Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remote attackers to perform protocol-downgrade attacks, cause a denial of service (application crash or CPU consumption), or possibly execute arbitrary code on a client system via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade libwbclient-develUpgrade samba-domainjoin-guiUpgrade samba-winbindUpgrade samba-common-toolsUpgrade samba3x-swatUpgrade samba-winbind-clientsUpgrade samba-docUpgrade samba-develUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libsUpgrade samba3x-clientUpgrade samba-winbind-modulesUpgrade samba-pythonUpgrade samba-swatUpgrade libsmbclientUpgrade samba3x-winbind-develUpgrade samba3x-winbindUpgrade sambaUpgrade samba-test-libsUpgrade samba-clientUpgrade samba-libsUpgrade libsmbclient-develUpgrade samba-dc-libsUpgrade samba-winbind-develUpgrade ctdb-testsUpgrade samba3xUpgrade samba-vfs-glusterfsUpgrade samba-testUpgrade samba-commonUpgrade samba-dcUpgrade samba-pidlUpgrade samba3x-commonUpgrade samba-test-develUpgrade ctdb-develUpgrade samba3x-domainjoin-guiUpgrade samba-glusterfsUpgrade libwbclientUpgrade samba-client-libsUpgrade samba3x-docUpgrade ctdb | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 10, 2016 |
| Freebsd | — | Upgrade samba36Upgrade samba41Upgrade samba44Upgrade samba43Upgrade samba42Upgrade samba4 | Dec 10, 2025 | Apr 12, 2016 |
| Hpux | — | Update CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest version | Aug 11, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade tdb-toolsUpgrade libtdbUpgrade samba-clientUpgrade libtallocUpgrade libteventUpgrade python-tdbUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-common-toolsUpgrade pytallocUpgrade libldbUpgrade sambaUpgrade samba-common-libsUpgrade samba-libsUpgrade samba-commonUpgrade samba-winbindUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade python-teventUpgrade libwbclient | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade samba-client-libsUpgrade libwbclientUpgrade samba3x-swatUpgrade samba-domainjoin-guiUpgrade samba-testUpgrade samba-libsUpgrade samba-pidlUpgrade samba-winbind-develUpgrade libtallocUpgrade samba4-dcUpgrade samba4Upgrade python-tdbUpgrade samba4-winbind-clientsUpgrade samba4-libsUpgrade libtalloc-develUpgrade openchangeUpgrade libsmbclient-develUpgrade openchange-devel-docsUpgrade samba4-pidlUpgrade samba3x-winbind-develUpgrade ipa-admintoolsUpgrade samba-commonUpgrade tdb-toolsUpgrade samba3x-docUpgrade ipa-pythonUpgrade ipa-server-trust-adUpgrade libteventUpgrade samba3xUpgrade samba3x-winbindUpgrade samba4-winbindUpgrade pytallocUpgrade samba-test-libsUpgrade libtevent-develUpgrade samba4-clientUpgrade ldb-toolsUpgrade ctdbUpgrade ipa-server-selinuxUpgrade pytalloc-develUpgrade samba-develUpgrade samba3x-domainjoin-guiUpgrade samba-dcUpgrade libtdb-develUpgrade samba-winbind-clientsUpgrade ipa-clientUpgrade openchange-develUpgrade libldbUpgrade ctdb-testsUpgrade samba-common-libsUpgrade samba-glusterfsUpgrade samba-vfs-glusterfsUpgrade samba-winbind-krb5-locatorUpgrade libwbclient-develUpgrade openchange-clientUpgrade libldb-develUpgrade samba3x-clientUpgrade ipa-server-dnsUpgrade pyldb-develUpgrade samba-pythonUpgrade python-teventUpgrade samba4-testUpgrade pyldbUpgrade samba4-pythonUpgrade libsmbclientUpgrade samba-swatUpgrade ctdb-develUpgrade samba4-winbind-krb5-locatorUpgrade sambaUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba4-dc-libsUpgrade samba-clientUpgrade samba4-commonUpgrade samba4-develUpgrade samba3x-commonUpgrade ipa-serverUpgrade samba-test-develUpgrade samba-dc-libsUpgrade samba-winbindUpgrade samba-docUpgrade libtdb | Apr 24, 2016 | Apr 24, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.1R10Update Pulse Connect Secure to version 8.2R5 | Oct 28, 2020 | Apr 25, 2016 |
| Samba | — | Upgrade to Samba version 4.3.8Upgrade to Samba version 4.4.2Upgrade to Samba version 4.2.11 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade samba-cephUpgrade libtevent0-x86Upgrade libndr-krb5pac-develUpgrade libsamba-hostconfig0Upgrade samba-winbind-32bitUpgrade libsamba-util-develUpgrade libndr0Upgrade samba-develUpgrade samba-libs-python3Upgrade libdcerpc-atsvc0Upgrade samba-core-develUpgrade libsamba-credentials-develUpgrade samba-python3Upgrade libsamba-passdb0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libsmbldap0-32bitUpgrade samba-docUpgrade libtevent-develUpgrade libtevent-util0-32bitUpgrade sambaUpgrade libtdb1-32bitUpgrade libdcerpc-binding0Upgrade libsamba-hostconfig0-32bitUpgrade libndr1Upgrade ctdbUpgrade libndr-krb5pac0-32bitUpgrade libgensec0Upgrade samba-pythonUpgrade libndr-krb5pac0Upgrade libsmbldap2-32bitUpgrade libdcerpc-develUpgrade libtalloc2Upgrade libsmbconf0Upgrade libsamba-errors-develUpgrade libsamba-policy0Upgrade libtalloc-develUpgrade libsmbsharemodes0Upgrade libndr-nbt0Upgrade libtalloc2-x86Upgrade libsmbldap0Upgrade libwbclient0Upgrade libsamba-errors0Upgrade samba-x86Upgrade libsmbconf0-32bitUpgrade libnetapi0Upgrade libwbclient-develUpgrade libsmbldap-develUpgrade libsmbconf-develUpgrade libsmbclient-develUpgrade libldb-develUpgrade libsamdb0Upgrade libsmbclient-raw0Upgrade libndr-standard0-32bitUpgrade samba-32bitUpgrade samba-winbindUpgrade libtevent-util0Upgrade samba-libs-32bitUpgrade libndr-nbt-develUpgrade libwbclient0-32bitUpgrade libwbclient0-x86Upgrade samba-kdcUpgrade libdcerpc-samr0Upgrade libndr-nbt0-32bitUpgrade libsamba-hostconfig-develUpgrade libsamba-policy0-python3Upgrade samba-client-x86Upgrade libsamba-credentials0-32bitUpgrade libsmbsharemodes-develUpgrade libsmbclient0Upgrade samba-libsUpgrade libsamba-util0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-credentials0Upgrade samba-krb-printingUpgrade libtevent-util-develUpgrade samba-dsdb-modulesUpgrade libldb1Upgrade libgensec-develUpgrade libsamdb-develUpgrade libsamba-policy-python3-develUpgrade samba-winbind-x86Upgrade libsamba-util0Upgrade libsamba-errors0-32bitUpgrade samba-libs-python3-32bitUpgrade ldapsmbUpgrade samba-testUpgrade samba-clientUpgrade libsamdb0-32bitUpgrade libtdb-develUpgrade libdcerpc-atsvc-develUpgrade libsmbclient-raw-develUpgrade libsmbclient0-x86Upgrade libsmbldap2Upgrade libndr-standard-develUpgrade libregistry0Upgrade libndr1-32bitUpgrade libndr-standard0Upgrade libdcerpc0Upgrade libndr-develUpgrade libsamba-policy-develUpgrade libdcerpc0-32bitUpgrade libtevent0-32bitUpgrade libtalloc2-32bitUpgrade libtdb1-x86Upgrade libtevent0Upgrade libgensec0-32bitUpgrade libsamba-passdb0Upgrade ctdb-develUpgrade libsmbclient0-32bitUpgrade libndr0-32bitUpgrade libtdb1Upgrade libnetapi0-32bitUpgrade samba-client-32bitUpgrade libnetapi-develUpgrade libsamba-passdb-develUpgrade libregistry-develUpgrade samba-test-devel | Apr 13, 2016 | Apr 13, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub