A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC mode. A man in the middle attacker could use this flaw to intercept the request to the KDC and replace the user name (principal) in the request with any desired user name (principal) that exists in the KDC effectively obtaining a ticket for that principal.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sambaUpgrade heimdal | Jul 31, 2019 | Jul 31, 2019 |
| Apple Osx Heimdal | — | Apply Apple macOS Security Update 2019-004 High Sierra | Jul 23, 2019 | Jul 22, 2019 |
| Debian | — | Upgrade heimdalUpgrade samba | May 15, 2019 | May 15, 2019 |
| Freebsd | — | Upgrade samba47Upgrade samba410Upgrade samba49Upgrade samba48Upgrade samba46 | May 18, 2019 | May 14, 2019 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libwbclientUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-libsUpgrade samba-pythonUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-common-toolsUpgrade sambaUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-client-libs | Nov 3, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-clientUpgrade samba-common-libsUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-libsUpgrade samba-commonUpgrade sambaUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-client-libsUpgrade libwbclient | Sep 28, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libwbclientUpgrade samba-client-libsUpgrade samba-commonUpgrade samba-pythonUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba-clientUpgrade libsmbclientUpgrade samba-libsUpgrade sambaUpgrade samba-winbind-clients | Jun 3, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libwbclientUpgrade ctdb-testsUpgrade sambaUpgrade samba-client-libsUpgrade samba-pidlUpgrade samba-winbindUpgrade python2-samba-testUpgrade samba-krb5-printingUpgrade samba-testUpgrade samba-libsUpgrade python3-sambaUpgrade python2-sambaUpgrade samba-commonUpgrade samba-winbind-krb5-locatorUpgrade ctdbUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-test-libsUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-dc-libsUpgrade python3-samba-testUpgrade samba-common-libsUpgrade samba-common-tools | Jan 3, 2020 | Jul 31, 2019 |
| Samba | — | Upgrade to Samba version 4.10.3Upgrade to Samba version 4.9.8Upgrade to Samba version 4.8.12 | May 24, 2019 | May 24, 2019 |
| Suse | — | Upgrade libndr-develUpgrade samba-winbind-libs-32bitUpgrade libsamba-passdb0-32bitUpgrade libndr-krb5pac0Upgrade libsamba-hostconfig0-32bitUpgrade libwbclient0-32bitUpgrade samba-ldb-ldapUpgrade libsamba-passdb0Upgrade libdcerpc-samr0Upgrade libsamba-util0Upgrade samba-winbind-libsUpgrade samba-gpupdateUpgrade libnetapi0-32bitUpgrade libsamba-credentials0Upgrade libndr-nbt0-32bitUpgrade libndr-standard0-32bitUpgrade libsamdb0-32bitUpgrade libndr-standard0Upgrade libsamdb-develUpgrade libnetapi-develUpgrade samba-client-libsUpgrade samba-client-32bitUpgrade samba-clientUpgrade samba-core-develUpgrade libsamba-errors0Upgrade libsmbconf-develUpgrade samba-client-libs-32bitUpgrade libsmbldap-develUpgrade libsamba-passdb-develUpgrade libwbclient-develUpgrade libndr-krb5pac-develUpgrade libndr0-32bitUpgrade libndr1-32bitUpgrade samba-dsdb-modulesUpgrade libndr-standard-develUpgrade libsamba-hostconfig-develUpgrade libsamba-policy-python3-develUpgrade libdcerpc0Upgrade samba-python3Upgrade samba-libs-python3-32bitUpgrade libdcerpc-binding0-32bitUpgrade libsamba-errors-develUpgrade libndr0Upgrade samba-ad-dc-libsUpgrade libsmbclient-develUpgrade libdcerpc-develUpgrade libsamba-credentials-develUpgrade samba-libsUpgrade libtevent-util-develUpgrade libsamba-hostconfig0Upgrade libsamba-policy0-python3Upgrade libsmbldap2-32bitUpgrade libsmbclient0-32bitUpgrade libsmbconf0-32bitUpgrade libndr-nbt0Upgrade libheimdalUpgrade libnetapi0Upgrade libheimdal-develUpgrade samba-docUpgrade libsmbldap2Upgrade libsamba-util0-32bitUpgrade libtevent-util0Upgrade libndr-krb5pac0-32bitUpgrade libsamba-util-develUpgrade samba-cephUpgrade samba-develUpgrade libsamba-policy-develUpgrade samba-libs-python3Upgrade libdcerpc-samr-develUpgrade libsamdb0Upgrade samba-libs-32bitUpgrade libndr1Upgrade libdcerpc-binding0Upgrade libndr-nbt-develUpgrade libsamba-credentials0-32bitUpgrade libsamba-errors0-32bitUpgrade libsmbconf0Upgrade samba-winbindUpgrade libtevent-util0-32bitUpgrade libsmbclient0Upgrade libwbclient0Upgrade sambaUpgrade libdcerpc0-32bitUpgrade samba-winbind-32bitUpgrade ctdb | Nov 28, 2022 | Jul 31, 2019 |
| Ubuntu | — | Upgrade heimdal-clients (Ubuntu Pro)Upgrade libkrb5-26-heimdal (Ubuntu Pro)Upgrade heimdal-kcmUpgrade heimdal-servers-x (Ubuntu Pro)Upgrade samba (Ubuntu Pro)Upgrade libkdc2-heimdalUpgrade heimdal-servers (Ubuntu Pro)Upgrade heimdal-kdcUpgrade sambaUpgrade heimdal-clients-x (Ubuntu Pro)Upgrade heimdal-serversUpgrade libkdc2-heimdal (Ubuntu Pro)Upgrade heimdal-kcm (Ubuntu Pro)Upgrade libgssapi3-heimdal (Ubuntu Pro)Upgrade libgssapi3-heimdalUpgrade heimdal-clientsUpgrade heimdal-kdc (Ubuntu Pro)Upgrade libkrb5-26-heimdal | May 15, 2019 | May 14, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub