Samba from version 4.9.0 and before version 4.9.3 that have AD DC configurations watching for bad passwords (to restrict brute forcing of passwords) in a window of more than 3 minutes may not watch for bad passwords at all. The primary risk from this issue is with regards to domains that have been upgraded from Samba 4.8 and earlier. In these cases the manual testing done to confirm an organisation's password policies apply as expected may not have been re-done after the upgrade.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 28, 2018 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Nov 28, 2018 |
| Freebsd | — | Upgrade samba48Upgrade samba46Upgrade samba47Upgrade samba49 | Nov 28, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Nov 28, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-sambaUpgrade python3-samba-testUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-clientUpgrade ctdb-testsUpgrade python3-sambaUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade python2-samba-testUpgrade samba-krb5-printingUpgrade samba-winbindUpgrade samba-dc-libsUpgrade samba-test-libsUpgrade samba-winbind-modulesUpgrade ctdbUpgrade samba-winbind-clientsUpgrade samba-testUpgrade sambaUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-pidl | Nov 19, 2019 | Nov 28, 2018 |
| Samba | — | Upgrade to Samba version 4.9.3 | Dec 4, 2018 | Nov 28, 2018 |
| Suse | — | Upgrade libsamba-hostconfig0Upgrade samba-dsdb-modulesUpgrade libsamba-policy0-python3Upgrade libndr-standard-develUpgrade libsmbldap2-32bitUpgrade libsamba-passdb0Upgrade libtevent-util-develUpgrade libsmbldap-develUpgrade samba-client-32bitUpgrade libnetapi0-32bitUpgrade libndr-standard0-32bitUpgrade libdcerpc-samr0Upgrade libtevent-util0Upgrade libndr-krb5pac0Upgrade samba-libsUpgrade libsamba-passdb-develUpgrade samba-libs-32bitUpgrade libsamba-passdb0-32bitUpgrade libwbclient0Upgrade libsmbclient-develUpgrade libsamba-util0-32bitUpgrade libtevent-util0-32bitUpgrade samba-python3Upgrade libdcerpc-develUpgrade libdcerpc0Upgrade libndr-krb5pac-develUpgrade libsamba-util-develUpgrade libsamba-credentials0Upgrade libsamdb0Upgrade libsamba-util0Upgrade libndr-standard0Upgrade libsmbclient0-32bitUpgrade libsamba-credentials-develUpgrade libwbclient0-32bitUpgrade libsamba-errors0Upgrade samba-winbindUpgrade libsamdb-develUpgrade libndr-nbt0-32bitUpgrade samba-libs-python3-32bitUpgrade libsamba-policy-develUpgrade libndr0Upgrade sambaUpgrade libnetapi-develUpgrade libndr-develUpgrade libndr-nbt-develUpgrade libsmbldap2Upgrade libdcerpc-samr-develUpgrade libndr-nbt0Upgrade libsmbclient0Upgrade libsamba-hostconfig0-32bitUpgrade libndr0-32bitUpgrade libsamba-hostconfig-develUpgrade libsamba-credentials0-32bitUpgrade libsamdb0-32bitUpgrade samba-cephUpgrade libsamba-errors-develUpgrade libsamba-errors0-32bitUpgrade libnetapi0Upgrade libdcerpc-binding0Upgrade samba-docUpgrade libndr-krb5pac0-32bitUpgrade libsmbconf-develUpgrade libdcerpc0-32bitUpgrade samba-core-develUpgrade samba-winbind-32bitUpgrade libwbclient-develUpgrade samba-libs-python3Upgrade libdcerpc-binding0-32bitUpgrade libndr1Upgrade libsmbconf0Upgrade libsamba-policy-python3-develUpgrade ctdbUpgrade libndr1-32bitUpgrade libsmbconf0-32bitUpgrade samba-client | Dec 19, 2019 | Aug 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub