Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is built in the non-default MIT Kerberos configuration. With this advisory the Samba Team clarify that the MIT Kerberos build of the Samba AD DC is considered experimental. Therefore the Samba Team will not issue security patches for this configuration. Additionally, Samba 4.7.12, 4.8.7 and 4.9.3 have been issued as security releases to prevent building of the AD DC with MIT Kerberos unless --with-experimental-mit-ad-dc is specified to the configure command.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Nov 28, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 28, 2018 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Nov 28, 2018 |
| Freebsd | — | Upgrade samba46Upgrade samba49Upgrade samba47Upgrade samba48 | Nov 28, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Nov 28, 2018 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4Upgrade service/network/samba to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Nov 28, 2018 |
| Samba | — | Upgrade to Samba version 4.7.12Upgrade to Samba version 4.8.7Upgrade to Samba version 4.9.3 | Dec 4, 2018 | Nov 28, 2018 |
| Suse | — | Upgrade libsamba-hostconfig-develUpgrade samba-cephUpgrade libsmbclient-develUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-passdb0-32bitUpgrade libndr-nbt0Upgrade libsmbconf0Upgrade libsamba-util-develUpgrade libndr0-32bitUpgrade samba-core-develUpgrade samba-winbind-32bitUpgrade libwbclient-develUpgrade libndr1Upgrade libwbclient0Upgrade libtevent-util-develUpgrade libndr-standard0-32bitUpgrade libsmbldap2-32bitUpgrade libsamba-hostconfig0Upgrade samba-dsdb-modulesUpgrade samba-pythonUpgrade libndr0Upgrade samba-libs-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsmbconf-develUpgrade libnetapi-develUpgrade libsamba-errors0Upgrade libsamba-policy0Upgrade libtevent-util0Upgrade libsamba-errors-develUpgrade libnetapi0Upgrade libsamba-util0-32bitUpgrade libsmbconf0-32bitUpgrade samba-docUpgrade ctdbUpgrade libdcerpc-binding0Upgrade samba-winbindUpgrade samba-libs-python3Upgrade samba-libsUpgrade libdcerpc-samr0Upgrade libsmbldap-develUpgrade libtevent-util0-32bitUpgrade libsamdb0Upgrade libdcerpc-develUpgrade sambaUpgrade libsamba-policy0-python3Upgrade libsamba-policy-develUpgrade libsamdb0-32bitUpgrade libsamba-policy-python3-develUpgrade libsamdb-develUpgrade libsamba-passdb-develUpgrade libndr-develUpgrade samba-client-32bitUpgrade samba-clientUpgrade libsamba-util0Upgrade libdcerpc-samr-develUpgrade libndr-standard0Upgrade libsmbclient0-32bitUpgrade libndr1-32bitUpgrade libdcerpc0-32bitUpgrade libndr-nbt-develUpgrade libdcerpc-binding0-32bitUpgrade libnetapi0-32bitUpgrade libwbclient0-32bitUpgrade libndr-nbt0-32bitUpgrade libndr-krb5pac0Upgrade samba-libs-python3-32bitUpgrade libsamba-passdb0Upgrade libsamba-errors0-32bitUpgrade libsamba-credentials0-32bitUpgrade libsamba-credentials-develUpgrade libsmbldap2Upgrade libsamba-credentials0Upgrade libndr-krb5pac-develUpgrade libsmbclient0Upgrade libndr-standard-develUpgrade libdcerpc0Upgrade samba-python3 | Dec 19, 2019 | Aug 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub