On a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly validates permissions to modify passwords over LDAP allowing authenticated users to change any other users' passwords, including administrative users and privileged service accounts (eg Domain Controllers).
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 22, 2018 | Mar 13, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 13, 2018 |
| Debian | — | Upgrade Debian to resolve this vulnerability.Upgrade samba | Mar 15, 2018 | Mar 13, 2018 |
| Freebsd | — | Upgrade samba45Upgrade samba44Upgrade samba47Upgrade samba46 | Mar 15, 2018 | Mar 13, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | May 23, 2018 | Mar 13, 2018 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.7.6-0.175.3.32.0.4.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.7.6-0.175.3.32.0.4.0 on Solaris 11.3 | May 16, 2018 | Mar 13, 2018 |
| Samba | — | Upgrade to Samba version 4.5.16Upgrade to Samba version 4.6.14Upgrade to Samba version 4.7.6 | Mar 13, 2018 | Mar 13, 2018 |
| Suse | — | Upgrade samba-cephUpgrade libsamba-passdb0-32bitUpgrade libsmbldap2-32bitUpgrade libsamba-util0-32bitUpgrade libsmbclient-develUpgrade libsamba-hostconfig0Upgrade libndr-standard0-32bitUpgrade libndr-standard-develUpgrade libndr-krb5pac0Upgrade libsamba-passdb0Upgrade libsamba-util-develUpgrade libdcerpc-develUpgrade libwbclient0Upgrade samba-dsdb-modulesUpgrade samba-libsUpgrade libsamba-policy0Upgrade libsmbldap0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libsmbldap-develUpgrade libtevent-util0-32bitUpgrade libndr-krb5pac-develUpgrade libsamba-passdb-develUpgrade samba-client-32bitUpgrade libsamba-credentials0Upgrade samba-python3Upgrade libsamba-policy0-python3Upgrade libtevent-util-develUpgrade libdcerpc-samr0Upgrade libdcerpc0Upgrade samba-libs-32bitUpgrade samba-clientUpgrade samba-winbindUpgrade samba-winbind-32bitUpgrade libsamba-util0Upgrade libndr-nbt-develUpgrade libsamba-errors0Upgrade libsmbldap0Upgrade libsamba-hostconfig0-32bitUpgrade libndr-develUpgrade libsmbconf0-32bitUpgrade libdcerpc-binding0Upgrade libwbclient0-32bitUpgrade libnetapi-develUpgrade libndr-krb5pac0-32bitUpgrade samba-docUpgrade samba-pythonUpgrade libndr-nbt0Upgrade libndr-nbt0-32bitUpgrade ctdbUpgrade libndr0-32bitUpgrade libsmbclient0-32bitUpgrade samba-libs-python3Upgrade libdcerpc-samr-develUpgrade libsmbclient0Upgrade samba-kdcUpgrade libnetapi0Upgrade libsamdb-develUpgrade libsamba-errors0-32bitUpgrade samba-core-develUpgrade libsamba-errors-develUpgrade libdcerpc0-32bitUpgrade libndr1Upgrade libndr1-32bitUpgrade libndr0Upgrade sambaUpgrade libnetapi0-32bitUpgrade libsamba-policy-develUpgrade libsmbconf0Upgrade libsamba-credentials-develUpgrade libsamba-credentials0-32bitUpgrade libtevent-util0Upgrade libsmbconf-develUpgrade libsamdb0Upgrade libsmbldap2Upgrade libsamba-policy-python3-develUpgrade libsamba-hostconfig-develUpgrade samba-libs-python3-32bitUpgrade libndr-standard0Upgrade libwbclient-develUpgrade libsamdb0-32bit | May 19, 2018 | Mar 13, 2018 |
| Ubuntu | — | Upgrade sambaUpgrade samba-dsdb-modules | Apr 25, 2018 | Mar 13, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub