgrade samba-python3Upgrade libsamba-passdb-develUpgrade libdcerpc-atsvc0Upgrade libndr-nbt-develUpgrade libwbclient0Upgrade libwbclient-develUpgrade libsmbclient-develUpgrade samba-core-develUpgrade libsamba-passdb0Upgrade samba-clientUpgrade samba-32bitUpgrade libsamba-credentials0Upgrade libdcerpc-binding0-32bitUpgrade samba-libs-python3-32bitUpgrade libregistry0Upgrade libsamba-passdb0-32bit | Oct 5, 2017 | Sep 21, 2017 |
| Ubuntu | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub