The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade samba3x-commonUpgrade samba-swatUpgrade samba-test-develUpgrade samba-dc-libsUpgrade samba-pidlUpgrade libwbclient-develUpgrade samba-clientUpgrade samba3x-winbindUpgrade ctdb-develUpgrade samba-dcUpgrade samba-client-libsUpgrade samba3x-clientUpgrade samba-glusterfsUpgrade samba3xUpgrade ctdb-testsUpgrade samba3x-winbind-develUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba3x-domainjoin-guiUpgrade samba-common-libsUpgrade samba-testUpgrade samba-winbind-modulesUpgrade samba3x-docUpgrade libwbclientUpgrade sambaUpgrade samba-vfs-glusterfsUpgrade samba-winbind-krb5-locatorUpgrade samba-docUpgrade libsmbclient-develUpgrade samba-libsUpgrade samba-winbind-develUpgrade samba-develUpgrade ctdbUpgrade samba-domainjoin-guiUpgrade samba3x-swatUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-pythonUpgrade samba-winbindUpgrade samba-test-libs | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| Freebsd | — | Upgrade samba44Upgrade samba42Upgrade samba4Upgrade samba43Upgrade samba36Upgrade samba41 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Hpux | — | Update CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest version | Aug 11, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade sambaUpgrade libtallocUpgrade python-teventUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-libsUpgrade libsmbclientUpgrade samba-common-libsUpgrade libteventUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade libwbclientUpgrade pytallocUpgrade libldbUpgrade samba-clientUpgrade libtdbUpgrade python-tdbUpgrade samba-client-libsUpgrade tdb-tools | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade samba-glusterfsUpgrade samba4-clientUpgrade ipa-server-trust-adUpgrade samba3x-commonUpgrade samba3x-winbindUpgrade samba3x-clientUpgrade ipa-serverUpgrade samba3x-winbind-develUpgrade samba-winbind-krb5-locatorUpgrade samba3x-swatUpgrade samba-test-libsUpgrade pytallocUpgrade libtallocUpgrade openchangeUpgrade pyldbUpgrade samba-winbind-clientsUpgrade samba4-commonUpgrade samba-dc-libsUpgrade ldb-toolsUpgrade ipa-clientUpgrade samba-client-libsUpgrade samba-test-develUpgrade samba4-pidlUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-clientUpgrade samba4-libsUpgrade libtdbUpgrade openchange-develUpgrade libtevent-develUpgrade samba-testUpgrade libteventUpgrade samba4Upgrade samba-winbind-develUpgrade samba4-pythonUpgrade samba-winbindUpgrade pyldb-develUpgrade libsmbclient-develUpgrade samba-docUpgrade samba4-develUpgrade libldb-develUpgrade libwbclientUpgrade libldbUpgrade openchange-devel-docsUpgrade samba4-winbind-clientsUpgrade samba3x-domainjoin-guiUpgrade samba3x-docUpgrade libwbclient-develUpgrade ctdbUpgrade ctdb-testsUpgrade python-teventUpgrade samba4-dcUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade pytalloc-develUpgrade samba-pidlUpgrade ipa-admintoolsUpgrade ipa-pythonUpgrade tdb-toolsUpgrade samba-swatUpgrade ipa-server-dnsUpgrade samba-domainjoin-guiUpgrade samba-pythonUpgrade samba4-testUpgrade ipa-server-selinuxUpgrade libsmbclientUpgrade samba4-winbindUpgrade samba3xUpgrade ctdb-develUpgrade openchange-clientUpgrade samba4-winbind-krb5-locatorUpgrade libtalloc-develUpgrade samba-vfs-glusterfsUpgrade samba-develUpgrade python-tdbUpgrade samba-dcUpgrade sambaUpgrade libtdb-develUpgrade samba-libsUpgrade samba4-dc-libs | Apr 24, 2016 | Apr 24, 2016 |
| Samba | — | Upgrade to Samba version 4.2.11Upgrade to Samba version 4.3.8Upgrade to Samba version 4.4.2 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade samba-core-develUpgrade libldb-develUpgrade samba-testUpgrade libtdb1-x86Upgrade libndr-nbt0-32bitUpgrade samba-dsdb-modulesUpgrade libndr0-32bitUpgrade ctdb-develUpgrade libnetapi0-32bitUpgrade libsamdb0Upgrade libnetapi-develUpgrade libdcerpc-binding0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libsmbldap0Upgrade libsmbsharemodes-develUpgrade libldb1Upgrade libdcerpc-atsvc0Upgrade libtevent-develUpgrade libtalloc2-32bitUpgrade libsmbclient-raw0Upgrade samba-test-develUpgrade samba-python3Upgrade libsamba-passdb0-32bitUpgrade libtdb1-32bitUpgrade libsmbclient0-x86Upgrade libtalloc2Upgrade libsamdb0-32bitUpgrade libsamba-util0Upgrade libsamdb-develUpgrade libsamba-passdb-develUpgrade libwbclient0-32bitUpgrade libndr1-32bitUpgrade libwbclient-develUpgrade libwbclient0-x86Upgrade libndr-krb5pac-develUpgrade libsmbldap-develUpgrade libsmbldap2Upgrade libsamba-passdb0Upgrade samba-clientUpgrade libsamba-policy-python3-develUpgrade libdcerpc-samr0Upgrade libndr-krb5pac0Upgrade libtevent-util0-32bitUpgrade libsamba-hostconfig-develUpgrade samba-libs-python3-32bitUpgrade libtevent0-x86Upgrade libsmbconf-develUpgrade libgensec0-32bitUpgrade samba-client-32bitUpgrade libndr-develUpgrade libtdb1Upgrade libdcerpc-atsvc-develUpgrade libsamba-errors0Upgrade libsamba-hostconfig0-32bitUpgrade libdcerpc0Upgrade libndr-standard-develUpgrade libregistry0Upgrade libsamba-errors-develUpgrade libregistry-develUpgrade libsamba-policy-develUpgrade libsmbldap0-32bitUpgrade libsmbclient-raw-develUpgrade samba-docUpgrade libndr0Upgrade libtevent0Upgrade samba-kdcUpgrade libsmbldap2-32bitUpgrade libsamba-policy0Upgrade libsamba-hostconfig0Upgrade libsmbsharemodes0Upgrade libndr-krb5pac0-32bitUpgrade samba-krb-printingUpgrade samba-develUpgrade libsmbclient0-32bitUpgrade samba-libsUpgrade ctdbUpgrade samba-32bitUpgrade sambaUpgrade libwbclient0Upgrade samba-libs-32bitUpgrade samba-x86Upgrade samba-winbind-32bitUpgrade libsamba-util-develUpgrade libsmbconf0Upgrade libsamba-credentials-develUpgrade ldapsmbUpgrade samba-client-x86Upgrade libsamba-errors0-32bitUpgrade libndr-nbt-develUpgrade samba-pythonUpgrade libdcerpc-samr-develUpgrade libdcerpc-develUpgrade libdcerpc-binding0Upgrade libgensec-develUpgrade libsamba-policy0-python3Upgrade samba-cephUpgrade libndr1Upgrade libtevent-util0Upgrade libtalloc2-x86Upgrade libsmbclient-develUpgrade libsmbconf0-32bitUpgrade libtevent0-32bitUpgrade libndr-standard0Upgrade libgensec0Upgrade samba-winbind-x86Upgrade libtdb-develUpgrade libtalloc-develUpgrade libsmbclient0Upgrade libsamba-credentials0-32bitUpgrade libndr-nbt0Upgrade samba-winbindUpgrade libsamba-util0-32bitUpgrade samba-libs-python3Upgrade libtevent-util-develUpgrade libnetapi0Upgrade libsamba-credentials0Upgrade libndr-standard0-32bitUpgrade libdcerpc0-32bit | Apr 13, 2016 | Apr 13, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub