Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 supports connections that are encrypted but unsigned, which allows man-in-the-middle attackers to conduct encrypted-to-unencrypted downgrade attacks by modifying the client-server data stream, related to clidfs.c, libsmb_server.c, and smbXcli_base.c.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ldbUpgrade samba | Aug 30, 2017 | Dec 29, 2015 |
| Centos_linux | — | Upgrade samba4-testUpgrade samba-winbindUpgrade samba4-commonUpgrade samba-docUpgrade samba-libsUpgrade samba4-dcUpgrade samba-winbind-develUpgrade samba4-develUpgrade samba-pythonUpgrade samba4-swatUpgrade ctdb-testsUpgrade libwbclient-develUpgrade samba4-pythonUpgrade samba-domainjoin-guiUpgrade samba-swatUpgrade sambaUpgrade samba-dcUpgrade samba4-libsUpgrade samba-test-develUpgrade samba4-winbind-krb5-locatorUpgrade samba-testUpgrade libsmbclient-develUpgrade samba-client-libsUpgrade libsmbclientUpgrade libwbclientUpgrade samba-pidlUpgrade samba4Upgrade samba-develUpgrade samba-glusterfsUpgrade samba-winbind-modulesUpgrade samba4-dc-libsUpgrade ctdb-develUpgrade samba-common-libsUpgrade samba4-winbind-clientsUpgrade samba-dc-libsUpgrade samba-common-toolsUpgrade samba-vfs-glusterfsUpgrade samba4-winbindUpgrade samba4-pidlUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade samba4-clientUpgrade samba-clientUpgrade samba-test-libsUpgrade samba-commonUpgrade ctdb | Jul 6, 2016 | Dec 29, 2015 |
| Debian | — | Upgrade samba | Jan 4, 2016 | Dec 29, 2015 |
| Freebsd | — | Upgrade samba4Upgrade samba36Upgrade samba42Upgrade samba41Upgrade samba43Upgrade ldb | Dec 10, 2025 | Dec 19, 2015 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Dec 29, 2015 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Dec 29, 2015 |
| Oracle_linux | — | Upgrade samba-test-libsUpgrade samba-domainjoin-guiUpgrade libsmbclient-develUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba4-testUpgrade samba-docUpgrade samba-winbind-clientsUpgrade libwbclient-develUpgrade libsmbclientUpgrade samba4-winbind-krb5-locatorUpgrade sambaUpgrade samba4-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade samba4-commonUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba4-libsUpgrade samba-dc-libsUpgrade samba4-pidlUpgrade samba-test-develUpgrade samba-vfs-glusterfsUpgrade samba-pythonUpgrade samba4-develUpgrade samba-winbind-develUpgrade samba-testUpgrade samba-develUpgrade samba4-pythonUpgrade samba4-dc-libsUpgrade samba-glusterfsUpgrade samba-pidlUpgrade samba4Upgrade samba4-swatUpgrade samba-client-libsUpgrade samba4-winbindUpgrade samba-dcUpgrade samba4-dcUpgrade libwbclientUpgrade samba4-winbind-clientsUpgrade samba-commonUpgrade samba-swat | May 3, 2019 | Dec 29, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 16, 2015 |
| Samba | — | Upgrade to Samba version 4.3.3Upgrade to Samba version 4.2.7Upgrade to Samba version 4.1.22 | Mar 24, 2016 | Dec 29, 2015 |
| Suse | — | Upgrade libsamba-policy0Upgrade libtalloc-develUpgrade libndr0-32bitUpgrade samba-libs-python3Upgrade pyldbUpgrade libsmbldap0-32bitUpgrade libsmbclient-raw0Upgrade libndr-develUpgrade libnetapi-develUpgrade libsamba-passdb-develUpgrade samba-libs-32bitUpgrade samba-python3Upgrade libwbclient0-x86Upgrade libsmbconf0-32bitUpgrade tdb-toolsUpgrade libpdb-develUpgrade libndr1-32bitUpgrade samba-winbind-32bitUpgrade libldb1Upgrade libtdb1-x86Upgrade samba-pythonUpgrade libndr-standard0-32bitUpgrade sambaUpgrade libldb1-32bitUpgrade libsamba-errors-develUpgrade libpdb0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libtevent0-32bitUpgrade libdcerpc-atsvc0Upgrade libndr-nbt0Upgrade libtalloc2-x86Upgrade ctdbUpgrade samba-32bitUpgrade libsamba-hostconfig-develUpgrade libdcerpc-samr0Upgrade libnetapi0Upgrade libtevent-util0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-passdb0-32bitUpgrade libdcerpc-binding0Upgrade libtevent-develUpgrade samba-docUpgrade libdcerpc-atsvc-develUpgrade libsmbldap2-32bitUpgrade libndr1Upgrade libndr-krb5pac0-32bitUpgrade samba-testUpgrade libsmbsharemodes0Upgrade libwbclient-develUpgrade libwbclient0-32bitUpgrade libsamba-credentials0Upgrade samba-winbindUpgrade libndr0Upgrade libsmbconf-develUpgrade libsmbldap-develUpgrade samba-dsdb-modulesUpgrade libndr-nbt0-32bitUpgrade libsamba-hostconfig0Upgrade libsmbldap0Upgrade samba-test-develUpgrade libtevent-util-develUpgrade libgensec-develUpgrade samba-core-develUpgrade libdcerpc-develUpgrade samba-cephUpgrade libtalloc2Upgrade libgensec0-32bitUpgrade libgensec0Upgrade pytalloc-develUpgrade libsmbconf0Upgrade samba-develUpgrade samba-winbind-x86Upgrade libtevent0-x86Upgrade libsamba-util0Upgrade libsamdb0Upgrade samba-libsUpgrade libsmbldap2Upgrade libsamba-credentials0-32bitUpgrade libtdb-develUpgrade samba-kdcUpgrade samba-krb-printingUpgrade libdcerpc0Upgrade libsamdb-develUpgrade libregistry0Upgrade libldb-develUpgrade libsamba-util0-32bitUpgrade libndr-standard-develUpgrade libsamba-credentials-develUpgrade libtalloc2-32bitUpgrade libsmbclient-develUpgrade libsamba-policy-python3-develUpgrade pytallocUpgrade libsamba-policy0-python3Upgrade libndr-nbt-develUpgrade libdcerpc-binding0-32bitUpgrade libndr-standard0Upgrade libsmbsharemodes-develUpgrade libsamba-policy-develUpgrade samba-client-32bitUpgrade samba-client-x86Upgrade libsmbclient0Upgrade libtdb1-32bitUpgrade libsamdb0-32bitUpgrade libndr-krb5pac0Upgrade libdcerpc0-32bitUpgrade samba-clientUpgrade libndr-krb5pac-develUpgrade libnetapi0-32bitUpgrade libsmbclient-raw-develUpgrade pyldb-develUpgrade libsmbclient0-x86Upgrade libtevent-util0Upgrade pytalloc-32bitUpgrade libwbclient0Upgrade libsamba-passdb0Upgrade libsamba-errors0-32bitUpgrade samba-x86Upgrade libsamba-util-develUpgrade libpdb0Upgrade libregistry-develUpgrade libdcerpc-samr-develUpgrade libtdb1Upgrade ldapsmbUpgrade libsmbclient0-32bitUpgrade libsamba-errors0Upgrade libtevent0Upgrade samba-libs-python3-32bit | Jan 4, 2016 | Dec 18, 2015 |
| Ubuntu | — | Upgrade samba | Feb 2, 2016 | Dec 29, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub