It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
- CVSS 3.0 Base Score: 6.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Oct 31, 2018 | Oct 31, 2018 |
| Amazon_linux | — | Upgrade samba | May 31, 2017 | Dec 19, 2016 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 31, 2018 |
| Centos_linux | — | Upgrade samba-test-libsUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba4-winbind-clientsUpgrade samba-dc-libsUpgrade samba-common-toolsUpgrade samba4-testUpgrade samba4-dc-libsUpgrade samba-winbind-krb5-locatorUpgrade libwbclient-develUpgrade samba-docUpgrade sambaUpgrade samba-develUpgrade samba-vfs-glusterfsUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-libsUpgrade samba-krb5-printingUpgrade samba-winbindUpgrade samba4-debuginfoUpgrade libwbclientUpgrade samba4-dcUpgrade samba-dcUpgrade samba-swatUpgrade samba-winbind-develUpgrade samba4-pidlUpgrade samba4Upgrade libsmbclient-develUpgrade samba4-commonUpgrade samba-client-libsUpgrade samba4-pythonUpgrade samba4-develUpgrade samba4-libsUpgrade samba-pidlUpgrade samba-domainjoin-guiUpgrade samba4-winbind-krb5-locatorUpgrade samba-pythonUpgrade samba-debuginfoUpgrade samba-testUpgrade samba4-winbindUpgrade samba-winbind-clientsUpgrade samba-glusterfsUpgrade samba-commonUpgrade samba4-client | May 24, 2017 | Dec 19, 2016 |
| Debian | — | Upgrade samba | Dec 20, 2016 | Dec 19, 2016 |
| Freebsd | — | Upgrade samba42Upgrade samba4Upgrade samba44Upgrade samba45Upgrade samba43Upgrade samba36Upgrade samba41 | Dec 28, 2016 | Dec 26, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-winbindUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-common-toolsUpgrade samba-libsUpgrade samba-pythonUpgrade samba-client-libsUpgrade libwbclient | Aug 28, 2019 | Oct 31, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-libsUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-libsUpgrade samba-client-libsUpgrade samba-common-toolsUpgrade sambaUpgrade libwbclientUpgrade samba-pythonUpgrade samba-clientUpgrade samba-winbind | Aug 28, 2019 | Oct 31, 2018 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.8-0.175.3.17.0.3.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.8-0.175.3.17.0.3.0 on Solaris 11.3 | May 29, 2017 | May 29, 2017 |
| Oracle_linux | — | Upgrade samba4-winbind-clientsUpgrade samba4-pidlUpgrade samba4-clientUpgrade samba-client-libsUpgrade samba-winbind-develUpgrade libwbclientUpgrade samba-pidlUpgrade samba-krb5-printingUpgrade samba-glusterfsUpgrade ctdbUpgrade samba4-commonUpgrade samba4-dcUpgrade samba-test-libsUpgrade samba-testUpgrade samba-vfs-glusterfsUpgrade samba-dcUpgrade samba4-pythonUpgrade samba4-dc-libsUpgrade samba4Upgrade libwbclient-develUpgrade samba-winbind-clientsUpgrade samba4-testUpgrade samba-dc-libsUpgrade samba-common-libsUpgrade samba4-develUpgrade samba-clientUpgrade samba4-winbind-krb5-locatorUpgrade libsmbclient-develUpgrade samba4-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-develUpgrade samba-docUpgrade samba-winbind-modulesUpgrade samba-swatUpgrade samba-common-toolsUpgrade samba-winbindUpgrade sambaUpgrade libsmbclientUpgrade ctdb-testsUpgrade samba-commonUpgrade samba-pythonUpgrade samba-domainjoin-guiUpgrade samba4-winbindUpgrade samba-libs | Mar 28, 2017 | Dec 19, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.1R14Update Pulse Connect Secure to version 9.0R1Update Pulse Connect Secure to version 8.2R11Update Pulse Connect Secure to version 8.3R5 | Oct 28, 2020 | Oct 31, 2018 |
| Redhat_linux | — | Upgrade samba4-develUpgrade samba-winbind-modulesUpgrade libwbclient-develUpgrade samba-client-libsUpgrade samba4-libsUpgrade samba-common-toolsUpgrade ctdb-testsUpgrade libwbclientUpgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba4-commonUpgrade samba-glusterfsUpgrade samba4-winbind-krb5-locatorUpgrade samba4-testUpgrade samba-swatUpgrade samba-winbindUpgrade samba-vfs-glusterfsUpgrade samba-clientUpgrade ctdbUpgrade libsmbclient-develUpgrade samba-dcUpgrade samba4-debuginfoUpgrade samba-docUpgrade samba4-clientUpgrade samba-common-libsUpgrade samba4-pidlNo solution existsUpgrade samba-krb5-printingUpgrade samba-domainjoin-guiUpgrade samba4Upgrade samba-debuginfoUpgrade samba4-dc-libsUpgrade samba-winbind-clientsUpgrade samba4-pythonUpgrade samba-testUpgrade samba4-winbindUpgrade samba-dc-libsUpgrade samba-pythonUpgrade samba-commonUpgrade samba4-dcUpgrade samba-develUpgrade samba-pidlUpgrade samba-libsUpgrade samba-winbind-develUpgrade samba4-winbind-clientsUpgrade samba-test-libsUpgrade samba | Mar 21, 2017 | Dec 19, 2016 |
| Samba | — | Upgrade to Samba version 4.5.3Upgrade to Samba version 4.3.13Upgrade to Samba version 4.4.8 | Dec 20, 2016 | Dec 20, 2016 |
| Suse | — | Upgrade libsmbconf0-debuginfo-32bitUpgrade libsamba-passdb0Upgrade libdcerpc-samr0Upgrade libsmbclient0-debuginfoUpgrade libgensec0-32bitUpgrade libwbclient0-x86Upgrade samba-test-debuginfoUpgrade libsamba-hostconfig0Upgrade libnetapi0-debuginfo-32bitUpgrade libndr-standard0-32bitUpgrade samba-libsUpgrade libtevent-util0-debuginfoUpgrade libsamba-policy0-32bitUpgrade libndr0Upgrade libsmbldap0-debuginfoUpgrade libregistry0-32bitUpgrade libsmbconf0Upgrade libsmbclient-raw0-debuginfoUpgrade libtevent0-x86Upgrade libndr0-debuginfo-32bitUpgrade libgensec-develUpgrade libsmbclient-develUpgrade libtalloc-develUpgrade libsamba-policy0-debuginfoUpgrade samba-python-debuginfoUpgrade libsamdb0-debuginfo-32bitUpgrade libsmbclient0-debuginfo-32bitUpgrade libdcerpc-samr0-debuginfo-32bitUpgrade libndr-nbt0-debuginfoUpgrade libsamba-passdb0-32bitUpgrade libtevent0-32bitUpgrade libndr-standard-develUpgrade libsamba-util0-debuginfo-32bitUpgrade samba-develUpgrade libtevent-util0-32bitUpgrade libsamba-errors0-debuginfo-32bitUpgrade samba-debuginfoUpgrade samba-dsdb-modulesUpgrade libsamba-credentials0Upgrade libsmbldap2-32bitUpgrade libsmbldap-develUpgrade libsmbclient-raw0Upgrade samba-libs-debuginfoUpgrade libtdb1-x86Upgrade samba-testUpgrade libsamba-hostconfig0-debuginfo-32bitUpgrade libndr-standard0-debuginfo-32bitUpgrade libsamdb0-32bitUpgrade ctdb-testsUpgrade samba-test-develUpgrade libsmbclient0-x86Upgrade libsmbsharemodes-develUpgrade libsamba-hostconfig-develUpgrade libsamba-policy0Upgrade libtevent-develUpgrade libtevent0Upgrade libtalloc2-x86Upgrade libdcerpc-binding0-debuginfoUpgrade samba-winbind-debuginfo-32bitUpgrade libsamba-passdb0-debuginfo-32bitUpgrade libnetapi0-debuginfoUpgrade libdcerpc0-debuginfo-32bitUpgrade samba-winbind-x86Upgrade libdcerpc-binding0-32bitUpgrade libndr-standard0-debuginfoUpgrade libtalloc2Upgrade libsamba-credentials0-debuginfo-32bitUpgrade samba-kdcUpgrade libsmbconf0-32bitUpgrade samba-32bitUpgrade libsamba-passdb-develUpgrade samba-libs-debuginfo-32bitUpgrade libregistry0-debuginfoUpgrade samba-pidlUpgrade libndr-nbt0-32bitUpgrade libdcerpc-atsvc-develUpgrade libndr0-debuginfoUpgrade libtevent-util-develUpgrade samba-client-x86Upgrade libsmbldap0-debuginfo-32bitUpgrade samba-client-debuginfo-32bitUpgrade libnetapi0Upgrade libwbclient0Upgrade libsamdb-develUpgrade samba-debuginfo-32bitUpgrade libldb1Upgrade libsamba-util0-32bitUpgrade libdcerpc-atsvc0-debuginfoUpgrade libsmbclient-raw-develUpgrade ctdb-tests-debuginfoUpgrade samba-client-32bitUpgrade libdcerpc-develUpgrade samba-core-develUpgrade samba-libs-python3Upgrade libsamba-util0Upgrade libsamba-policy0-debuginfo-32bitUpgrade libndr-krb5pac0Upgrade libndr-nbt0Upgrade samba-winbindUpgrade libgensec0-debuginfoUpgrade libwbclient-develUpgrade libregistry0Upgrade libsmbconf0-debuginfoUpgrade ctdb-debuginfoUpgrade libwbclient0-32bitUpgrade libsamba-util0-debuginfoUpgrade libndr-krb5pac-develUpgrade libsmbldap2Upgrade samba-debugsourceUpgrade libdcerpc-atsvc0-32bitUpgrade samba-libs-python3-32bitUpgrade libregistry0-debuginfo-32bitUpgrade libndr-nbt0-debuginfo-32bitUpgrade samba-pythonUpgrade libdcerpc-samr-develUpgrade libregistry-develUpgrade libsamba-errors0Upgrade libdcerpc0-debuginfoUpgrade libndr-krb5pac0-debuginfoUpgrade libsamba-credentials0-32bitUpgrade samba-winbind-32bitUpgrade ldapsmbUpgrade samba-krb-printingUpgrade libsmbclient0Upgrade libsamba-util-develUpgrade sambaUpgrade libgensec0Upgrade libwbclient0-debuginfoUpgrade libsmbclient0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libdcerpc-binding0Upgrade libtdb-develUpgrade libtevent-util0-debuginfo-32bitUpgrade libsamba-errors0-debuginfoUpgrade libsamba-passdb0-debuginfoUpgrade libsmbsharemodes0Upgrade samba-x86Upgrade libdcerpc-samr0-debuginfoUpgrade samba-clientUpgrade libndr0-32bitUpgrade samba-winbind-debuginfoUpgrade libnetapi-develUpgrade libsamba-errors0-32bitUpgrade libsamba-credentials-develUpgrade libndr-krb5pac0-debuginfo-32bitUpgrade libdcerpc-atsvc0-debuginfo-32bitUpgrade libdcerpc0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsmbclient-raw0-debuginfo-32bitUpgrade libsamdb0-debuginfoUpgrade libnetapi0-32bitUpgrade libdcerpc-binding0-debuginfo-32bitUpgrade samba-client-debuginfoUpgrade ctdbUpgrade libldb-develUpgrade libsmbconf-develUpgrade libgensec0-debuginfo-32bitUpgrade libndr-develUpgrade libwbclient0-debuginfo-32bitUpgrade libsamba-errors-develUpgrade libsamdb0Upgrade libndr-standard0Upgrade libdcerpc0Upgrade libdcerpc-samr0-32bitUpgrade libtevent-util0Upgrade libsamba-credentials0-debuginfoUpgrade libsamba-hostconfig0-debuginfoUpgrade libsmbldap0-32bitUpgrade ctdb-develUpgrade libsamba-policy-develUpgrade libtdb1-32bitUpgrade samba-docUpgrade libtdb1Upgrade samba-libs-32bitUpgrade libtalloc2-32bitUpgrade libdcerpc-atsvc0Upgrade libndr-nbt-develUpgrade libsmbldap0 | Dec 28, 2016 | Dec 19, 2016 |
| Ubuntu | — | Upgrade sambaUpgrade winbindUpgrade libsmbclient | Dec 20, 2016 | Dec 19, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub