All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the S4U (MS-SFU) Kerberos delegation model includes a feature allowing for a subset of clients to be opted out of constrained delegation in any way, either S4U2Self or regular Kerberos authentication, by forcing all tickets for these clients to be non-forwardable. In AD this is implemented by a user attribute delegation_not_allowed (aka not-delegated), which translates to disallow-forwardable. However the Samba AD DC does not do that for S4U2Self and does set the forwardable flag even if the impersonated client has the not-delegated flag set.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sambaUpgrade heimdal | Mar 26, 2024 | Dec 10, 2019 |
| Debian | — | Upgrade heimdalUpgrade samba | May 31, 2021 | Dec 10, 2019 |
| Freebsd | — | Upgrade samba48Upgrade samba411Upgrade samba410Upgrade FreeBSD | Aug 31, 2023 | Dec 12, 2019 |
| Gentoo Linux | — | Upgrade app-crypt/heimdal.Upgrade net-fs/samba. | Mar 27, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-libsUpgrade samba-pythonUpgrade libsmbclientUpgrade libwbclientUpgrade sambaUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-commonUpgrade samba-winbind-clients | Nov 3, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sambaUpgrade samba-commonUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-libsUpgrade libwbclientUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-pythonUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-winbind-clients | Sep 28, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade libsmbclientUpgrade sambaUpgrade samba-libsUpgrade libwbclientUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-winbindUpgrade samba-common-tools | Feb 24, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-samba-testUpgrade samba-client-libsUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade python2-samba-testUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade ctdb-testsUpgrade samba-testUpgrade samba-winbind-clientsUpgrade python2-sambaUpgrade ctdbUpgrade samba-commonUpgrade samba-pidlUpgrade samba-krb5-printingUpgrade libwbclientUpgrade samba-libsUpgrade sambaUpgrade samba-test-libsUpgrade samba-dc-libsUpgrade python3-sambaUpgrade samba-common-libsUpgrade samba-winbind | Jan 3, 2020 | Dec 10, 2019 |
| Samba | — | Upgrade to Samba 4.10.11 or later.Upgrade to Samba 4.9.17 or later.Upgrade to Samba 4.11.3 or later. | Dec 16, 2019 | Dec 10, 2019 |
| Suse | — | Upgrade libdcerpc-samr-develUpgrade libsmbclient-develUpgrade libsamba-passdb-develUpgrade libwbclient-develUpgrade libsamdb0-32bitUpgrade libsamba-passdb0Upgrade libsamba-policy0Upgrade libdcerpc0Upgrade libsmbclient0-32bitUpgrade libsamba-policy0-32bitUpgrade libdcerpc0-32bitUpgrade samba-libs-python3-32bitUpgrade libsamba-credentials0Upgrade samba-ad-dc-32bitUpgrade libsamdb-develUpgrade libndr-krb5pac-develUpgrade samba-docUpgrade samba-core-develUpgrade ldb-toolsUpgrade libndr-nbt0Upgrade libndr-standard0-32bitUpgrade libsamba-policy0-python3Upgrade libtevent-util0-32bitUpgrade libsamba-credentials-develUpgrade libsamba-policy-python3-develUpgrade samba-dsdb-modulesUpgrade libtevent-util0Upgrade libwbclient0Upgrade samba-clientUpgrade libndr-krb5pac0Upgrade samba-libsUpgrade ctdb-testsUpgrade libsamba-policy-develUpgrade libndr-nbt-develUpgrade libsamba-util-develUpgrade samba-python3Upgrade libsamba-passdb0-32bitUpgrade libwbclient0-32bitUpgrade libnetapi0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libsmbldap2-32bitUpgrade samba-libs-pythonUpgrade libsmbldap2Upgrade libsamba-hostconfig0-32bitUpgrade libnetapi0Upgrade libdcerpc-samr0Upgrade libsmbconf-develUpgrade libdcerpc-develUpgrade libldb1-32bitUpgrade samba-libs-python3Upgrade libldb1Upgrade libsmbclient0Upgrade python-ldbUpgrade libndr1-32bitUpgrade libndr-standard-develUpgrade samba-testUpgrade ctdb-pcp-pmdaUpgrade libsamba-util0Upgrade samba-libs-python-32bitUpgrade libndr1Upgrade libsamdb0Upgrade samba-pidlUpgrade libsamba-hostconfig0Upgrade libndr-develUpgrade libsamba-errors-develUpgrade python-ldb-develUpgrade libndr-nbt0-32bitUpgrade libndr-standard0Upgrade libsamba-hostconfig-develUpgrade libsmbconf0Upgrade libndr0-32bitUpgrade libsamba-util0-32bitUpgrade ctdbUpgrade libldb-develUpgrade samba-ad-dcUpgrade libtevent-util-develUpgrade samba-libs-32bitUpgrade libsmbldap-develUpgrade libdcerpc-binding0Upgrade libsamba-policy-python-develUpgrade libsamba-policy0-python3-32bitUpgrade libnetapi-develUpgrade libsamba-errors0-32bitUpgrade libsamba-errors0Upgrade samba-cephUpgrade libndr0Upgrade samba-winbind-32bitUpgrade sambaUpgrade libsmbconf0-32bitUpgrade samba-client-32bitUpgrade libsamba-credentials0-32bitUpgrade samba-pythonUpgrade libndr-krb5pac0-32bitUpgrade samba-winbindUpgrade libdcerpc-samr0-32bit | Dec 24, 2019 | Dec 10, 2019 |
| Ubuntu | — | Upgrade sambaUpgrade libsmbclientUpgrade samba (Ubuntu Pro)Upgrade libsmbclient (Ubuntu Pro) | Dec 12, 2019 | Dec 10, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub