The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade sambaUpgrade libwbclientUpgrade samba-docUpgrade samba-winbind-develUpgrade samba-test-libsUpgrade samba3x-swatUpgrade samba-winbindUpgrade samba-common-toolsUpgrade libsmbclient-develUpgrade samba-pythonUpgrade samba-winbind-krb5-locatorUpgrade samba-commonUpgrade samba-libsUpgrade samba-domainjoin-guiUpgrade samba-vfs-glusterfsUpgrade samba-develUpgrade ctdbUpgrade samba3x-domainjoin-guiUpgrade samba-clientUpgrade samba-glusterfsUpgrade samba3x-commonUpgrade libwbclient-develUpgrade samba-swatUpgrade samba-common-libsUpgrade samba-testUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade ctdb-develUpgrade ctdb-testsUpgrade samba-pidlUpgrade libsmbclientUpgrade samba3xUpgrade samba3x-docUpgrade samba3x-winbind-develUpgrade samba-dc-libsUpgrade samba3x-clientUpgrade samba-test-develUpgrade samba3x-winbindUpgrade samba-dcUpgrade samba-winbind-clients | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| Freebsd | — | Upgrade samba44Upgrade samba4Upgrade samba42Upgrade samba36Upgrade samba43Upgrade samba41 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Hpux | — | Update CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest version | Aug 11, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade python-tdbUpgrade libldbUpgrade tdb-toolsUpgrade libtdbUpgrade pytallocUpgrade samba-clientUpgrade samba-client-libsUpgrade sambaUpgrade python-teventUpgrade samba-libsUpgrade libteventUpgrade samba-pythonUpgrade samba-commonUpgrade samba-winbindUpgrade libwbclientUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade libtallocUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-common-tools | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade samba-winbind-modulesUpgrade samba-pidlUpgrade samba4-winbindUpgrade openchange-devel-docsUpgrade pytalloc-develUpgrade samba-commonUpgrade samba3xUpgrade python-teventUpgrade libldb-develUpgrade samba-domainjoin-guiUpgrade samba-libsUpgrade tdb-toolsUpgrade ctdb-develUpgrade ipa-pythonUpgrade samba-winbindUpgrade samba-winbind-develUpgrade samba-pythonUpgrade samba4-winbind-clientsUpgrade ipa-admintoolsUpgrade sambaUpgrade libsmbclientUpgrade samba4-develUpgrade samba4-pythonUpgrade libwbclientUpgrade libtdb-develUpgrade samba-dcUpgrade samba-docUpgrade samba3x-docUpgrade libldbUpgrade samba3x-domainjoin-guiUpgrade samba-swatUpgrade ipa-server-selinuxUpgrade libwbclient-develUpgrade ctdbUpgrade samba4-dcUpgrade ctdb-testsUpgrade libsmbclient-develUpgrade pyldb-develUpgrade ipa-server-dnsUpgrade samba4-dc-libsUpgrade samba4-testUpgrade samba-develUpgrade samba-vfs-glusterfsUpgrade python-tdbUpgrade samba4-winbind-krb5-locatorUpgrade libtalloc-develUpgrade openchange-clientUpgrade samba-dc-libsUpgrade openchange-develUpgrade ldb-toolsUpgrade samba-testUpgrade samba4Upgrade samba-glusterfsUpgrade libteventUpgrade libtdbUpgrade samba3x-clientUpgrade ipa-serverUpgrade samba4-commonUpgrade ipa-clientUpgrade samba4-pidlUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba3x-winbind-develUpgrade samba-common-toolsUpgrade pytallocUpgrade samba-test-develUpgrade samba4-libsUpgrade samba3x-swatUpgrade samba-test-libsUpgrade libtallocUpgrade samba4-clientUpgrade samba3x-commonUpgrade samba-winbind-krb5-locatorUpgrade openchangeUpgrade libtevent-develUpgrade ipa-server-trust-adUpgrade samba-client-libsUpgrade samba-common-libsUpgrade pyldbUpgrade samba3x-winbind | Apr 24, 2016 | Apr 24, 2016 |
| Samba | — | Upgrade to Samba version 4.2.11Upgrade to Samba version 4.4.2Upgrade to Samba version 4.3.8 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade libsamba-credentials-develUpgrade ldapsmbUpgrade libsamba-util-develUpgrade samba-kdcUpgrade libsmbconf0Upgrade libsamba-errors0-32bitUpgrade libtevent0-32bitUpgrade libsmbldap2-32bitUpgrade libndr-standard0Upgrade samba-x86Upgrade samba-cephUpgrade libsamba-policy0Upgrade libtevent0Upgrade libgensec0Upgrade samba-winbind-32bitUpgrade samba-client-x86Upgrade libndr0Upgrade samba-docUpgrade libsmbldap0-32bitUpgrade libsmbclient0-32bitUpgrade samba-krb-printingUpgrade ctdbUpgrade samba-libsUpgrade libdcerpc-binding0Upgrade libndr-nbt-develUpgrade samba-32bitUpgrade libgensec-develUpgrade libsamba-policy0-python3Upgrade libsamba-policy-develUpgrade libdcerpc-develUpgrade sambaUpgrade libndr1Upgrade libsmbclient-raw-develUpgrade libsamba-credentials0Upgrade libtalloc-develUpgrade libsamba-hostconfig0Upgrade samba-develUpgrade libndr-krb5pac0-32bitUpgrade libtalloc2-x86Upgrade libsmbsharemodes0Upgrade libdcerpc0-32bitUpgrade libtdb-develUpgrade libsmbclient0Upgrade libtevent-util-develUpgrade samba-libs-python3Upgrade libndr-standard0-32bitUpgrade libsamba-util0-32bitUpgrade samba-winbind-x86Upgrade libwbclient0Upgrade samba-libs-32bitUpgrade libtevent-util0Upgrade libsmbclient-develUpgrade samba-pythonUpgrade libdcerpc-samr-develUpgrade libsmbconf0-32bitUpgrade samba-winbindUpgrade libnetapi0Upgrade libsamba-credentials0-32bitUpgrade libndr-nbt0Upgrade libndr-krb5pac-develUpgrade libsamba-util0Upgrade libsmbsharemodes-develUpgrade libregistry-develUpgrade libsamba-passdb-develUpgrade libwbclient-develUpgrade samba-clientUpgrade samba-core-develUpgrade samba-testUpgrade libsmbldap-develUpgrade libtevent-util0-32bitUpgrade libndr0-32bitUpgrade libldb-develUpgrade libsmbclient-raw0-32bitUpgrade libsamba-passdb0Upgrade libsamba-errors0Upgrade libsamdb0-32bitUpgrade libtalloc2-32bitUpgrade libgensec0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libtalloc2Upgrade libndr-nbt0-32bitUpgrade libndr-krb5pac0Upgrade libsmbconf-develUpgrade libsamdb0Upgrade libnetapi-develUpgrade samba-client-32bitUpgrade samba-test-develUpgrade libsmbclient0-x86Upgrade libndr-develUpgrade libsamba-policy-python3-develUpgrade libnetapi0-32bitUpgrade samba-python3Upgrade libtevent-develUpgrade samba-dsdb-modulesUpgrade libdcerpc-samr0Upgrade libregistry0Upgrade libtdb1-x86Upgrade libldb1Upgrade libsamba-hostconfig0-32bitUpgrade libtdb1Upgrade libwbclient0-32bitUpgrade libwbclient0-x86Upgrade libtevent0-x86Upgrade samba-libs-python3-32bitUpgrade libndr1-32bitUpgrade libsmbldap2Upgrade libsamba-hostconfig-develUpgrade libdcerpc-atsvc0Upgrade libsamba-errors-develUpgrade ctdb-develUpgrade libdcerpc-atsvc-develUpgrade libndr-standard-develUpgrade libsmbclient-raw0Upgrade libsmbldap0Upgrade libdcerpc0Upgrade libtdb1-32bitUpgrade libsamdb-develUpgrade libsamba-passdb0-32bit | Apr 13, 2016 | Apr 13, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub