Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remote attackers to perform protocol-downgrade attacks, cause a denial of service (application crash or CPU consumption), or possibly execute arbitrary code on a client system via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade samba-test-libsUpgrade samba-swatUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-pythonUpgrade samba3x-winbindUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade libsmbclient-develUpgrade samba-develUpgrade samba-docUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba3x-swatUpgrade samba-winbindUpgrade samba-common-toolsUpgrade samba3x-winbind-develUpgrade libwbclient-develUpgrade samba-domainjoin-guiUpgrade samba-dc-libsUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba3x-clientUpgrade samba-testUpgrade samba-test-develUpgrade ctdbUpgrade samba3x-docUpgrade samba-vfs-glusterfsUpgrade samba-client-libsUpgrade samba-glusterfsUpgrade samba-pidlUpgrade samba3xUpgrade samba3x-domainjoin-guiUpgrade ctdb-testsUpgrade samba3x-commonUpgrade ctdb-develUpgrade libwbclientUpgrade samba-dcUpgrade samba-winbind-develUpgrade samba-common | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 10, 2016 |
| Freebsd | — | Upgrade samba4Upgrade samba42Upgrade samba44Upgrade samba43Upgrade samba36Upgrade samba41 | Dec 10, 2025 | Apr 12, 2016 |
| Hpux | — | Update CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest version | Aug 11, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libtallocUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade libsmbclientUpgrade pytallocUpgrade libtdbUpgrade libteventUpgrade tdb-toolsUpgrade samba-clientUpgrade python-tdbUpgrade libwbclientUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-pythonUpgrade python-teventUpgrade samba-libsUpgrade libldbUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade samba-commonUpgrade ipa-pythonUpgrade samba4-dcUpgrade samba-domainjoin-guiUpgrade samba-testUpgrade ipa-server-trust-adUpgrade samba3x-swatUpgrade samba3x-docUpgrade libwbclientUpgrade samba-winbind-develUpgrade samba-test-libsUpgrade samba3x-winbindUpgrade pytalloc-develUpgrade pytallocUpgrade ipa-server-selinuxUpgrade samba4-winbindUpgrade libtallocUpgrade libtalloc-develUpgrade samba-pidlUpgrade samba3x-winbind-develUpgrade samba4Upgrade samba-libsUpgrade tdb-toolsUpgrade samba-client-libsUpgrade samba4-pidlUpgrade ipa-admintoolsUpgrade openchangeUpgrade samba4-winbind-clientsUpgrade samba4-libsUpgrade libsmbclient-develUpgrade openchange-devel-docsUpgrade libteventUpgrade python-tdbUpgrade samba-develUpgrade samba4-clientUpgrade samba3xUpgrade ctdbUpgrade libtevent-develUpgrade ldb-toolsUpgrade samba3x-domainjoin-guiUpgrade openchange-clientUpgrade sambaUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba4-dc-libsUpgrade samba-winbind-krb5-locatorUpgrade libldb-develUpgrade samba4-commonUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-dcUpgrade samba-clientUpgrade samba-dc-libsUpgrade libldbUpgrade ctdb-testsUpgrade samba-pythonUpgrade openchange-develUpgrade libtdb-develUpgrade samba4-winbind-krb5-locatorUpgrade libwbclient-develUpgrade samba4-testUpgrade samba-swatUpgrade pyldbUpgrade samba3x-clientUpgrade libsmbclientUpgrade samba4-pythonUpgrade samba-test-develUpgrade samba-vfs-glusterfsUpgrade ctdb-develUpgrade ipa-clientUpgrade samba-glusterfsUpgrade samba3x-commonUpgrade ipa-serverUpgrade pyldb-develUpgrade ipa-server-dnsUpgrade python-teventUpgrade samba-winbindUpgrade samba-docUpgrade libtdbUpgrade samba4-devel | Apr 24, 2016 | Apr 24, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.1R10Update Pulse Connect Secure to version 8.2R5 | Oct 28, 2020 | Apr 25, 2016 |
| Samba | — | Upgrade to Samba version 4.3.8Upgrade to Samba version 4.2.11Upgrade to Samba version 4.4.2 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade samba-dsdb-modulesUpgrade libsmbclient0-32bitUpgrade libsamba-policy-develUpgrade libsmbsharemodes-develUpgrade libtevent-util-develUpgrade libtdb1Upgrade samba-client-32bitUpgrade libsamba-passdb-develUpgrade libsmbldap2Upgrade libldb1Upgrade libdcerpc-samr-develUpgrade libtdb1-x86Upgrade libgensec-develUpgrade libndr-standard-develUpgrade libndr-standard0Upgrade samba-krb-printingUpgrade libsamba-credentials0Upgrade ctdb-develUpgrade libsamba-policy-python3-develUpgrade ldapsmbUpgrade libndr-nbt0-32bitUpgrade libtdb-develUpgrade libsamba-util0Upgrade samba-clientUpgrade samba-kdcUpgrade libtalloc2-32bitUpgrade samba-libsUpgrade samba-winbind-x86Upgrade libnetapi0-32bitUpgrade libsamba-policy0-python3Upgrade samba-test-develUpgrade libtevent0-32bitUpgrade libnetapi-develUpgrade samba-libs-python3-32bitUpgrade libsamba-hostconfig-develUpgrade libregistry-develUpgrade libsamba-credentials0-32bitUpgrade libsmbclient0-x86Upgrade libsamba-util0-32bitUpgrade libndr1-32bitUpgrade libsmbclient-raw-develUpgrade libgensec0-32bitUpgrade libregistry0Upgrade libdcerpc0Upgrade libsamdb0-32bitUpgrade libtevent0Upgrade samba-testUpgrade libndr-develUpgrade libdcerpc-atsvc-develUpgrade libsmbclient0Upgrade libdcerpc0-32bitUpgrade libdcerpc-binding0-32bitUpgrade samba-client-x86Upgrade libdcerpc-samr0Upgrade libsamba-errors0-32bitUpgrade libndr0-32bitUpgrade libsamba-passdb0Upgrade libsamdb-develUpgrade libdcerpc-atsvc0Upgrade samba-32bitUpgrade libtdb1-32bitUpgrade libtalloc2Upgrade libsmbconf-develUpgrade libsamdb0Upgrade libsmbconf0-32bitUpgrade libndr1Upgrade libsamba-errors0Upgrade libtevent-develUpgrade libwbclient0-x86Upgrade samba-pythonUpgrade ctdbUpgrade libsamba-credentials-develUpgrade samba-docUpgrade samba-winbindUpgrade samba-cephUpgrade samba-libs-python3Upgrade libtalloc-develUpgrade sambaUpgrade libnetapi0Upgrade libdcerpc-binding0Upgrade libsamba-passdb0-32bitUpgrade libldb-develUpgrade libsamba-hostconfig0-32bitUpgrade libndr-krb5pac0Upgrade samba-core-develUpgrade libsamba-hostconfig0Upgrade samba-develUpgrade libsmbldap-develUpgrade libsmbclient-raw0-32bitUpgrade libwbclient-develUpgrade libndr-standard0-32bitUpgrade libtevent-util0Upgrade libgensec0Upgrade samba-python3Upgrade libsmbldap0Upgrade samba-winbind-32bitUpgrade libndr-krb5pac-develUpgrade libdcerpc-develUpgrade samba-libs-32bitUpgrade libwbclient0Upgrade libsmbldap2-32bitUpgrade libtalloc2-x86Upgrade libndr-krb5pac0-32bitUpgrade samba-x86Upgrade libsmbclient-develUpgrade libsamba-policy0Upgrade libndr-nbt-develUpgrade libtevent-util0-32bitUpgrade libwbclient0-32bitUpgrade libtevent0-x86Upgrade libsmbldap0-32bitUpgrade libsamba-util-develUpgrade libsamba-errors-develUpgrade libsmbconf0Upgrade libndr-nbt0Upgrade libsmbsharemodes0Upgrade libndr0Upgrade libsmbclient-raw0 | Apr 13, 2016 | Apr 13, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub