Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof LDAPS and HTTPS servers and obtain sensitive information via a crafted certificate.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade samba-libsUpgrade libwbclientUpgrade libsmbclient-develUpgrade libwbclient-develUpgrade samba-pidlUpgrade samba-client-libsUpgrade sambaUpgrade samba-winbindUpgrade ctdb-testsUpgrade samba-testUpgrade samba-pythonUpgrade samba-test-develUpgrade samba-common-toolsUpgrade samba-test-libsUpgrade samba-vfs-glusterfsUpgrade samba-clientUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade ctdbUpgrade ctdb-develUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-commonUpgrade samba-develUpgrade samba-winbind-modulesUpgrade samba-dcUpgrade samba-winbind-krb5-locator | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| Freebsd | — | Upgrade samba44Upgrade samba4Upgrade samba42Upgrade samba36Upgrade samba41Upgrade samba43 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libldbUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade pytallocUpgrade samba-commonUpgrade samba-common-libsUpgrade libteventUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-client-libsUpgrade python-teventUpgrade libtallocUpgrade tdb-toolsUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade python-tdbUpgrade samba-pythonUpgrade libwbclientUpgrade libtdbUpgrade samba | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade pytalloc-develUpgrade samba-client-libsUpgrade samba4-clientUpgrade samba-develUpgrade samba-testUpgrade ipa-server-selinuxUpgrade libsmbclient-develUpgrade samba4-dcUpgrade libtevent-develUpgrade libteventUpgrade samba-test-develUpgrade ctdb-testsUpgrade samba4-pythonUpgrade libtallocUpgrade samba-libsUpgrade samba4Upgrade python-tdbUpgrade libtalloc-develUpgrade ldb-toolsUpgrade openchangeUpgrade samba4-pidlUpgrade libwbclientUpgrade ipa-admintoolsUpgrade openchange-devel-docsUpgrade samba4-develUpgrade samba4-libsUpgrade samba-pidlUpgrade tdb-toolsUpgrade samba4-winbind-clientsUpgrade samba4-dc-libsUpgrade ipa-server-trust-adUpgrade sambaUpgrade libtdbUpgrade openchange-develUpgrade samba-dc-libsUpgrade samba-common-libsUpgrade pytallocUpgrade samba-winbindUpgrade libldbUpgrade ipa-clientUpgrade libldb-develUpgrade openchange-clientUpgrade ctdbUpgrade ipa-pythonUpgrade libtdb-develUpgrade python-teventUpgrade ctdb-develUpgrade samba4-testUpgrade samba-winbind-clientsUpgrade samba-dcUpgrade samba-vfs-glusterfsUpgrade samba-test-libsUpgrade ipa-serverUpgrade ipa-server-dnsUpgrade samba-common-toolsUpgrade samba-pythonUpgrade samba4-commonUpgrade samba4-winbindUpgrade samba-winbind-krb5-locatorUpgrade pyldbUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade libwbclient-develUpgrade libsmbclientUpgrade samba4-winbind-krb5-locatorUpgrade pyldb-develUpgrade samba-common | Apr 13, 2016 | Apr 13, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.1R10Update Pulse Connect Secure to version 8.2R5 | Oct 28, 2020 | Apr 25, 2016 |
| Samba | — | Upgrade to Samba version 4.4.2Upgrade to Samba version 4.2.11Upgrade to Samba version 4.3.8 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade libsmbldap0-32bitUpgrade libsamba-util0Upgrade samba-docUpgrade libtalloc2-x86Upgrade samba-cephUpgrade samba-develUpgrade samba-libs-python3Upgrade libwbclient0Upgrade libnetapi0Upgrade libsamba-credentials0-32bitUpgrade libtdb-develUpgrade libdcerpc-atsvc-develUpgrade libnetapi-develUpgrade libsamba-errors0Upgrade samba-pythonUpgrade samba-client-x86Upgrade libsmbclient-raw0Upgrade libsmbclient-develUpgrade libtalloc2Upgrade libsamba-errors0-32bitUpgrade libdcerpc-binding0Upgrade ctdb-develUpgrade libdcerpc-samr0Upgrade libsmbconf0Upgrade libsmbconf-develUpgrade libsamba-hostconfig0Upgrade samba-kdcUpgrade libsamba-policy0-python3Upgrade samba-krb-printingUpgrade libndr-krb5pac0-32bitUpgrade libsmbldap2Upgrade libndr0-32bitUpgrade samba-libs-32bitUpgrade libsmbsharemodes0Upgrade samba-dsdb-modulesUpgrade libsamba-hostconfig-develUpgrade libdcerpc-develUpgrade libgensec0-32bitUpgrade sambaUpgrade libsmbconf0-32bitUpgrade libtevent-util-develUpgrade libsamba-util0-32bitUpgrade samba-32bitUpgrade samba-winbind-32bitUpgrade ctdbUpgrade samba-x86Upgrade libtdb1-x86Upgrade samba-winbindUpgrade libndr1Upgrade libgensec-develUpgrade libtdb1-32bitUpgrade libndr-nbt0Upgrade libndr1-32bitUpgrade libndr0Upgrade libgensec0Upgrade libsmbldap-develUpgrade libsmbldap0Upgrade libsamba-errors-develUpgrade libndr-standard0Upgrade libsmbclient0Upgrade libtevent0-32bitUpgrade libsmbldap2-32bitUpgrade libtevent0Upgrade samba-testUpgrade libndr-nbt-develUpgrade libtevent-util0-32bitUpgrade libdcerpc-samr-develUpgrade libdcerpc0-32bitUpgrade libsmbsharemodes-develUpgrade samba-client-32bitUpgrade libwbclient0-x86Upgrade libndr-standard-develUpgrade samba-core-develUpgrade libregistry-develUpgrade samba-winbind-x86Upgrade libndr-standard0-32bitUpgrade libwbclient0-32bitUpgrade samba-test-develUpgrade libsmbclient0-x86Upgrade libsmbclient-raw0-32bitUpgrade libndr-krb5pac0Upgrade libtevent-develUpgrade libsamdb0Upgrade libldb1Upgrade libsamba-policy-develUpgrade samba-libs-python3-32bitUpgrade samba-python3Upgrade libsamdb0-32bitUpgrade libsamba-passdb0-32bitUpgrade libdcerpc-atsvc0Upgrade libtalloc-develUpgrade libsamdb-develUpgrade libnetapi0-32bitUpgrade libtdb1Upgrade libsamba-credentials-develUpgrade libsmbclient-raw-develUpgrade libndr-develUpgrade libwbclient-develUpgrade libregistry0Upgrade libsamba-policy0Upgrade libldb-develUpgrade samba-clientUpgrade libndr-nbt0-32bitUpgrade libdcerpc-binding0-32bitUpgrade samba-libsUpgrade libsamba-passdb0Upgrade libtalloc2-32bitUpgrade libtevent-util0Upgrade libtevent0-x86Upgrade libsamba-util-develUpgrade libsamba-policy-python3-develUpgrade ldapsmbUpgrade libsamba-credentials0Upgrade libsamba-hostconfig0-32bitUpgrade libsamba-passdb-develUpgrade libdcerpc0Upgrade libsmbclient0-32bitUpgrade libndr-krb5pac-devel | Apr 13, 2016 | Apr 13, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub