The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 allows man-in-the-middle attackers to perform protocol-downgrade attacks by modifying the client-server data stream to remove application-layer flags or encryption settings, as demonstrated by clearing the NTLMSSP_NEGOTIATE_SEAL or NTLMSSP_NEGOTIATE_SIGN option to disrupt LDAP security.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade samba-vfs-glusterfsUpgrade libsmbclient-develUpgrade libwbclient-develUpgrade samba-winbindUpgrade samba-commonUpgrade sambaUpgrade samba-docUpgrade samba-develUpgrade ctdbUpgrade samba-dcUpgrade libsmbclientUpgrade samba-swatUpgrade samba3x-docUpgrade samba-domainjoin-guiUpgrade samba-pidlUpgrade samba-winbind-clientsUpgrade samba-winbind-develUpgrade ctdb-develUpgrade samba-libsUpgrade ctdb-testsUpgrade samba3xUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba-winbind-krb5-locatorUpgrade samba-testUpgrade samba-glusterfsUpgrade samba3x-clientUpgrade samba-test-libsUpgrade samba3x-commonUpgrade samba-test-develUpgrade samba3x-swatUpgrade libwbclientUpgrade samba3x-winbind-develUpgrade samba-client-libsUpgrade samba-clientUpgrade samba3x-winbindUpgrade samba3x-domainjoin-guiUpgrade samba-common-libsUpgrade samba-dc-libsUpgrade samba-common-tools | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 17, 2016 |
| Freebsd | — | Upgrade samba43Upgrade samba41Upgrade samba36Upgrade samba42Upgrade samba4Upgrade samba44 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Hpux | — | Update CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest version | Aug 11, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade tdb-toolsUpgrade libldbUpgrade samba-libsUpgrade sambaUpgrade samba-winbindUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-common-libsUpgrade pytallocUpgrade python-teventUpgrade libtdbUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade python-tdbUpgrade samba-clientUpgrade samba-client-libsUpgrade libtallocUpgrade libsmbclientUpgrade libteventUpgrade samba-common-tools | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade openchangeUpgrade ctdb-develUpgrade libldb-develUpgrade libtdbUpgrade libtdb-develUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade openchange-develUpgrade libsmbclientUpgrade samba-swatUpgrade ipa-clientUpgrade samba-pythonUpgrade samba-clientUpgrade libwbclient-develUpgrade libldbUpgrade samba4-testUpgrade samba-winbindUpgrade samba3x-winbindUpgrade samba4-winbind-krb5-locatorUpgrade ipa-pythonUpgrade ctdbUpgrade samba4-commonUpgrade samba-common-toolsUpgrade pyldb-develUpgrade ipa-serverUpgrade samba-winbind-modulesUpgrade samba4-dc-libsUpgrade sambaUpgrade samba-dcUpgrade samba-vfs-glusterfsUpgrade ipa-server-trust-adUpgrade samba4-develUpgrade samba-dc-libsUpgrade openchange-clientUpgrade python-teventUpgrade samba3x-winbind-develUpgrade samba3x-clientUpgrade pytallocUpgrade libtallocUpgrade pyldbUpgrade samba4-winbind-clientsUpgrade samba-develUpgrade pytalloc-develUpgrade libsmbclient-develUpgrade libtalloc-develUpgrade samba-test-develUpgrade ipa-server-selinuxUpgrade samba3x-commonUpgrade samba-pidlUpgrade samba-libsUpgrade libtevent-develUpgrade samba4-libsUpgrade samba4-dcUpgrade python-tdbUpgrade ipa-server-dnsUpgrade samba4-clientUpgrade samba-test-libsUpgrade libteventUpgrade samba-client-libsUpgrade samba3x-docUpgrade samba-commonUpgrade ipa-admintoolsUpgrade tdb-toolsUpgrade samba4-winbindUpgrade ctdb-testsUpgrade libwbclientUpgrade samba4Upgrade samba3xUpgrade samba3x-domainjoin-guiUpgrade ldb-toolsUpgrade openchange-devel-docsUpgrade samba4-pidlUpgrade samba4-pythonUpgrade samba3x-swatUpgrade samba-test | Apr 24, 2016 | Apr 24, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.2R5Update Pulse Connect Secure to version 8.1R10 | Oct 28, 2020 | Apr 25, 2016 |
| Samba | — | Upgrade to Samba version 4.2.11Upgrade to Samba version 4.3.8Upgrade to Samba version 4.4.2 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade samba-develUpgrade sambaUpgrade ldapsmbUpgrade libndr1Upgrade samba-libsUpgrade samba-client-x86Upgrade libnetapi0Upgrade libsmbclient0-x86Upgrade libndr-standard0Upgrade libsamba-policy0-python3Upgrade libsamdb-develUpgrade libsamba-util0-32bitUpgrade libgensec-develUpgrade libsmbsharemodes0Upgrade samba-winbind-x86Upgrade libtalloc2-x86Upgrade libtevent-util0Upgrade libsamba-policy-develUpgrade libndr-standard0-32bitUpgrade samba-client-32bitUpgrade libsamba-errors0-32bitUpgrade libdcerpc-develUpgrade libdcerpc-samr-develUpgrade libsamba-util-develUpgrade libtevent0-32bitUpgrade samba-cephUpgrade libtalloc-develUpgrade libndr0Upgrade libndr-nbt-develUpgrade libsmbconf0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libndr-standard-develUpgrade libsamba-passdb-develUpgrade samba-testUpgrade libndr-nbt0Upgrade libsmbldap2-32bitUpgrade libsamba-credentials0-32bitUpgrade samba-kdcUpgrade libsmbldap0-32bitUpgrade libtalloc2Upgrade libsamba-credentials0Upgrade libsmbclient0Upgrade libldb1Upgrade libwbclient0Upgrade libregistry0Upgrade samba-krb-printingUpgrade samba-dsdb-modulesUpgrade libsamba-hostconfig0Upgrade libgensec0Upgrade ctdbUpgrade libdcerpc-samr0Upgrade libgensec0-32bitUpgrade libtevent0Upgrade libtdb-develUpgrade libtdb1-x86Upgrade samba-clientUpgrade libsamba-policy-python3-develUpgrade libtevent-util-develUpgrade libsmbclient-develUpgrade samba-libs-32bitUpgrade libsmbconf0Upgrade libtalloc2-32bitUpgrade libnetapi-develUpgrade libsmbsharemodes-develUpgrade libndr-develUpgrade libsamba-passdb0-32bitUpgrade libdcerpc0-32bitUpgrade libsmbldap-develUpgrade libsamba-errors-develUpgrade libsmbclient-raw0Upgrade libsamdb0-32bitUpgrade libsamdb0Upgrade libndr-nbt0-32bitUpgrade libtevent-util0-32bitUpgrade samba-docUpgrade libsamba-util0Upgrade samba-winbindUpgrade libdcerpc-binding0Upgrade libsmbldap0Upgrade samba-libs-python3-32bitUpgrade libtevent0-x86Upgrade libwbclient0-x86Upgrade libsmbconf-develUpgrade libdcerpc0Upgrade libldb-develUpgrade libtdb1-32bitUpgrade samba-test-develUpgrade libsmbclient-raw-develUpgrade libsamba-credentials-develUpgrade libnetapi0-32bitUpgrade libsamba-policy0Upgrade ctdb-develUpgrade libtdb1Upgrade libsmbclient-raw0-32bitUpgrade libdcerpc-atsvc0Upgrade libsamba-hostconfig0-32bitUpgrade libndr0-32bitUpgrade libsamba-hostconfig-develUpgrade samba-pythonUpgrade libsamba-errors0Upgrade libregistry-develUpgrade libsamba-passdb0Upgrade samba-x86Upgrade libwbclient-develUpgrade samba-core-develUpgrade libsmbldap2Upgrade libdcerpc-atsvc-develUpgrade samba-32bitUpgrade libndr1-32bitUpgrade samba-winbind-32bitUpgrade libtevent-develUpgrade samba-python3Upgrade libndr-krb5pac-develUpgrade samba-libs-python3Upgrade libsmbclient0-32bitUpgrade libwbclient0-32bitUpgrade libndr-krb5pac0Upgrade libdcerpc-binding0-32bit | Apr 13, 2016 | Apr 13, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub