The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the S4U (MS-SFU) Kerberos delegation model includes a feature allowing for a subset of clients to be opted out of constrained delegation in any way, either S4U2Self or regular Kerberos authentication, by forcing all tickets for these clients to be non-forwardable. In AD this is implemented by a user attribute delegation_not_allowed (aka not-delegated), which translates to disallow-forwardable. However the Samba AD DC does not do that for S4U2Self and does set the forwardable flag even if the impersonated client has the not-delegated flag set.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sambaUpgrade heimdal | Mar 26, 2024 | Dec 10, 2019 |
| Debian | — | Upgrade heimdalUpgrade samba | May 31, 2021 | Dec 10, 2019 |
| Freebsd | — | Upgrade samba410Upgrade FreeBSDUpgrade samba48Upgrade samba411 | Aug 31, 2023 | Dec 12, 2019 |
| Gentoo Linux | — | Upgrade app-crypt/heimdal.Upgrade net-fs/samba. | Mar 27, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-clientUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade samba-pythonUpgrade libwbclientUpgrade libsmbclientUpgrade sambaUpgrade samba-winbindUpgrade samba-libs | Nov 3, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-common-libsUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-pythonUpgrade samba-commonUpgrade samba-clientUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba | Sep 28, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-libsUpgrade samba-pythonUpgrade samba-winbindUpgrade samba-clientUpgrade libwbclientUpgrade samba-client-libsUpgrade sambaUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-winbind-clients | Feb 24, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ctdbUpgrade samba-winbindUpgrade samba-commonUpgrade samba-pidlUpgrade python2-sambaUpgrade samba-common-libsUpgrade samba-krb5-printingUpgrade samba-dc-libsUpgrade samba-libsUpgrade python3-sambaUpgrade libwbclientUpgrade sambaUpgrade samba-test-libsUpgrade python3-samba-testUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade ctdb-testsUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-common-toolsUpgrade python2-samba-testUpgrade libsmbclientUpgrade samba-testUpgrade samba-winbind-krb5-locator | Jan 3, 2020 | Dec 10, 2019 |
| Samba | — | Upgrade to Samba 4.11.3 or later.Upgrade to Samba 4.9.17 or later.Upgrade to Samba 4.10.11 or later. | Dec 16, 2019 | Dec 10, 2019 |
| Suse | — | Upgrade libdcerpc0-32bitUpgrade ctdb-testsUpgrade libsamba-policy-develUpgrade libndr-nbt-develUpgrade libsamba-util-develUpgrade libsamba-credentials0Upgrade libsamba-policy0-32bitUpgrade libsamba-credentials-develUpgrade libsamba-policy0Upgrade samba-dsdb-modulesUpgrade libnetapi0-32bitUpgrade libsamba-passdb-develUpgrade libsamdb-develUpgrade libndr-nbt0Upgrade libndr-krb5pac0Upgrade libwbclient0-32bitUpgrade libdcerpc-samr-develUpgrade samba-libsUpgrade libsamba-policy0-python3Upgrade samba-docUpgrade libtevent-util0Upgrade samba-core-develUpgrade samba-libs-python3-32bitUpgrade samba-clientUpgrade libsamba-passdb0Upgrade libdcerpc-binding0-32bitUpgrade samba-python3Upgrade ldb-toolsUpgrade libwbclient0Upgrade libtevent-util0-32bitUpgrade libsamdb0-32bitUpgrade libsmbclient-develUpgrade libsamba-passdb0-32bitUpgrade libsamba-policy-python3-develUpgrade libndr-krb5pac-develUpgrade libndr-standard0-32bitUpgrade libwbclient-develUpgrade samba-ad-dc-32bitUpgrade libsmbclient0-32bitUpgrade libdcerpc0Upgrade libsamba-hostconfig0-32bitUpgrade libndr-nbt0-32bitUpgrade libdcerpc-samr0Upgrade ctdbUpgrade sambaUpgrade libndr-krb5pac0-32bitUpgrade libsamba-credentials0-32bitUpgrade libsamba-hostconfig-develUpgrade libsmbconf0Upgrade python-ldb-develUpgrade libsamba-errors-develUpgrade libndr0-32bitUpgrade libndr-standard0Upgrade libndr0Upgrade libnetapi-develUpgrade samba-libs-python3Upgrade libtevent-util-develUpgrade libsamba-hostconfig0Upgrade samba-ad-dcUpgrade libsamdb0Upgrade python-ldbUpgrade samba-pythonUpgrade samba-pidlUpgrade libndr-develUpgrade libsmbclient0Upgrade libldb1Upgrade libsmbldap2Upgrade libdcerpc-binding0Upgrade libsmbldap-develUpgrade libsamba-policy-python-develUpgrade libndr1-32bitUpgrade libsamba-errors0-32bitUpgrade libsmbldap2-32bitUpgrade ctdb-pcp-pmdaUpgrade samba-libs-python-32bitUpgrade libldb1-32bitUpgrade samba-testUpgrade libsamba-util0Upgrade libndr-standard-develUpgrade samba-client-32bitUpgrade libsamba-errors0Upgrade samba-libs-32bitUpgrade libsamba-policy0-python3-32bitUpgrade samba-cephUpgrade samba-libs-pythonUpgrade libldb-develUpgrade libsmbconf-develUpgrade libndr1Upgrade libdcerpc-samr0-32bitUpgrade libdcerpc-develUpgrade libnetapi0Upgrade samba-winbindUpgrade libsmbconf0-32bitUpgrade libsamba-util0-32bitUpgrade samba-winbind-32bit | Dec 24, 2019 | Dec 10, 2019 |
| Ubuntu | — | Upgrade libsmbclientUpgrade sambaUpgrade samba (Ubuntu Pro)Upgrade libsmbclient (Ubuntu Pro) | Dec 12, 2019 | Dec 10, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub