The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade samba-client-libsUpgrade samba3xUpgrade ctdb-develUpgrade samba-common-libsUpgrade samba3x-docUpgrade libsmbclientUpgrade samba3x-domainjoin-guiUpgrade samba3x-clientUpgrade samba-glusterfsUpgrade ctdb-testsUpgrade samba3x-winbind-develUpgrade samba-winbind-clientsUpgrade samba-testUpgrade samba-clientUpgrade libwbclient-develUpgrade samba-dcUpgrade samba-winbind-modulesUpgrade samba3x-commonUpgrade samba-test-develUpgrade samba-swatUpgrade samba-pidlUpgrade samba-dc-libsUpgrade samba3x-winbindUpgrade samba-develUpgrade samba-winbindUpgrade samba-docUpgrade samba-vfs-glusterfsUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-domainjoin-guiUpgrade samba-commonUpgrade ctdbUpgrade samba-winbind-develUpgrade sambaUpgrade samba-pythonUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade libsmbclient-develUpgrade samba3x-swatUpgrade samba-libs | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| Freebsd | — | Upgrade samba44Upgrade samba42Upgrade samba4Upgrade samba43Upgrade samba36Upgrade samba41 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Hpux | — | Update CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest version | Aug 11, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-client-libsUpgrade libtdbUpgrade python-tdbUpgrade tdb-toolsUpgrade samba-clientUpgrade libldbUpgrade pytallocUpgrade libwbclientUpgrade samba-libsUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade libtallocUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-commonUpgrade python-teventUpgrade sambaUpgrade libsmbclientUpgrade libtevent | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade samba-develUpgrade samba4-winbind-krb5-locatorUpgrade libtalloc-develUpgrade samba-vfs-glusterfsUpgrade python-tdbUpgrade samba-winbindUpgrade ipa-server-selinuxUpgrade openchange-devel-docsUpgrade ctdb-testsUpgrade samba-commonUpgrade python-teventUpgrade libwbclient-develUpgrade samba3x-domainjoin-guiUpgrade samba4-winbindUpgrade samba-winbind-develUpgrade samba-pidlUpgrade libsmbclientUpgrade samba3xUpgrade samba-domainjoin-guiUpgrade samba4-dcUpgrade sambaUpgrade ctdb-develUpgrade samba-pythonUpgrade samba-libsUpgrade tdb-toolsUpgrade ipa-pythonUpgrade samba4-winbind-clientsUpgrade ctdbUpgrade samba3x-docUpgrade pytalloc-develUpgrade libldb-develUpgrade ipa-server-dnsUpgrade samba4-dc-libsUpgrade samba-swatUpgrade samba4-testUpgrade openchange-clientUpgrade pyldb-develUpgrade ipa-admintoolsUpgrade samba4-pythonUpgrade libtdb-develUpgrade libsmbclient-develUpgrade samba-dcUpgrade samba4-develUpgrade samba-winbind-modulesUpgrade samba-docUpgrade libldbUpgrade libwbclientUpgrade samba3x-clientUpgrade samba3x-winbindUpgrade ldb-toolsUpgrade samba3x-winbind-develUpgrade libteventUpgrade openchange-develUpgrade ipa-clientUpgrade ipa-serverUpgrade libtdbUpgrade samba-glusterfsUpgrade samba3x-commonUpgrade samba4Upgrade samba4-commonUpgrade samba-test-libsUpgrade pyldbUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libsUpgrade libtallocUpgrade samba-common-toolsUpgrade samba-clientUpgrade ipa-server-trust-adUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade samba-testUpgrade samba-client-libsUpgrade openchangeUpgrade pytallocUpgrade libtevent-develUpgrade samba3x-swatUpgrade samba-test-develUpgrade samba4-clientUpgrade samba4-libsUpgrade samba4-pidl | Apr 24, 2016 | Apr 24, 2016 |
| Samba | — | Upgrade to Samba version 4.2.11Upgrade to Samba version 4.3.8Upgrade to Samba version 4.4.2 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade libregistry-develUpgrade samba-test-develUpgrade libsmbclient-raw0Upgrade libsamdb0Upgrade libdcerpc-atsvc0Upgrade samba-testUpgrade samba-core-develUpgrade libsmbconf-develUpgrade samba-python3Upgrade samba-libs-python3-32bitUpgrade libtdb1Upgrade libtalloc2Upgrade libsmbldap0Upgrade samba-dsdb-modulesUpgrade libsamba-hostconfig-develUpgrade libsamba-passdb0Upgrade libsamba-errors0Upgrade libsmbclient-raw0-32bitUpgrade libsmbsharemodes-develUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc-samr0Upgrade libdcerpc-atsvc-develUpgrade libdcerpc0Upgrade libndr-krb5pac-develUpgrade libndr-nbt0-32bitUpgrade libtdb1-x86Upgrade samba-client-32bitUpgrade libtevent-util0-32bitUpgrade libsmbldap2Upgrade libtevent0-x86Upgrade libldb1Upgrade libwbclient0-x86Upgrade libsamba-hostconfig0-32bitUpgrade libsamba-errors-develUpgrade libnetapi0-32bitUpgrade libndr-develUpgrade samba-clientUpgrade ctdb-develUpgrade libregistry0Upgrade libsmbldap-develUpgrade libwbclient0-32bitUpgrade libndr1-32bitUpgrade libwbclient-develUpgrade libtevent-develUpgrade libnetapi-develUpgrade libndr-krb5pac0Upgrade libsamba-util0Upgrade libtalloc2-32bitUpgrade libsamba-passdb-develUpgrade libsamba-policy-python3-develUpgrade libndr0-32bitUpgrade libsamdb-develUpgrade libgensec0-32bitUpgrade libldb-develUpgrade libsamdb0-32bitUpgrade libsamba-passdb0-32bitUpgrade libtdb1-32bitUpgrade libndr-standard-develUpgrade libsmbclient0-x86Upgrade ldapsmbUpgrade libtevent0-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-util0-32bitUpgrade libgensec0Upgrade libsmbconf0-32bitUpgrade samba-client-x86Upgrade libsamba-errors0-32bitUpgrade libndr-nbt0Upgrade libndr-nbt-develUpgrade libgensec-develUpgrade samba-docUpgrade samba-x86Upgrade libtdb-develUpgrade samba-winbind-32bitUpgrade libsmbclient0Upgrade libdcerpc0-32bitUpgrade libsamba-credentials0Upgrade samba-winbindUpgrade samba-libs-32bitUpgrade libndr-standard0-32bitUpgrade samba-pythonUpgrade libwbclient0Upgrade libsmbclient-develUpgrade libtevent-util0Upgrade libsmbconf0Upgrade libtevent0Upgrade libsmbldap2-32bitUpgrade libsamba-policy0Upgrade libsamba-credentials-develUpgrade libsamba-hostconfig0Upgrade libndr-standard0Upgrade libdcerpc-binding0Upgrade libdcerpc-develUpgrade libsamba-policy0-python3Upgrade samba-cephUpgrade libsamba-util-develUpgrade libtevent-util-develUpgrade libnetapi0Upgrade libsamba-credentials0-32bitUpgrade libtalloc-develUpgrade ctdbUpgrade samba-winbind-x86Upgrade libsmbldap0-32bitUpgrade samba-kdcUpgrade samba-krb-printingUpgrade samba-32bitUpgrade libsamba-policy-develUpgrade samba-libsUpgrade sambaUpgrade libndr1Upgrade libsmbclient0-32bitUpgrade libtalloc2-x86Upgrade libsmbclient-raw-develUpgrade samba-develUpgrade libsmbsharemodes0Upgrade samba-libs-python3Upgrade libndr-krb5pac0-32bitUpgrade libndr0 | Apr 13, 2016 | Apr 13, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub