Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 (1) SAMR or (2) RAP attempts.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade samba-swatUpgrade samba4-swatUpgrade libsmbclientUpgrade samba3x-domainjoin-guiUpgrade samba-commonUpgrade samba4-dcUpgrade samba-winbind-krb5-locatorUpgrade samba4-dc-libsUpgrade samba3x-clientUpgrade samba-docUpgrade samba4-commonUpgrade samba3x-commonUpgrade samba4-pythonUpgrade samba4-testUpgrade sambaUpgrade samba-winbindUpgrade samba3x-winbind-develUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-winbind-develUpgrade samba4-winbind-krb5-locatorUpgrade samba4-libsUpgrade samba4-winbind-clientsUpgrade samba3x-winbindUpgrade samba-domainjoin-guiUpgrade samba4-pidlUpgrade samba3x-swatUpgrade samba4-winbindUpgrade samba4-clientUpgrade samba4Upgrade samba3xUpgrade libsmbclient-develUpgrade samba3x-docUpgrade samba4-devel | Dec 1, 2016 | Mar 14, 2014 |
| Debian | — | Upgrade samba4Upgrade samba | Jul 30, 2024 | Mar 14, 2014 |
| Freebsd | — | Upgrade samba36Upgrade samba35Upgrade samba41Upgrade samba34Upgrade samba4 | Dec 10, 2025 | Mar 11, 2014 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Mar 14, 2014 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.6.23-0.175.1.18.0.4.0 on Solaris 11.1 | May 29, 2017 | Mar 14, 2014 |
| Oracle_linux | — | Upgrade samba3x-winbindUpgrade samba3xUpgrade samba3x-swatUpgrade samba4-testUpgrade samba4-winbind-krb5-locatorUpgrade samba3x-clientUpgrade samba4-dc-libsUpgrade samba3x-domainjoin-guiUpgrade samba3x-docUpgrade samba4-commonUpgrade libsmbclientUpgrade samba4-develUpgrade samba-winbind-clientsUpgrade samba4-swatUpgrade samba-swatUpgrade samba3x-commonUpgrade samba3x-winbind-develUpgrade samba-docUpgrade samba4-pythonUpgrade samba4-dcUpgrade samba4-winbindUpgrade samba-clientUpgrade samba4-pidlUpgrade samba-domainjoin-guiUpgrade samba4-winbind-clientsUpgrade samba4Upgrade samba-winbind-develUpgrade samba4-clientUpgrade sambaUpgrade libsmbclient-develUpgrade samba-winbind-krb5-locatorUpgrade samba-commonUpgrade samba4-libsUpgrade samba-winbind | Jun 26, 2018 | Mar 14, 2014 |
| Samba | — | Upgrade to Samba version 4.1.6Upgrade to Samba version 3.6.23Upgrade to Samba version 4.0.16 | Mar 17, 2014 | Mar 17, 2014 |
| Suse | — | Upgrade libdcerpc-samr0Upgrade libsmbclient0-32bitUpgrade libsamba-policy0-32bitUpgrade libregistry-develUpgrade libsmbclient-raw0-32bitUpgrade samba-clientUpgrade libtalloc2-32bitUpgrade libtdb1Upgrade libndr-standard0-32bitUpgrade libnetapi0-32bitUpgrade libtevent-develUpgrade libsmbclient-raw-develUpgrade samba-core-develUpgrade libtalloc2Upgrade sle-sdk-releaseUpgrade libndr-nbt-develUpgrade samba-x86Upgrade libwbclient0-x86Upgrade libwbclient-develUpgrade libdcerpc-atsvc-develUpgrade libtalloc-develUpgrade samba-32bitUpgrade libndr-nbt0-32bitUpgrade libgensec-develUpgrade libsamba-policy0Upgrade libtalloc1-32bitUpgrade libregistry0Upgrade samba-test-develUpgrade libdcerpc-atsvc0Upgrade cifs-mountUpgrade libtevent-util0-32bitUpgrade libdcerpc0-32bitUpgrade libsamba-policy-develUpgrade libdcerpc0Upgrade libdcerpc-binding0Upgrade libldb1Upgrade samba-winbind-x86Upgrade libsamba-hostconfig0-32bitUpgrade libndr-krb5pac-develUpgrade libpdb0Upgrade libdcerpc-binding0-32bitUpgrade libdcerpc-samr-develUpgrade libwbclient0-32bitUpgrade libtdb1-32bitUpgrade ldapsmbUpgrade libtevent0Upgrade libsamdb0-32bitUpgrade libsamdb0Upgrade libtdb1-x86Upgrade libldb-develUpgrade libndr-develUpgrade libndr-krb5pac0Upgrade libsmbsharemodes-develUpgrade libsmbclient-develUpgrade samba-pidlUpgrade samba-winbindUpgrade libtevent-util-develUpgrade libtalloc1Upgrade libsamba-hostconfig-develUpgrade libpdb-develUpgrade libsmbconf0Upgrade libsamba-credentials-develUpgrade libdcerpc-samr0-32bitUpgrade samba-pythonUpgrade libsmbclient0Upgrade libsamba-credentials0-32bitUpgrade libsmbldap0-32bitUpgrade libsmbconf-develUpgrade samba-krb-printingUpgrade libsmbldap-develUpgrade libregistry0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libtdb-develUpgrade libsmbsharemodes0Upgrade libtalloc2-x86Upgrade libndr0Upgrade libldb1-32bitUpgrade libtevent0-32bitUpgrade samba-client-32bitUpgrade samba-winbind-32bitUpgrade sambaUpgrade libwbclient0Upgrade libtevent-util0Upgrade libdcerpc-develUpgrade libnetapi0Upgrade libndr-standard-develUpgrade samba-testUpgrade libgensec0-32bitUpgrade libndr-standard0Upgrade samba-docUpgrade libndr-nbt0Upgrade libsmbclient-raw0Upgrade libsamba-util-develUpgrade libnetapi-develUpgrade libsmbldap0Upgrade samba-client-x86Upgrade libsmbclient0-x86Upgrade samba-libsUpgrade libndr0-32bitUpgrade libdcerpc-atsvc0-32bitUpgrade libpdb0-32bitUpgrade samba-develUpgrade libsamba-util0-32bitUpgrade libsamdb-develUpgrade libsamba-hostconfig0Upgrade libsamba-util0Upgrade libsmbconf0-32bitUpgrade libgensec0Upgrade libsamba-credentials0Upgrade samba-libs-32bit | Mar 27, 2014 | Mar 14, 2014 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Mar 14, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub