The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain controller is configured, allows remote attackers to spoof the computer name of a secure channel's endpoint, and obtain sensitive session information, by running a crafted application and leveraging the ability to sniff network traffic, a related issue to CVE-2015-0005.
CVSS Details
- CVSS 3.1 Base Score: 6.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade libwbclientUpgrade samba3x-commonUpgrade samba3x-swatUpgrade samba-winbind-modulesUpgrade samba-domainjoin-guiUpgrade samba3x-clientUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade samba3x-winbind-develUpgrade samba-swatUpgrade samba-libsUpgrade samba-client-libsUpgrade ctdb-testsUpgrade libsmbclient-develUpgrade samba-common-toolsUpgrade libwbclient-develUpgrade samba3x-winbindUpgrade samba-clientUpgrade samba3x-docUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade ctdb-develUpgrade samba3xUpgrade samba-winbindUpgrade samba3x-domainjoin-guiUpgrade samba-docUpgrade samba-dc-libsUpgrade samba-test-libsUpgrade samba-test-develUpgrade samba-develUpgrade samba-testUpgrade samba-pidlUpgrade samba-common-libsUpgrade ctdbUpgrade samba-glusterfsUpgrade samba-vfs-glusterfsUpgrade samba-winbind-develUpgrade sambaUpgrade samba-dc | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| Freebsd | — | Upgrade samba44Upgrade samba42Upgrade samba43Upgrade samba41Upgrade samba4Upgrade samba36 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Hpux | — | Update CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest version | Aug 11, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-clientUpgrade libtdbUpgrade tdb-toolsUpgrade python-tdbUpgrade pytallocUpgrade libtallocUpgrade samba-client-libsUpgrade libteventUpgrade samba-common-toolsUpgrade samba-pythonUpgrade python-teventUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade libldbUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-libsUpgrade sambaUpgrade samba-common-libsUpgrade libwbclient | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade samba-domainjoin-guiUpgrade samba-pidlUpgrade pytalloc-develUpgrade ipa-server-trust-adUpgrade samba-vfs-glusterfsUpgrade libtallocUpgrade libtalloc-develUpgrade ctdbUpgrade ipa-admintoolsUpgrade samba4-libsUpgrade ipa-server-selinuxUpgrade libteventUpgrade ipa-pythonUpgrade pytallocUpgrade samba4-clientUpgrade libtdb-develUpgrade samba-winbind-krb5-locatorUpgrade openchange-devel-docsUpgrade ldb-toolsUpgrade libtevent-develUpgrade sambaUpgrade python-tdbUpgrade samba4-winbindUpgrade libsmbclient-develUpgrade samba4-pidlUpgrade samba4-pythonUpgrade openchangeUpgrade samba-winbind-develUpgrade samba4-dcUpgrade samba-develUpgrade samba-commonUpgrade samba-test-libsUpgrade tdb-toolsUpgrade samba4-winbind-clientsUpgrade samba-pythonUpgrade samba-libsUpgrade samba4Upgrade samba-testUpgrade samba3x-swatUpgrade libwbclientUpgrade samba-winbind-modulesUpgrade samba-test-develUpgrade samba-docUpgrade samba4-develUpgrade samba3x-winbind-develUpgrade samba-dcUpgrade samba3x-docUpgrade samba4-dc-libsUpgrade ipa-server-dnsUpgrade libwbclient-develUpgrade samba-client-libsUpgrade pyldb-develUpgrade samba4-winbind-krb5-locatorUpgrade ctdb-testsUpgrade samba-clientUpgrade ipa-serverUpgrade python-teventUpgrade openchange-develUpgrade libtdbUpgrade samba-glusterfsUpgrade samba4-commonUpgrade samba4-testUpgrade ctdb-develUpgrade pyldbUpgrade samba3x-domainjoin-guiUpgrade samba-common-toolsUpgrade samba3xUpgrade libldbUpgrade samba-swatUpgrade samba-common-libsUpgrade samba3x-commonUpgrade ipa-clientUpgrade libsmbclientUpgrade openchange-clientUpgrade samba3x-clientUpgrade samba-winbindUpgrade samba3x-winbindUpgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade libldb-devel | Apr 24, 2016 | Apr 24, 2016 |
| Samba | — | Upgrade to Samba version 4.3.8Upgrade to Samba version 4.2.11Upgrade to Samba version 4.4.2 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade libldb-develUpgrade libndr-nbt-develUpgrade samba-libsUpgrade libtevent-develUpgrade libtevent-util0Upgrade libdcerpc0-32bitUpgrade libregistry-develUpgrade libdcerpc-binding0-32bitUpgrade libsmbclient0-32bitUpgrade libsmbclient-raw-develUpgrade libsamdb0-32bitUpgrade libsamdb-develUpgrade libsamba-policy-develUpgrade samba-python3Upgrade libsamba-policy0-python3Upgrade samba-x86Upgrade libndr-standard0-32bitUpgrade libsamba-policy-python3-develUpgrade libwbclient0Upgrade libregistry0Upgrade libtdb1Upgrade samba-client-32bitUpgrade libsmbldap2Upgrade libdcerpc0Upgrade libndr-krb5pac0Upgrade libtalloc2-32bitUpgrade libwbclient-develUpgrade libndr-krb5pac-develUpgrade libtevent0-x86Upgrade libdcerpc-atsvc0Upgrade libsmbsharemodes-develUpgrade libtalloc-develUpgrade libdcerpc-samr-develUpgrade libsamba-credentials-develUpgrade libsmbclient-raw0-32bitUpgrade ldapsmbUpgrade libndr-standard0Upgrade libtevent0Upgrade libsmbclient0-x86Upgrade samba-clientUpgrade samba-core-develUpgrade libsmbclient-develUpgrade libwbclient0-x86Upgrade libsamdb0Upgrade libsamba-hostconfig0-32bitUpgrade libnetapi0-32bitUpgrade samba-libs-python3-32bitUpgrade libsamba-passdb0-32bitUpgrade libwbclient0-32bitUpgrade libsamba-policy0Upgrade libsamba-util-develUpgrade libndr-standard-develUpgrade libsamba-passdb0Upgrade ctdbUpgrade libtalloc2-x86Upgrade libldb1Upgrade libsmbconf0-32bitUpgrade libsamba-errors0-32bitUpgrade samba-winbind-x86Upgrade libndr0-32bitUpgrade samba-winbind-32bitUpgrade libndr0Upgrade samba-libs-32bitUpgrade samba-winbindUpgrade libndr1-32bitUpgrade samba-docUpgrade libtevent0-32bitUpgrade libgensec-develUpgrade samba-cephUpgrade samba-krb-printingUpgrade libtdb1-32bitUpgrade libdcerpc-samr0Upgrade samba-dsdb-modulesUpgrade libsmbldap0-32bitUpgrade libsamba-passdb-develUpgrade libnetapi0Upgrade ctdb-develUpgrade samba-test-develUpgrade libtevent-util0-32bitUpgrade samba-client-x86Upgrade libtevent-util-develUpgrade samba-testUpgrade samba-32bitUpgrade libsmbldap0Upgrade libndr1Upgrade libsmbldap2-32bitUpgrade libsamba-util0-32bitUpgrade libtdb-develUpgrade libsmbclient0Upgrade libdcerpc-binding0Upgrade libndr-nbt0-32bitUpgrade libsamba-util0Upgrade libsamba-hostconfig-develUpgrade libndr-nbt0Upgrade libsmbconf0Upgrade libsamba-hostconfig0Upgrade libnetapi-develUpgrade libsamba-credentials0Upgrade libdcerpc-develUpgrade libtalloc2Upgrade libgensec0Upgrade libsamba-errors0Upgrade libndr-krb5pac0-32bitUpgrade libndr-develUpgrade samba-pythonUpgrade samba-kdcUpgrade libsmbldap-develUpgrade libsamba-errors-develUpgrade libgensec0-32bitUpgrade libsamba-credentials0-32bitUpgrade samba-libs-python3Upgrade libsmbconf-develUpgrade samba-develUpgrade libtdb1-x86Upgrade sambaUpgrade libsmbsharemodes0Upgrade libsmbclient-raw0Upgrade libdcerpc-atsvc-devel | Apr 13, 2016 | Apr 13, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub