Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 (1) SAMR or (2) RAP attempts.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade samba4Upgrade samba4-winbind-clientsUpgrade samba4-libsUpgrade samba3x-swatUpgrade samba3x-docUpgrade samba4-develUpgrade samba3x-winbindUpgrade samba4-clientUpgrade samba4-pidlUpgrade libsmbclient-develUpgrade samba3xUpgrade samba4-winbindUpgrade samba-domainjoin-guiUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade samba4-pythonUpgrade samba-docUpgrade samba3x-winbind-develUpgrade samba4-swatUpgrade samba4-winbind-krb5-locatorUpgrade samba3x-domainjoin-guiUpgrade samba-swatUpgrade samba4-dcUpgrade samba4-testUpgrade samba4-commonUpgrade samba3x-clientUpgrade samba-clientUpgrade samba3x-commonUpgrade samba-winbind-develUpgrade samba-winbindUpgrade sambaUpgrade samba-commonUpgrade samba4-dc-libs | Dec 1, 2016 | Mar 14, 2014 |
| Debian | — | Upgrade sambaUpgrade samba4 | Jul 30, 2024 | Mar 14, 2014 |
| Freebsd | — | Upgrade samba35Upgrade samba36Upgrade samba41Upgrade samba34Upgrade samba4 | Dec 10, 2025 | Mar 11, 2014 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Mar 14, 2014 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.6.23-0.175.1.18.0.4.0 on Solaris 11.1 | May 29, 2017 | Mar 14, 2014 |
| Oracle_linux | — | Upgrade samba3x-swatUpgrade samba4-winbind-krb5-locatorUpgrade samba-swatUpgrade samba3x-commonUpgrade samba3x-winbindUpgrade samba4-testUpgrade samba3xUpgrade samba3x-winbind-develUpgrade libsmbclientUpgrade samba4-commonUpgrade samba3x-docUpgrade samba4-dc-libsUpgrade samba4-swatUpgrade samba-winbind-clientsUpgrade samba4-develUpgrade samba3x-domainjoin-guiUpgrade samba3x-clientUpgrade samba-winbind-krb5-locatorUpgrade samba4-winbindUpgrade sambaUpgrade samba-winbindUpgrade samba-domainjoin-guiUpgrade samba4-libsUpgrade samba4-clientUpgrade samba4-pidlUpgrade samba4-pythonUpgrade libsmbclient-develUpgrade samba4-winbind-clientsUpgrade samba-commonUpgrade samba-winbind-develUpgrade samba-clientUpgrade samba4Upgrade samba-docUpgrade samba4-dc | Jun 26, 2018 | Mar 14, 2014 |
| Samba | — | Upgrade to Samba version 4.1.6Upgrade to Samba version 3.6.23Upgrade to Samba version 4.0.16 | Mar 17, 2014 | Mar 17, 2014 |
| Suse | — | Upgrade libregistry0-32bitUpgrade libsmbclient-develUpgrade libtdb-develUpgrade samba-pidlUpgrade libndr-standard-develUpgrade libndr-nbt0Upgrade libtevent0-32bitUpgrade sambaUpgrade libsmbldap-develUpgrade samba-develUpgrade libsmbldap0-32bitUpgrade libgensec0-32bitUpgrade libsamba-credentials0Upgrade libndr0Upgrade libndr-krb5pac0-32bitUpgrade libdcerpc-atsvc0-32bitUpgrade libtalloc2-x86Upgrade samba-pythonUpgrade libsmbconf0Upgrade samba-testUpgrade libsamba-credentials-develUpgrade libdcerpc-develUpgrade libldb1-32bitUpgrade libsamba-hostconfig0Upgrade samba-winbind-32bitUpgrade libsamba-util0-32bitUpgrade libpdb0-32bitUpgrade libsamba-util0Upgrade libdcerpc-samr0-32bitUpgrade libsamdb-develUpgrade libgensec0Upgrade libsmbclient0Upgrade libndr-standard0Upgrade samba-krb-printingUpgrade libsmbsharemodes0Upgrade libsamba-hostconfig-develUpgrade libsmbconf0-32bitUpgrade libtevent-util0Upgrade libwbclient0Upgrade libsmbldap0Upgrade samba-libsUpgrade libsamba-util-develUpgrade libndr0-32bitUpgrade libsmbclient0-x86Upgrade libsmbclient-raw0Upgrade libnetapi-develUpgrade libsmbconf-develUpgrade samba-client-x86Upgrade libpdb-develUpgrade samba-client-32bitUpgrade libsamba-credentials0-32bitUpgrade samba-docUpgrade libnetapi0Upgrade samba-libs-32bitUpgrade libtalloc1Upgrade samba-winbindUpgrade libtevent-util-develUpgrade libregistry-develUpgrade libdcerpc-binding0-32bitUpgrade libtevent-develUpgrade libndr-develUpgrade samba-32bitUpgrade libnetapi0-32bitUpgrade libndr-nbt0-32bitUpgrade libtevent-util0-32bitUpgrade sle-sdk-releaseUpgrade libsamba-policy0-32bitUpgrade libregistry0Upgrade samba-x86Upgrade libdcerpc-samr-develUpgrade libtalloc2-32bitUpgrade libgensec-develUpgrade libsmbclient0-32bitUpgrade samba-winbind-x86Upgrade libdcerpc0-32bitUpgrade libwbclient0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libldb1Upgrade libtevent0Upgrade libtdb1-32bitUpgrade samba-clientUpgrade samba-core-develUpgrade libtalloc2Upgrade libndr-standard0-32bitUpgrade libdcerpc-binding0Upgrade libtdb1Upgrade libsamba-hostconfig0-32bitUpgrade cifs-mountUpgrade ldapsmbUpgrade libndr-krb5pac-develUpgrade libsamba-policy-develUpgrade libndr-krb5pac0Upgrade libdcerpc-atsvc0Upgrade libwbclient-develUpgrade libsamba-policy0Upgrade libndr-nbt-develUpgrade libdcerpc-atsvc-develUpgrade libdcerpc-samr0Upgrade samba-test-develUpgrade libsamdb0Upgrade libsamdb0-32bitUpgrade libtdb1-x86Upgrade libpdb0Upgrade libtalloc-develUpgrade libwbclient0-x86Upgrade libsmbclient-raw-develUpgrade libdcerpc0Upgrade libldb-develUpgrade libtalloc1-32bitUpgrade libsmbsharemodes-devel | Mar 27, 2014 | Mar 14, 2014 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Mar 14, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub