The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade samba-develUpgrade samba-commonUpgrade samba-domainjoin-guiUpgrade ctdbUpgrade samba-common-toolsUpgrade samba-docUpgrade sambaUpgrade libwbclientUpgrade samba-pythonUpgrade samba-test-libsUpgrade samba3x-swatUpgrade libsmbclient-develUpgrade samba-vfs-glusterfsUpgrade samba-winbind-krb5-locatorUpgrade samba-libsUpgrade samba-winbind-develUpgrade samba-winbindUpgrade samba3x-commonUpgrade samba-dcUpgrade samba-pidlUpgrade samba3xUpgrade ctdb-develUpgrade samba3x-clientUpgrade ctdb-testsUpgrade samba-glusterfsUpgrade samba3x-winbind-develUpgrade samba-clientUpgrade libsmbclientUpgrade samba3x-docUpgrade samba-winbind-modulesUpgrade samba-testUpgrade samba-common-libsUpgrade samba3x-domainjoin-guiUpgrade samba-test-develUpgrade libwbclient-develUpgrade samba3x-winbindUpgrade samba-swatUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade samba-client-libs | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| Freebsd | — | Upgrade samba41Upgrade samba36Upgrade samba43Upgrade samba42Upgrade samba44Upgrade samba4 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Hpux | — | Update CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest version | Aug 11, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade tdb-toolsUpgrade pytallocUpgrade samba-client-libsUpgrade python-tdbUpgrade libtdbUpgrade libldbUpgrade samba-clientUpgrade samba-common-libsUpgrade libwbclientUpgrade libtallocUpgrade sambaUpgrade libsmbclientUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-pythonUpgrade libteventUpgrade samba-libsUpgrade python-teventUpgrade samba-winbind-modules | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade libsmbclient-develUpgrade libwbclientUpgrade libldb-develUpgrade samba-docUpgrade libldbUpgrade samba4-dc-libsUpgrade ipa-server-dnsUpgrade samba-domainjoin-guiUpgrade samba-pythonUpgrade samba4-develUpgrade samba4-dcUpgrade samba-winbindUpgrade samba-swatUpgrade samba4-testUpgrade samba-commonUpgrade ipa-admintoolsUpgrade samba-libsUpgrade samba4-winbind-clientsUpgrade samba-winbind-modulesUpgrade pytalloc-develUpgrade samba3x-docUpgrade libsmbclientUpgrade openchange-clientUpgrade openchange-devel-docsUpgrade samba-pidlUpgrade ctdbUpgrade samba4-winbindUpgrade libtalloc-develUpgrade samba3xUpgrade samba3x-domainjoin-guiUpgrade ipa-server-selinuxUpgrade libwbclient-develUpgrade libtdb-develUpgrade ctdb-develUpgrade samba4-pythonUpgrade samba-winbind-develUpgrade python-teventUpgrade sambaUpgrade samba-dcUpgrade samba4-winbind-krb5-locatorUpgrade samba-develUpgrade ctdb-testsUpgrade samba-vfs-glusterfsUpgrade tdb-toolsUpgrade pyldb-develUpgrade python-tdbUpgrade ipa-pythonUpgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade samba-common-toolsUpgrade samba4Upgrade samba-clientUpgrade samba3x-winbind-develUpgrade ldb-toolsUpgrade samba4-pidlUpgrade libtevent-develUpgrade ipa-clientUpgrade samba-client-libsUpgrade openchangeUpgrade samba4-clientUpgrade samba-testUpgrade samba3x-commonUpgrade libtallocUpgrade samba3x-winbindUpgrade ipa-server-trust-adUpgrade samba-test-develUpgrade ipa-serverUpgrade samba-common-libsUpgrade samba-test-libsUpgrade samba-glusterfsUpgrade samba4-libsUpgrade samba3x-swatUpgrade pyldbUpgrade pytallocUpgrade samba-winbind-krb5-locatorUpgrade samba4-commonUpgrade samba3x-clientUpgrade openchange-develUpgrade libtdbUpgrade libtevent | Apr 24, 2016 | Apr 24, 2016 |
| Samba | — | Upgrade to Samba version 4.2.11Upgrade to Samba version 4.3.8Upgrade to Samba version 4.4.2 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade libdcerpc-atsvc-develUpgrade libgensec0-32bitUpgrade samba-dsdb-modulesUpgrade libndr-krb5pac0Upgrade libndr1-32bitUpgrade libsamdb0Upgrade libtdb1Upgrade libldb-develUpgrade libsmbsharemodes-develUpgrade libwbclient0-32bitUpgrade samba-testUpgrade libtalloc2Upgrade libsmbconf-develUpgrade libsamba-util0Upgrade libsamdb-develUpgrade libsamba-errors0Upgrade libsamba-hostconfig-develUpgrade libndr-krb5pac-develUpgrade libregistry0Upgrade libndr0-32bitUpgrade libsmbldap0Upgrade libsmbldap-develUpgrade libdcerpc-binding0-32bitUpgrade libnetapi-develUpgrade libtevent-develUpgrade libsamba-hostconfig0-32bitUpgrade samba-core-develUpgrade libsmbclient-raw0Upgrade libsamba-passdb0Upgrade libwbclient-develUpgrade libwbclient0-x86Upgrade ctdb-develUpgrade samba-clientUpgrade libtevent-util0-32bitUpgrade libndr-nbt0-32bitUpgrade libndr-standard-develUpgrade libsamdb0-32bitUpgrade libsamba-policy-python3-develUpgrade libdcerpc-samr0Upgrade libtevent0-x86Upgrade libsamba-passdb-develUpgrade libtalloc2-32bitUpgrade samba-python3Upgrade libsamba-errors-develUpgrade libtdb1-32bitUpgrade libsmbldap2Upgrade libnetapi0-32bitUpgrade libldb1Upgrade libndr-develUpgrade libdcerpc-atsvc0Upgrade libdcerpc0Upgrade samba-client-32bitUpgrade libregistry-develUpgrade samba-libs-python3-32bitUpgrade samba-test-develUpgrade libsamba-passdb0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libsmbclient0-x86Upgrade libtdb1-x86Upgrade samba-develUpgrade libsamba-credentials-develUpgrade samba-libs-32bitUpgrade libsmbldap2-32bitUpgrade samba-libsUpgrade libsmbldap0-32bitUpgrade samba-32bitUpgrade libdcerpc-samr-develUpgrade libsmbconf0Upgrade libwbclient0Upgrade ldapsmbUpgrade samba-krb-printingUpgrade libtevent0Upgrade libsmbclient-develUpgrade samba-kdcUpgrade libsamba-policy-develUpgrade sambaUpgrade libsamba-policy0Upgrade libdcerpc-develUpgrade samba-cephUpgrade libtevent-util0Upgrade libgensec-develUpgrade samba-winbind-x86Upgrade libdcerpc0-32bitUpgrade libsamba-credentials0-32bitUpgrade libtalloc-develUpgrade libndr-standard0-32bitUpgrade libsamba-credentials0Upgrade samba-winbindUpgrade libsamba-hostconfig0Upgrade libsmbclient-raw-develUpgrade libndr-krb5pac0-32bitUpgrade libtalloc2-x86Upgrade libsmbsharemodes0Upgrade libndr1Upgrade samba-libs-python3Upgrade libtevent-util-develUpgrade libsamba-util0-32bitUpgrade libsmbclient0Upgrade libndr-nbt0Upgrade libnetapi0Upgrade libtdb-develUpgrade libndr-standard0Upgrade libsmbconf0-32bitUpgrade samba-x86Upgrade libsamba-errors0-32bitUpgrade samba-client-x86Upgrade ctdbUpgrade samba-winbind-32bitUpgrade samba-docUpgrade libndr0Upgrade libsmbclient0-32bitUpgrade libsamba-util-develUpgrade samba-pythonUpgrade libgensec0Upgrade libtevent0-32bitUpgrade libndr-nbt-develUpgrade libdcerpc-binding0Upgrade libsamba-policy0-python3 | Apr 13, 2016 | Apr 13, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub