The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade libsmbclient-develUpgrade libwbclientUpgrade samba-common-toolsUpgrade sambaUpgrade samba-develUpgrade samba-winbindUpgrade samba-domainjoin-guiUpgrade samba-commonUpgrade samba-pythonUpgrade samba-libsUpgrade samba-test-libsUpgrade samba-docUpgrade samba-vfs-glusterfsUpgrade samba-winbind-develUpgrade ctdbUpgrade samba-winbind-krb5-locatorUpgrade samba3x-swatUpgrade samba-common-libsUpgrade samba3xUpgrade samba3x-winbindUpgrade ctdb-develUpgrade samba-client-libsUpgrade samba-pidlUpgrade libsmbclientUpgrade samba-swatUpgrade samba3x-commonUpgrade samba-testUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade libwbclient-develUpgrade samba-test-develUpgrade samba3x-winbind-develUpgrade ctdb-testsUpgrade samba3x-clientUpgrade samba-glusterfsUpgrade samba-dcUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade samba3x-domainjoin-guiUpgrade samba3x-doc | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| Freebsd | — | Upgrade samba36Upgrade samba43Upgrade samba41Upgrade samba4Upgrade samba42Upgrade samba44 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Hpux | — | Update CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest version | Aug 11, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libtdbUpgrade tdb-toolsUpgrade python-tdbUpgrade samba-client-libsUpgrade samba-clientUpgrade libldbUpgrade pytallocUpgrade samba-commonUpgrade libteventUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade libtallocUpgrade samba-winbindUpgrade libwbclientUpgrade samba-libsUpgrade libsmbclientUpgrade python-teventUpgrade samba-winbind-modulesUpgrade samba-pythonUpgrade sambaUpgrade samba-common-tools | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade samba-clientUpgrade samba4-libsUpgrade samba-test-libsUpgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade samba-winbind-krb5-locatorUpgrade samba4-commonUpgrade samba4-pidlUpgrade samba-common-toolsUpgrade samba-test-develUpgrade pyldbUpgrade samba-common-libsUpgrade libtdbUpgrade samba4Upgrade openchange-develUpgrade libteventUpgrade samba3x-clientUpgrade samba-glusterfsUpgrade ipa-serverUpgrade ipa-clientUpgrade samba-client-libsUpgrade libtevent-develUpgrade ldb-toolsUpgrade samba-testUpgrade pytallocUpgrade openchangeUpgrade samba3x-swatUpgrade samba3x-winbind-develUpgrade samba4-clientUpgrade samba3x-commonUpgrade samba3x-winbindUpgrade ipa-server-trust-adUpgrade libtallocUpgrade ipa-server-selinuxUpgrade samba-docUpgrade samba4-pythonUpgrade samba-domainjoin-guiUpgrade samba4-testUpgrade ctdbUpgrade samba-pythonUpgrade samba4-develUpgrade ctdb-develUpgrade samba4-winbindUpgrade python-teventUpgrade pytalloc-develUpgrade libsmbclient-develUpgrade samba-winbind-develUpgrade samba4-dc-libsUpgrade samba3x-docUpgrade samba-commonUpgrade samba3xUpgrade samba-pidlUpgrade ipa-server-dnsUpgrade ctdb-testsUpgrade samba-winbindUpgrade libsmbclientUpgrade libwbclient-develUpgrade libwbclientUpgrade libldbUpgrade openchange-clientUpgrade samba4-winbind-krb5-locatorUpgrade libtalloc-develUpgrade samba-vfs-glusterfsUpgrade samba-develUpgrade python-tdbUpgrade pyldb-develUpgrade libldb-develUpgrade samba3x-domainjoin-guiUpgrade ipa-admintoolsUpgrade ipa-pythonUpgrade tdb-toolsUpgrade libtdb-develUpgrade samba-libsUpgrade samba-dcUpgrade sambaUpgrade openchange-devel-docsUpgrade samba-winbind-modulesUpgrade samba-swatUpgrade samba4-winbind-clientsUpgrade samba4-dc | Apr 24, 2016 | Apr 24, 2016 |
| Samba | — | Upgrade to Samba version 4.3.8Upgrade to Samba version 4.4.2Upgrade to Samba version 4.2.11 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade libndr1-32bitUpgrade libldb-develUpgrade libndr-krb5pac-develUpgrade libtalloc2Upgrade libsmbsharemodes-develUpgrade libwbclient0-x86Upgrade libtevent-util0-32bitUpgrade libsmbldap2Upgrade libsmbldap-develUpgrade libsamba-passdb0Upgrade samba-clientUpgrade ctdb-develUpgrade libndr0-32bitUpgrade libnetapi-develUpgrade libsmbclient0-x86Upgrade libndr-nbt0-32bitUpgrade libregistry0Upgrade libldb1Upgrade libtalloc2-32bitUpgrade samba-client-32bitUpgrade libtevent0-x86Upgrade libsmbconf-develUpgrade libdcerpc-samr0Upgrade libtevent-develUpgrade libwbclient0-32bitUpgrade libsamba-hostconfig-develUpgrade libdcerpc-binding0-32bitUpgrade samba-testUpgrade samba-core-develUpgrade libsamdb0Upgrade libsamba-policy-python3-develUpgrade libndr-krb5pac0Upgrade samba-libs-python3-32bitUpgrade libgensec0-32bitUpgrade libsamba-passdb-develUpgrade libsmbclient-raw0-32bitUpgrade libdcerpc-atsvc-develUpgrade samba-test-develUpgrade libndr-standard-develUpgrade libsamba-passdb0-32bitUpgrade libsamdb0-32bitUpgrade libsamdb-develUpgrade libregistry-develUpgrade libsamba-errors0Upgrade libtdb1-32bitUpgrade libsmbclient-raw0Upgrade libndr-develUpgrade libdcerpc0Upgrade libdcerpc-atsvc0Upgrade libsamba-hostconfig0-32bitUpgrade libnetapi0-32bitUpgrade libsmbldap0Upgrade samba-dsdb-modulesUpgrade libtdb1Upgrade libsamba-util0Upgrade libsamba-errors-develUpgrade libwbclient-develUpgrade samba-python3Upgrade libtdb1-x86Upgrade libsmbldap2-32bitUpgrade samba-docUpgrade samba-pythonUpgrade samba-winbindUpgrade libsmbclient0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsamba-hostconfig0Upgrade samba-x86Upgrade libsamba-errors0-32bitUpgrade libndr1Upgrade libtevent0Upgrade libwbclient0Upgrade libsmbclient-develUpgrade libtevent-util0Upgrade libsmbconf0Upgrade libdcerpc-samr-develUpgrade samba-libs-32bitUpgrade libsamba-policy-develUpgrade libgensec-develUpgrade samba-develUpgrade libsmbclient-raw-develUpgrade samba-32bitUpgrade ctdbUpgrade libtalloc2-x86Upgrade libsamba-credentials0-32bitUpgrade libdcerpc0-32bitUpgrade samba-client-x86Upgrade samba-libs-python3Upgrade libndr-standard0Upgrade libtevent-util-develUpgrade libsmbconf0-32bitUpgrade libtevent0-32bitUpgrade libgensec0Upgrade libdcerpc-binding0Upgrade libsmbsharemodes0Upgrade libndr-nbt-develUpgrade libsamba-policy0-python3Upgrade libsamba-credentials0Upgrade libtalloc-develUpgrade libtdb-develUpgrade libsamba-util0-32bitUpgrade samba-libsUpgrade libnetapi0Upgrade libsmbclient0Upgrade libndr-standard0-32bitUpgrade samba-cephUpgrade libsamba-credentials-develUpgrade libndr0Upgrade libsamba-util-develUpgrade samba-winbind-32bitUpgrade samba-winbind-x86Upgrade ldapsmbUpgrade libndr-nbt0Upgrade libsmbldap0-32bitUpgrade libdcerpc-develUpgrade libsamba-policy0Upgrade samba-krb-printingUpgrade samba-kdcUpgrade samba | Apr 13, 2016 | Apr 13, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub