The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade libwbclientUpgrade samba-commonUpgrade samba-docUpgrade ctdbUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-develUpgrade samba-pythonUpgrade samba-winbind-krb5-locatorUpgrade libsmbclient-develUpgrade samba-domainjoin-guiUpgrade samba-libsUpgrade samba-winbind-develUpgrade samba-test-libsUpgrade samba-vfs-glusterfsUpgrade samba3x-swatUpgrade sambaUpgrade samba-client-libsUpgrade samba-glusterfsUpgrade samba3x-winbind-develUpgrade samba3x-docUpgrade samba3x-domainjoin-guiUpgrade samba-pidlUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-testUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba3x-clientUpgrade samba-dc-libsUpgrade samba-dcUpgrade samba3x-winbindUpgrade samba-test-develUpgrade ctdb-testsUpgrade libwbclient-develUpgrade samba3x-commonUpgrade samba-clientUpgrade samba-swatUpgrade samba3xUpgrade ctdb-devel | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| Freebsd | — | Upgrade samba42Upgrade samba44Upgrade samba4Upgrade samba41Upgrade samba36Upgrade samba43 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Hpux | — | Update CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest version | Aug 11, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libtdbUpgrade libldbUpgrade tdb-toolsUpgrade samba-clientUpgrade pytallocUpgrade python-tdbUpgrade samba-client-libsUpgrade sambaUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-commonUpgrade libwbclientUpgrade python-teventUpgrade samba-winbindUpgrade libtallocUpgrade samba-libsUpgrade libtevent | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade ipa-server-trust-adUpgrade libtallocUpgrade samba4-clientUpgrade samba3x-commonUpgrade samba3x-winbindUpgrade ldb-toolsUpgrade openchange-develUpgrade libtdbUpgrade samba3x-swatUpgrade samba4-libsUpgrade pytallocUpgrade samba-test-develUpgrade samba-dc-libsUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba4-pidlUpgrade libteventUpgrade samba-clientUpgrade libtevent-develUpgrade samba-glusterfsUpgrade samba-client-libsUpgrade pyldbUpgrade samba-testUpgrade samba-test-libsUpgrade ipa-clientUpgrade samba4-commonUpgrade openchangeUpgrade samba-common-libsUpgrade samba-winbind-krb5-locatorUpgrade samba3x-clientUpgrade ipa-serverUpgrade samba3x-winbind-develUpgrade samba4Upgrade pyldb-develUpgrade samba4-pythonUpgrade libwbclientUpgrade libsmbclient-develUpgrade samba-winbind-modulesUpgrade samba-docUpgrade samba-pidlUpgrade samba4-winbindUpgrade pytalloc-develUpgrade samba3xUpgrade openchange-devel-docsUpgrade libsmbclientUpgrade samba4-dc-libsUpgrade samba-swatUpgrade libldb-develUpgrade samba3x-docUpgrade samba-winbindUpgrade samba-libsUpgrade tdb-toolsUpgrade samba-dcUpgrade sambaUpgrade ipa-server-dnsUpgrade samba-domainjoin-guiUpgrade python-teventUpgrade samba4-winbind-krb5-locatorUpgrade ipa-pythonUpgrade ctdb-develUpgrade samba-winbind-develUpgrade samba3x-domainjoin-guiUpgrade ipa-server-selinuxUpgrade samba4-testUpgrade libwbclient-develUpgrade samba-commonUpgrade ctdbUpgrade openchange-clientUpgrade libtdb-develUpgrade ipa-admintoolsUpgrade samba4-develUpgrade samba-develUpgrade python-tdbUpgrade samba-vfs-glusterfsUpgrade libtalloc-develUpgrade samba4-dcUpgrade samba4-winbind-clientsUpgrade samba-pythonUpgrade ctdb-testsUpgrade libldb | Apr 24, 2016 | Apr 24, 2016 |
| Samba | — | Upgrade to Samba version 4.2.11Upgrade to Samba version 4.3.8Upgrade to Samba version 4.4.2 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade samba-winbind-32bitUpgrade libndr0Upgrade libwbclient0Upgrade libtevent-util0Upgrade samba-libs-32bitUpgrade libsamba-credentials-develUpgrade libtevent0Upgrade libsmbconf0Upgrade libsmbldap2-32bitUpgrade libndr-nbt-develUpgrade samba-cephUpgrade ldapsmbUpgrade libsamba-errors0-32bitUpgrade libdcerpc-binding0Upgrade libsamba-policy0-python3Upgrade samba-docUpgrade samba-pythonUpgrade libsmbclient-develUpgrade libsamba-hostconfig0Upgrade libndr-krb5pac0-32bitUpgrade libsmbclient-raw-develUpgrade samba-client-x86Upgrade libgensec0Upgrade libdcerpc-samr-develUpgrade samba-x86Upgrade libndr1Upgrade libsamba-credentials0-32bitUpgrade libsmbsharemodes0Upgrade libtalloc2-x86Upgrade libsamba-util0-32bitUpgrade samba-develUpgrade samba-kdcUpgrade samba-32bitUpgrade libndr-nbt0Upgrade libnetapi0Upgrade sambaUpgrade libsmbclient0-32bitUpgrade libtalloc-develUpgrade libsmbldap0-32bitUpgrade libdcerpc-develUpgrade libsamba-util-develUpgrade libndr-standard0-32bitUpgrade libtdb-develUpgrade libsamba-credentials0Upgrade libndr-standard0Upgrade libtevent0-32bitUpgrade samba-winbind-x86Upgrade samba-winbindUpgrade libsamba-policy0Upgrade libdcerpc0-32bitUpgrade libsmbconf0-32bitUpgrade samba-libsUpgrade samba-libs-python3Upgrade ctdbUpgrade libgensec-develUpgrade libsamba-policy-develUpgrade samba-krb-printingUpgrade libsmbclient0Upgrade libtevent-util-develUpgrade samba-python3Upgrade samba-core-develUpgrade libndr-krb5pac-develUpgrade libwbclient0-x86Upgrade libtdb1-x86Upgrade samba-client-32bitUpgrade libldb1Upgrade libdcerpc-samr0Upgrade libsamba-policy-python3-develUpgrade libdcerpc-atsvc-develUpgrade libsamba-errors0Upgrade libsamdb0-32bitUpgrade libregistry-develUpgrade libsamba-passdb0-32bitUpgrade libndr-standard-develUpgrade libsmbclient-raw0-32bitUpgrade samba-test-develUpgrade libtevent-develUpgrade libsmbsharemodes-develUpgrade libdcerpc-atsvc0Upgrade libwbclient-develUpgrade libndr1-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libnetapi0-32bitUpgrade libdcerpc0Upgrade libsmbldap0Upgrade libsmbclient0-x86Upgrade libtdb1-32bitUpgrade libdcerpc-binding0-32bitUpgrade libwbclient0-32bitUpgrade libsmbclient-raw0Upgrade libndr-develUpgrade libsamdb-develUpgrade libtevent0-x86Upgrade libsamba-util0Upgrade samba-dsdb-modulesUpgrade libsmbconf-develUpgrade libsamba-errors-develUpgrade libndr-krb5pac0Upgrade libgensec0-32bitUpgrade libsamdb0Upgrade libsamba-hostconfig-develUpgrade libtdb1Upgrade samba-libs-python3-32bitUpgrade libnetapi-develUpgrade libtalloc2Upgrade libndr-nbt0-32bitUpgrade ctdb-develUpgrade libsamba-passdb-develUpgrade libsamba-passdb0Upgrade libldb-develUpgrade libndr0-32bitUpgrade libsmbldap-develUpgrade libtevent-util0-32bitUpgrade libsmbldap2Upgrade samba-testUpgrade libregistry0Upgrade samba-clientUpgrade libtalloc2-32bit | Apr 13, 2016 | Apr 13, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub