Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remote attackers to perform protocol-downgrade attacks, cause a denial of service (application crash or CPU consumption), or possibly execute arbitrary code on a client system via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade samba3x-domainjoin-guiUpgrade samba3xUpgrade samba3x-commonUpgrade ctdb-testsUpgrade samba-testUpgrade samba-winbind-develUpgrade samba3x-docUpgrade samba-test-develUpgrade samba-commonUpgrade samba-dcUpgrade samba-pidlUpgrade ctdb-develUpgrade ctdbUpgrade samba-vfs-glusterfsUpgrade samba-client-libsUpgrade samba-glusterfsUpgrade libwbclientUpgrade samba-winbindUpgrade samba-pythonUpgrade samba3x-winbindUpgrade samba-clientUpgrade samba-domainjoin-guiUpgrade samba-test-libsUpgrade samba-common-libsUpgrade samba-docUpgrade libsmbclient-develUpgrade samba-winbind-clientsUpgrade samba3x-swatUpgrade samba-winbind-krb5-locatorUpgrade samba3x-clientUpgrade samba-dc-libsUpgrade samba-winbind-modulesUpgrade samba-develUpgrade samba-swatUpgrade sambaUpgrade samba-libsUpgrade samba3x-winbind-develUpgrade libsmbclientUpgrade samba-common-toolsUpgrade libwbclient-devel | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 10, 2016 |
| Freebsd | — | Upgrade samba4Upgrade samba42Upgrade samba43Upgrade samba41Upgrade samba44Upgrade samba36 | Dec 10, 2025 | Apr 12, 2016 |
| Hpux | — | Update CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest version | Aug 11, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-commonUpgrade sambaUpgrade samba-winbind-modulesUpgrade python-teventUpgrade samba-common-libsUpgrade samba-libsUpgrade samba-winbindUpgrade libwbclientUpgrade samba-pythonUpgrade libldbUpgrade libteventUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-clientUpgrade python-tdbUpgrade pytallocUpgrade samba-winbind-clientsUpgrade libtdbUpgrade libtallocUpgrade tdb-toolsUpgrade libsmbclient | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade libtalloc-develUpgrade pytallocUpgrade pytalloc-develUpgrade samba3xUpgrade samba3x-docUpgrade ipa-pythonUpgrade libtallocUpgrade samba-test-libsUpgrade ipa-server-selinuxUpgrade tdb-toolsUpgrade libtevent-develUpgrade samba4-dcUpgrade libwbclientUpgrade samba-client-libsUpgrade samba3x-winbindUpgrade samba-libsUpgrade ctdbUpgrade samba-develUpgrade samba4-clientUpgrade samba-pidlUpgrade samba4-pidlUpgrade samba-winbind-develUpgrade samba4-winbindUpgrade ldb-toolsUpgrade samba-domainjoin-guiUpgrade samba4-winbind-clientsUpgrade ipa-server-trust-adUpgrade samba3x-swatUpgrade samba4Upgrade samba-testUpgrade samba-commonUpgrade libsmbclient-develUpgrade python-tdbUpgrade openchange-devel-docsUpgrade samba4-libsUpgrade libteventUpgrade ipa-admintoolsUpgrade openchangeUpgrade samba3x-winbind-develUpgrade samba3x-clientUpgrade samba4-pythonUpgrade libsmbclientUpgrade samba3x-domainjoin-guiUpgrade libtdb-develUpgrade openchange-develUpgrade samba4-testUpgrade samba-common-libsUpgrade samba4-commonUpgrade samba-swatUpgrade pyldbUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade pyldb-develUpgrade samba-test-develUpgrade samba-winbind-krb5-locatorUpgrade samba3x-commonUpgrade samba-clientUpgrade samba4-dc-libsUpgrade libldb-develUpgrade ipa-serverUpgrade ipa-server-dnsUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade libwbclient-develUpgrade samba4-winbind-krb5-locatorUpgrade openchange-clientUpgrade ctdb-develUpgrade samba-winbindUpgrade ipa-clientUpgrade ctdb-testsUpgrade libldbUpgrade samba-vfs-glusterfsUpgrade samba4-develUpgrade samba-docUpgrade samba-dc-libsUpgrade libtdbUpgrade samba-glusterfsUpgrade python-teventUpgrade samba-dc | Apr 24, 2016 | Apr 24, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.2R5Update Pulse Connect Secure to version 8.1R10 | Oct 28, 2020 | Apr 25, 2016 |
| Samba | — | Upgrade to Samba version 4.4.2Upgrade to Samba version 4.3.8Upgrade to Samba version 4.2.11 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade libsamba-passdb0-32bitUpgrade samba-pythonUpgrade libtdb1-32bitUpgrade samba-cephUpgrade libndr1Upgrade libndr-nbt0Upgrade libtevent-util0Upgrade libsamba-errors-develUpgrade libsmbconf0Upgrade samba-core-develUpgrade libwbclient-develUpgrade libnetapi0Upgrade libsamba-hostconfig0-32bitUpgrade sambaUpgrade libndr-krb5pac-develUpgrade libsamdb0Upgrade libgensec0Upgrade libsmbconf0-32bitUpgrade libtevent-develUpgrade libsmbclient-develUpgrade libsmbsharemodes0Upgrade libdcerpc-develUpgrade libsmbldap2-32bitUpgrade libndr-krb5pac0-32bitUpgrade samba-x86Upgrade libndr0Upgrade libsamba-hostconfig0Upgrade samba-winbind-32bitUpgrade libsmbconf-develUpgrade libsmbldap-develUpgrade samba-libs-python3Upgrade libsmbclient-raw0-32bitUpgrade libsamba-errors0Upgrade libdcerpc-atsvc0Upgrade libsamba-util-develUpgrade libtalloc-develUpgrade libdcerpc-binding0Upgrade libldb-develUpgrade libsamba-policy0Upgrade libndr-krb5pac0Upgrade libtalloc2-x86Upgrade samba-python3Upgrade libsamba-credentials-develUpgrade samba-32bitUpgrade libwbclient0-x86Upgrade libsmbclient-raw0Upgrade samba-libs-32bitUpgrade libtevent-util0-32bitUpgrade samba-docUpgrade libwbclient0Upgrade libtevent0-x86Upgrade libtalloc2Upgrade libndr-standard0-32bitUpgrade libsmbldap0-32bitUpgrade libsmbldap0Upgrade libwbclient0-32bitUpgrade ctdbUpgrade samba-winbindUpgrade libndr-nbt-develUpgrade samba-develUpgrade samba-libsUpgrade libgensec-develUpgrade libdcerpc-samr0Upgrade samba-clientUpgrade libsmbclient-raw-develUpgrade libregistry-develUpgrade samba-client-32bitUpgrade libsmbldap2Upgrade libsamba-credentials0Upgrade libtevent0-32bitUpgrade libtdb1Upgrade libldb1Upgrade libsamba-policy0-python3Upgrade libdcerpc0Upgrade samba-testUpgrade libsamba-passdb0Upgrade libsamba-policy-develUpgrade ldapsmbUpgrade samba-dsdb-modulesUpgrade samba-kdcUpgrade libsamdb0-32bitUpgrade libsamba-util0-32bitUpgrade samba-test-develUpgrade libdcerpc0-32bitUpgrade libndr-develUpgrade libsamba-credentials0-32bitUpgrade libgensec0-32bitUpgrade libsmbclient0-32bitUpgrade libndr1-32bitUpgrade libregistry0Upgrade libndr-standard0Upgrade libndr-standard-develUpgrade libsamba-util0Upgrade libsamba-errors0-32bitUpgrade libdcerpc-atsvc-develUpgrade libtdb-develUpgrade libtevent-util-develUpgrade ctdb-develUpgrade libndr-nbt0-32bitUpgrade samba-client-x86Upgrade samba-winbind-x86Upgrade samba-krb-printingUpgrade libtdb1-x86Upgrade libdcerpc-samr-develUpgrade samba-libs-python3-32bitUpgrade libsmbclient0-x86Upgrade libtevent0Upgrade libsamdb-develUpgrade libndr0-32bitUpgrade libsmbclient0Upgrade libdcerpc-binding0-32bitUpgrade libsamba-policy-python3-develUpgrade libtalloc2-32bitUpgrade libsamba-hostconfig-develUpgrade libsamba-passdb-develUpgrade libnetapi0-32bitUpgrade libsmbsharemodes-develUpgrade libnetapi-devel | Apr 13, 2016 | Apr 13, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub