Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof LDAPS and HTTPS servers and obtain sensitive information via a crafted certificate.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade samba-testUpgrade ctdb-testsUpgrade libwbclient-develUpgrade libsmbclient-develUpgrade samba-client-libsUpgrade sambaUpgrade samba-pythonUpgrade samba-winbindUpgrade samba-test-develUpgrade samba-pidlUpgrade libwbclientUpgrade samba-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-modulesUpgrade samba-develUpgrade samba-dcUpgrade libsmbclientUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade ctdb-develUpgrade samba-clientUpgrade samba-dc-libsUpgrade samba-common-toolsUpgrade samba-vfs-glusterfsUpgrade samba-test-libsUpgrade samba-common-libsUpgrade ctdb | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| Freebsd | — | Upgrade samba44Upgrade samba4Upgrade samba42Upgrade samba43Upgrade samba36Upgrade samba41 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libwbclientUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-pythonUpgrade libsmbclientUpgrade tdb-toolsUpgrade python-tdbUpgrade libtallocUpgrade sambaUpgrade samba-winbind-modulesUpgrade libtdbUpgrade python-teventUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-commonUpgrade samba-common-toolsUpgrade libteventUpgrade pytallocUpgrade libldb | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade sambaUpgrade samba-common-toolsUpgrade ipa-pythonUpgrade samba4-dc-libsUpgrade pytallocUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade pyldb-develUpgrade ctdbUpgrade samba-dcUpgrade libsmbclientUpgrade pyldbUpgrade samba4-commonUpgrade ipa-serverUpgrade ctdb-develUpgrade samba-test-libsUpgrade libtdb-develUpgrade ipa-server-dnsUpgrade openchange-clientUpgrade libtdbUpgrade samba-pythonUpgrade samba-dc-libsUpgrade samba-winbind-krb5-locatorUpgrade openchange-develUpgrade ipa-server-trust-adUpgrade libwbclient-develUpgrade samba4-winbind-krb5-locatorUpgrade samba-common-libsUpgrade samba-winbindUpgrade libldb-develUpgrade ipa-clientUpgrade python-teventUpgrade libldbUpgrade samba-commonUpgrade samba4-testUpgrade samba-winbind-clientsUpgrade samba-vfs-glusterfsUpgrade samba4-winbindUpgrade samba-test-develUpgrade openchange-devel-docsUpgrade samba4-winbind-clientsUpgrade samba-testUpgrade samba4-libsUpgrade ldb-toolsUpgrade libtallocUpgrade samba-develUpgrade libteventUpgrade samba-pidlUpgrade libtevent-develUpgrade samba4-dcUpgrade libtalloc-develUpgrade openchangeUpgrade samba4Upgrade ipa-server-selinuxUpgrade ctdb-testsUpgrade samba4-pythonUpgrade python-tdbUpgrade samba-client-libsUpgrade samba4-clientUpgrade samba4-pidlUpgrade pytalloc-develUpgrade samba-libsUpgrade libsmbclient-develUpgrade libwbclientUpgrade ipa-admintoolsUpgrade samba4-develUpgrade tdb-tools | Apr 13, 2016 | Apr 13, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.1R10Update Pulse Connect Secure to version 8.2R5 | Oct 28, 2020 | Apr 25, 2016 |
| Samba | — | Upgrade to Samba version 4.2.11Upgrade to Samba version 4.3.8Upgrade to Samba version 4.4.2 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade samba-python3Upgrade libtevent0-x86Upgrade libdcerpc-atsvc0Upgrade libsmbsharemodes-develUpgrade samba-test-develUpgrade libnetapi0-32bitUpgrade libndr-krb5pac-develUpgrade libsamba-policy-develUpgrade libsamdb0-32bitUpgrade libdcerpc-samr-develUpgrade libtalloc-develUpgrade libsmbclient0-x86Upgrade samba-testUpgrade samba-core-develUpgrade libsamba-policy0Upgrade libtevent-develUpgrade libsmbclient0-32bitUpgrade libndr-krb5pac0Upgrade libndr-nbt0-32bitUpgrade libldb-develUpgrade libsamba-passdb0Upgrade libsamba-passdb-develUpgrade libsamba-passdb0-32bitUpgrade libsamdb0Upgrade libtdb1Upgrade libndr-standard-develUpgrade libdcerpc0-32bitUpgrade libwbclient-develUpgrade libsmbclient-raw-develUpgrade libwbclient0-x86Upgrade samba-client-32bitUpgrade samba-libs-python3-32bitUpgrade libsamba-util-develUpgrade libtevent-util0-32bitUpgrade samba-clientUpgrade libsamba-credentials-develUpgrade libtalloc2-32bitUpgrade libldb1Upgrade libndr-standard0-32bitUpgrade libsamdb-develUpgrade samba-winbind-x86Upgrade libregistry0Upgrade samba-libsUpgrade libdcerpc-binding0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libregistry-develUpgrade libndr-develUpgrade libwbclient0-32bitUpgrade libdcerpc0Upgrade libsamba-hostconfig0-32bitUpgrade ldapsmbUpgrade libtevent-util0Upgrade libsamba-policy-python3-develUpgrade libndr-nbt-develUpgrade libtevent0Upgrade libsamba-credentials0Upgrade libsmbldap2Upgrade libsamba-policy0-python3Upgrade libsmbconf-develUpgrade ctdbUpgrade libsmbclient-develUpgrade libdcerpc-atsvc-develUpgrade libndr-standard0Upgrade libtdb-develUpgrade libsamba-credentials0-32bitUpgrade samba-client-x86Upgrade libsmbsharemodes0Upgrade samba-pythonUpgrade libdcerpc-develUpgrade libtalloc2Upgrade libsmbclient0Upgrade samba-dsdb-modulesUpgrade libsmbconf0-32bitUpgrade libtevent-util-develUpgrade libndr0-32bitUpgrade libnetapi0Upgrade libsamba-errors0-32bitUpgrade samba-winbindUpgrade samba-libs-32bitUpgrade samba-32bitUpgrade libsmbldap0-32bitUpgrade libsamba-errors0Upgrade libgensec0-32bitUpgrade samba-x86Upgrade sambaUpgrade libsamba-errors-develUpgrade samba-develUpgrade libtalloc2-x86Upgrade libsmbclient-raw0Upgrade libsmbldap-develUpgrade libndr-nbt0Upgrade libgensec-develUpgrade libsamba-util0Upgrade libtdb1-32bitUpgrade libndr-krb5pac0-32bitUpgrade samba-cephUpgrade libdcerpc-samr0Upgrade libsamba-hostconfig0Upgrade samba-kdcUpgrade ctdb-develUpgrade samba-docUpgrade samba-libs-python3Upgrade libndr1Upgrade libsamba-util0-32bitUpgrade libwbclient0Upgrade libdcerpc-binding0Upgrade libgensec0Upgrade libndr1-32bitUpgrade samba-krb-printingUpgrade libtevent0-32bitUpgrade libsmbconf0Upgrade libsamba-hostconfig-develUpgrade samba-winbind-32bitUpgrade libsmbldap2-32bitUpgrade libndr0Upgrade libtdb1-x86Upgrade libsmbldap0Upgrade libnetapi-devel | Apr 13, 2016 | Apr 13, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub