Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof LDAPS and HTTPS servers and obtain sensitive information via a crafted certificate.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade libwbclient-develUpgrade samba-pidlUpgrade ctdb-testsUpgrade samba-pythonUpgrade libwbclientUpgrade samba-winbindUpgrade samba-test-develUpgrade samba-testUpgrade libsmbclient-develUpgrade sambaUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-dc-libsUpgrade samba-vfs-glusterfsUpgrade samba-dcUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade ctdbUpgrade samba-commonUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-develUpgrade samba-test-libsUpgrade samba-common-libsUpgrade ctdb-devel | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| Freebsd | — | Upgrade samba36Upgrade samba43Upgrade samba41Upgrade samba44Upgrade samba42Upgrade samba4 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade pytallocUpgrade libldbUpgrade samba-libsUpgrade libteventUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-client-libsUpgrade samba-pythonUpgrade libtdbUpgrade sambaUpgrade tdb-toolsUpgrade python-tdbUpgrade libtallocUpgrade samba-winbindUpgrade libsmbclientUpgrade libwbclientUpgrade samba-winbind-modulesUpgrade python-tevent | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade samba4-dc-libsUpgrade ipa-server-trust-adUpgrade samba4-winbindUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-vfs-glusterfsUpgrade sambaUpgrade ipa-pythonUpgrade samba4-winbind-krb5-locatorUpgrade libtdbUpgrade openchange-develUpgrade pyldbUpgrade pyldb-develUpgrade samba-clientUpgrade libwbclient-develUpgrade ipa-serverUpgrade samba-common-toolsUpgrade samba-commonUpgrade pytallocUpgrade samba-pythonUpgrade samba-dc-libsUpgrade python-teventUpgrade libldb-develUpgrade ipa-clientUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade ipa-server-dnsUpgrade samba4-testUpgrade libtdb-develUpgrade openchange-clientUpgrade libldbUpgrade samba-test-libsUpgrade ctdbUpgrade samba4-commonUpgrade ctdb-develUpgrade samba-dcUpgrade openchange-devel-docsUpgrade ipa-admintoolsUpgrade samba4Upgrade libtallocUpgrade python-tdbUpgrade samba-testUpgrade samba4-libsUpgrade tdb-toolsUpgrade samba4-develUpgrade samba4-winbind-clientsUpgrade samba-libsUpgrade libwbclientUpgrade libtevent-develUpgrade samba-pidlUpgrade samba4-pidlUpgrade libtalloc-develUpgrade ldb-toolsUpgrade openchangeUpgrade samba4-clientUpgrade libsmbclient-develUpgrade samba-client-libsUpgrade pytalloc-develUpgrade libteventUpgrade samba4-dcUpgrade ipa-server-selinuxUpgrade ctdb-testsUpgrade samba-test-develUpgrade samba4-pythonUpgrade samba-devel | Apr 13, 2016 | Apr 13, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.2R5Update Pulse Connect Secure to version 8.1R10 | Oct 28, 2020 | Apr 25, 2016 |
| Samba | — | Upgrade to Samba version 4.2.11Upgrade to Samba version 4.4.2Upgrade to Samba version 4.3.8 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade libndr-standard0-32bitUpgrade libtevent-util0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libldb-develUpgrade samba-test-develUpgrade libdcerpc-samr-develUpgrade libnetapi0-32bitUpgrade libndr-krb5pac-develUpgrade libwbclient0-32bitUpgrade libsamba-policy-develUpgrade libsamdb0-32bitUpgrade samba-core-develUpgrade libdcerpc-atsvc0Upgrade samba-testUpgrade libsmbclient0-x86Upgrade libsmbclient-raw-develUpgrade libsmbclient-raw0-32bitUpgrade libtalloc2-32bitUpgrade libdcerpc0Upgrade libregistry0Upgrade libldb1Upgrade libsamba-passdb0-32bitUpgrade libsmbclient0-32bitUpgrade libtevent-develUpgrade ldapsmbUpgrade libregistry-develUpgrade libsamba-policy0Upgrade samba-libsUpgrade libsamdb-develUpgrade libndr-nbt-develUpgrade libtalloc-develUpgrade libwbclient-develUpgrade libsamba-passdb0Upgrade libtdb1Upgrade libsamdb0Upgrade libndr-standard-develUpgrade libsmbsharemodes-develUpgrade libdcerpc0-32bitUpgrade libndr-nbt0-32bitUpgrade libwbclient0-x86Upgrade libndr-develUpgrade samba-client-32bitUpgrade libsamba-credentials-develUpgrade samba-winbind-x86Upgrade samba-python3Upgrade libsamba-credentials0Upgrade libtevent0-x86Upgrade libtevent-util0Upgrade libsamba-policy-python3-develUpgrade samba-libs-python3-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-util-develUpgrade libndr-krb5pac0Upgrade samba-clientUpgrade libtevent0Upgrade libsamba-passdb-develUpgrade libndr0-32bitUpgrade libsamba-hostconfig-develUpgrade libtalloc2-x86Upgrade samba-pythonUpgrade libndr1Upgrade libsamba-errors-develUpgrade libsmbldap0Upgrade libgensec0Upgrade libtdb1-x86Upgrade samba-32bitUpgrade libdcerpc-develUpgrade samba-client-x86Upgrade libsamba-hostconfig0Upgrade libndr-nbt0Upgrade libsmbldap-develUpgrade libgensec-develUpgrade libtdb1-32bitUpgrade libndr1-32bitUpgrade samba-kdcUpgrade samba-docUpgrade libdcerpc-samr0Upgrade libsamba-util0Upgrade ctdb-develUpgrade libsmbclient-raw0Upgrade samba-cephUpgrade libndr-krb5pac0-32bitUpgrade samba-libs-32bitUpgrade libsmbldap2Upgrade libsmbsharemodes0Upgrade samba-winbindUpgrade libsmbclient0Upgrade libgensec0-32bitUpgrade libtevent0-32bitUpgrade libsmbconf0-32bitUpgrade libsmbldap2-32bitUpgrade samba-libs-python3Upgrade samba-develUpgrade libsamba-util0-32bitUpgrade libwbclient0Upgrade libsamba-errors0Upgrade samba-dsdb-modulesUpgrade sambaUpgrade libdcerpc-binding0Upgrade libtevent-util-develUpgrade libsmbldap0-32bitUpgrade libnetapi0Upgrade samba-krb-printingUpgrade libsamba-credentials0-32bitUpgrade libdcerpc-atsvc-develUpgrade libndr-standard0Upgrade libtdb-develUpgrade libsamba-policy0-python3Upgrade libnetapi-develUpgrade libsmbconf0Upgrade ctdbUpgrade samba-winbind-32bitUpgrade libsmbclient-develUpgrade libsmbconf-develUpgrade libsamba-errors0-32bitUpgrade libtalloc2Upgrade samba-x86Upgrade libndr0 | Apr 13, 2016 | Apr 13, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub