Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof LDAPS and HTTPS servers and obtain sensitive information via a crafted certificate.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade samba-winbind-modulesUpgrade samba-clientUpgrade ctdb-develUpgrade samba-dc-libsUpgrade samba-vfs-glusterfsUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-dcUpgrade samba-winbind-krb5-locatorUpgrade samba-develUpgrade samba-common-libsUpgrade samba-test-libsUpgrade ctdbUpgrade samba-winbindUpgrade samba-testUpgrade samba-pidlUpgrade samba-pythonUpgrade samba-libsUpgrade samba-client-libsUpgrade ctdb-testsUpgrade libwbclientUpgrade sambaUpgrade samba-test-develUpgrade libsmbclient-develUpgrade libwbclient-devel | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| Freebsd | — | Upgrade samba41Upgrade samba42Upgrade samba43Upgrade samba36Upgrade samba44Upgrade samba4 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-commonUpgrade samba-winbind-clientsUpgrade pytallocUpgrade samba-libsUpgrade libteventUpgrade samba-common-toolsUpgrade samba-clientUpgrade libldbUpgrade samba-common-libsUpgrade libtallocUpgrade libwbclientUpgrade samba-winbindUpgrade samba-pythonUpgrade libsmbclientUpgrade libtdbUpgrade python-tdbUpgrade python-teventUpgrade samba-client-libsUpgrade tdb-toolsUpgrade samba-winbind-modulesUpgrade samba | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade ipa-clientUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade libldbUpgrade pyldbUpgrade samba4-testUpgrade samba-winbind-modulesUpgrade samba4-winbind-krb5-locatorUpgrade pyldb-develUpgrade libldb-develUpgrade samba-commonUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-test-libsUpgrade samba-pythonUpgrade python-teventUpgrade ipa-server-trust-adUpgrade ipa-serverUpgrade openchange-develUpgrade pytallocUpgrade sambaUpgrade samba-winbind-krb5-locatorUpgrade samba4-winbindUpgrade libwbclient-develUpgrade samba-common-libsUpgrade samba-vfs-glusterfsUpgrade ipa-server-dnsUpgrade libtdb-develUpgrade ipa-pythonUpgrade openchange-clientUpgrade libtdbUpgrade samba-dc-libsUpgrade samba4-dc-libsUpgrade samba-dcUpgrade ctdbUpgrade ctdb-develUpgrade samba4-commonUpgrade samba-testUpgrade samba4-winbind-clientsUpgrade tdb-toolsUpgrade libwbclientUpgrade samba-libsUpgrade libtalloc-develUpgrade openchangeUpgrade python-tdbUpgrade ldb-toolsUpgrade ipa-admintoolsUpgrade samba-pidlUpgrade libteventUpgrade libtevent-develUpgrade samba-develUpgrade samba4-develUpgrade libtallocUpgrade samba4-pidlUpgrade samba4Upgrade samba-client-libsUpgrade samba4-clientUpgrade pytalloc-develUpgrade libsmbclient-develUpgrade samba4-libsUpgrade openchange-devel-docsUpgrade ctdb-testsUpgrade samba4-dcUpgrade samba-test-develUpgrade ipa-server-selinuxUpgrade samba4-python | Apr 13, 2016 | Apr 13, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.2R5Update Pulse Connect Secure to version 8.1R10 | Oct 28, 2020 | Apr 25, 2016 |
| Samba | — | Upgrade to Samba version 4.3.8Upgrade to Samba version 4.4.2Upgrade to Samba version 4.2.11 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade samba-winbind-x86Upgrade samba-python3Upgrade libldb1Upgrade libtalloc-develUpgrade libwbclient0-32bitUpgrade libtevent-develUpgrade samba-libsUpgrade libregistry-develUpgrade libdcerpc0Upgrade samba-clientUpgrade libsamba-credentials0Upgrade samba-test-develUpgrade libdcerpc-binding0-32bitUpgrade libsmbclient0-x86Upgrade samba-testUpgrade libsmbclient-raw0-32bitUpgrade libnetapi0-32bitUpgrade libndr-krb5pac-develUpgrade libtalloc2-32bitUpgrade libtevent0Upgrade libsamdb-develUpgrade libtevent-util0-32bitUpgrade libsmbclient-raw-develUpgrade libsamba-passdb0-32bitUpgrade samba-libs-python3-32bitUpgrade libndr-nbt0-32bitUpgrade libndr-standard0-32bitUpgrade libdcerpc-samr-develUpgrade libwbclient-develUpgrade libndr-standard-develUpgrade samba-client-32bitUpgrade libtdb1Upgrade libdcerpc-atsvc0Upgrade libwbclient0-x86Upgrade libsamba-hostconfig0-32bitUpgrade libndr-develUpgrade libdcerpc0-32bitUpgrade libldb-develUpgrade libsamba-passdb-develUpgrade libsamba-credentials-develUpgrade libndr-krb5pac0Upgrade libsmbsharemodes-develUpgrade libsmbclient0-32bitUpgrade libregistry0Upgrade libsamdb0-32bitUpgrade libndr-nbt-develUpgrade libtevent-util0Upgrade libsamdb0Upgrade libsamba-passdb0Upgrade libsamba-policy0Upgrade libtevent0-x86Upgrade ldapsmbUpgrade libsamba-policy-python3-develUpgrade libsamba-util-develUpgrade samba-core-develUpgrade libsamba-policy-develUpgrade libsamba-errors0-32bitUpgrade libndr0-32bitUpgrade samba-docUpgrade samba-client-x86Upgrade samba-pythonUpgrade samba-libs-32bitUpgrade libsamba-hostconfig-develUpgrade libsmbldap2Upgrade libsmbsharemodes0Upgrade libsmbldap-develUpgrade libtalloc2Upgrade ctdbUpgrade samba-krb-printingUpgrade libdcerpc-binding0Upgrade libwbclient0Upgrade libdcerpc-develUpgrade samba-32bitUpgrade libtevent0-32bitUpgrade samba-dsdb-modulesUpgrade libsmbldap2-32bitUpgrade libsmbclient0Upgrade libsmbldap0-32bitUpgrade libsmbconf0-32bitUpgrade libgensec0-32bitUpgrade samba-kdcUpgrade libsmbclient-develUpgrade samba-winbindUpgrade libsmbclient-raw0Upgrade libnetapi0Upgrade libdcerpc-samr0Upgrade libsamba-util0Upgrade libtalloc2-x86Upgrade libsmbconf-develUpgrade libtdb1-32bitUpgrade libgensec0Upgrade libndr-nbt0Upgrade libndr0Upgrade libndr1-32bitUpgrade libsamba-errors-develUpgrade samba-winbind-32bitUpgrade samba-cephUpgrade libgensec-develUpgrade libsamba-errors0Upgrade libsmbconf0Upgrade samba-x86Upgrade ctdb-develUpgrade libsmbldap0Upgrade libndr1Upgrade libtdb1-x86Upgrade sambaUpgrade libtevent-util-develUpgrade libsamba-policy0-python3Upgrade libdcerpc-atsvc-develUpgrade libnetapi-develUpgrade libsamba-credentials0-32bitUpgrade libtdb-develUpgrade libndr-standard0Upgrade libsamba-hostconfig0Upgrade libndr-krb5pac0-32bitUpgrade samba-develUpgrade samba-libs-python3Upgrade libsamba-util0-32bit | Apr 13, 2016 | Apr 13, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub