The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "server signing = mandatory" setting, which allows man-in-the-middle attackers to spoof SMB servers by modifying the client-server data stream.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade samba-winbind-krb5-locatorUpgrade libwbclient-develUpgrade ctdb-testsUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade samba-common-toolsUpgrade samba-test-develUpgrade libsmbclientUpgrade samba-develUpgrade ctdbUpgrade libwbclientUpgrade samba-winbind-clientsUpgrade samba-vfs-glusterfsUpgrade samba-test-libsUpgrade samba-winbindUpgrade samba-pythonUpgrade sambaUpgrade samba-clientUpgrade samba-dcUpgrade samba-testUpgrade samba-common-libsUpgrade samba-pidlUpgrade samba-libsUpgrade samba-commonUpgrade samba-dc-libsUpgrade ctdb-develUpgrade libsmbclient-devel | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| Freebsd | — | Upgrade samba42Upgrade samba4Upgrade samba43Upgrade samba41Upgrade samba36Upgrade samba44 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade pytallocUpgrade libteventUpgrade tdb-toolsUpgrade libwbclientUpgrade libtdbUpgrade python-tdbUpgrade samba-clientUpgrade libldbUpgrade sambaUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade python-teventUpgrade samba-libsUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba-commonUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade libtalloc | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade sambaUpgrade libtdb-develUpgrade ipa-pythonUpgrade tdb-toolsUpgrade openchangeUpgrade openchange-devel-docsUpgrade samba-testUpgrade ipa-server-trust-adUpgrade libtalloc-develUpgrade libwbclientUpgrade pytallocUpgrade samba4-winbindUpgrade libldbUpgrade samba-develUpgrade samba-dcUpgrade samba-common-toolsUpgrade samba4-winbind-clientsUpgrade ldb-toolsUpgrade samba-clientUpgrade pytalloc-develUpgrade samba4Upgrade ctdbUpgrade samba-pidlUpgrade samba4-pythonUpgrade samba-vfs-glusterfsUpgrade samba4-libsUpgrade libsmbclient-develUpgrade samba4-pidlUpgrade samba-test-libsUpgrade samba-commonUpgrade ipa-admintoolsUpgrade python-tdbUpgrade samba-libsUpgrade samba4-clientUpgrade samba4-dcUpgrade samba-client-libsUpgrade samba4-commonUpgrade pyldb-develUpgrade libtevent-develUpgrade ipa-server-dnsUpgrade samba-test-develUpgrade ipa-serverUpgrade ctdb-testsUpgrade samba4-testUpgrade samba-winbind-krb5-locatorUpgrade ctdb-develUpgrade pyldbUpgrade libldb-develUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade libtdbUpgrade python-teventUpgrade samba4-winbind-krb5-locatorUpgrade samba-dc-libsUpgrade openchange-clientUpgrade libteventUpgrade libtallocUpgrade samba4-develUpgrade samba-winbind-clientsUpgrade openchange-develUpgrade ipa-server-selinuxUpgrade libwbclient-develUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-common-libsUpgrade samba4-dc-libsUpgrade ipa-client | Apr 13, 2016 | Apr 13, 2016 |
| Samba | — | Upgrade to Samba version 4.4.2Upgrade to Samba version 4.2.11Upgrade to Samba version 4.3.8 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade libsamba-policy0-debuginfo-32bitUpgrade libregistry-develUpgrade libgensec0-debuginfo-32bitUpgrade samba-core-develUpgrade libndr-nbt-develUpgrade libnetapi0Upgrade libdcerpc-binding0Upgrade libsamba-passdb0-32bitUpgrade libregistry0-debuginfo-32bitUpgrade libsamba-credentials0-32bitUpgrade libndr-nbt0Upgrade libsmbclient-raw0-debuginfo-32bitUpgrade libsamba-policy-develUpgrade libdcerpc0-debuginfoUpgrade libwbclient-develUpgrade samba-winbind-32bitUpgrade samba-libs-32bitUpgrade samba-docUpgrade libsmbldap0Upgrade libsamba-policy0-debuginfoUpgrade samba-pythonUpgrade samba-debugsourceUpgrade ctdb-pcp-pmdaUpgrade libdcerpc-atsvc0-32bitUpgrade sambaUpgrade libsamdb0Upgrade libsmbconf0-debuginfoUpgrade samba-winbind-debuginfoUpgrade libsamba-util-develUpgrade samba-clientUpgrade libndr-nbt0-debuginfo-32bitUpgrade ctdb-testsUpgrade libndr-develUpgrade samba-winbind-debuginfo-32bitUpgrade libsmbldap0-debuginfoUpgrade libsmbclient0Upgrade libndr0-32bitUpgrade libwbclient0-debuginfoUpgrade libdcerpc-samr0-debuginfoUpgrade samba-client-debuginfoUpgrade samba-winbindUpgrade libdcerpc-atsvc0Upgrade libsamba-util0Upgrade libsamba-passdb0-debuginfoUpgrade libsmbconf0-32bitUpgrade libsamdb0-debuginfoUpgrade libsamba-credentials0-debuginfoUpgrade libwbclient0-32bitUpgrade libndr-nbt0-debuginfoUpgrade libtevent-util0-debuginfo-32bitUpgrade libtevent-util0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-util0-debuginfoUpgrade libnetapi-develUpgrade ctdb-debuginfoUpgrade libtevent-util0Upgrade libndr-krb5pac0Upgrade libwbclient0-debuginfo-32bitUpgrade libdcerpc-samr0-32bitUpgrade libsamba-credentials-develUpgrade ctdb-develUpgrade libndr-krb5pac0-debuginfoUpgrade libsmbconf-develUpgrade libdcerpc-develUpgrade libgensec0Upgrade libdcerpc-atsvc0-debuginfoUpgrade libdcerpc-binding0-debuginfo-32bitUpgrade samba-debuginfoUpgrade libsmbclient0-32bitUpgrade libndr-krb5pac-develUpgrade libsamba-hostconfig0-debuginfoUpgrade libdcerpc0-32bitUpgrade libdcerpc-samr-develUpgrade libsmbclient-raw0Upgrade libsmbclient0-debuginfo-32bitUpgrade libsmbclient-raw0-32bitUpgrade libdcerpc-samr0-debuginfo-32bitUpgrade libndr0Upgrade libsmbldap0-debuginfo-32bitUpgrade samba-test-develUpgrade libgensec-develUpgrade libregistry0-debuginfoUpgrade libtevent-util-develUpgrade samba-libs-debuginfo-32bitUpgrade libsamba-passdb-develUpgrade libsamba-hostconfig0Upgrade libnetapi0-32bitUpgrade libndr-standard0-32bitUpgrade libsamba-hostconfig-develUpgrade samba-client-32bitUpgrade libsamba-policy0Upgrade ctdbUpgrade samba-testUpgrade samba-32bitUpgrade libsamba-hostconfig0-debuginfo-32bitUpgrade libsmbldap0-32bitUpgrade libsmbclient-raw-develUpgrade libsamba-policy0-32bitUpgrade libndr-krb5pac0-debuginfo-32bitUpgrade libwbclient0Upgrade libsmbclient-raw0-debuginfoUpgrade libsamba-util0-32bitUpgrade ctdb-pcp-pmda-debuginfoUpgrade libsmbconf0Upgrade libsamdb0-debuginfo-32bitUpgrade libsmbclient-develUpgrade libsamba-util0-debuginfo-32bitUpgrade samba-debuginfo-32bitUpgrade libsamba-passdb0-debuginfo-32bitUpgrade libdcerpc-binding0-32bitUpgrade libndr-nbt0-32bitUpgrade libsamba-credentials0Upgrade libsamba-credentials0-debuginfo-32bitUpgrade libndr-standard0-debuginfoUpgrade libndr-standard0Upgrade samba-client-debuginfo-32bitUpgrade libgensec0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsmbclient0-debuginfoUpgrade libdcerpc0Upgrade samba-libs-debuginfoUpgrade libndr-standard-develUpgrade libdcerpc-atsvc-develUpgrade libdcerpc-atsvc0-debuginfo-32bitUpgrade libndr-standard0-debuginfo-32bitUpgrade libdcerpc-samr0Upgrade libsmbconf0-debuginfo-32bitUpgrade samba-pidlUpgrade libsamdb-develUpgrade libgensec0-debuginfoUpgrade libregistry0Upgrade libnetapi0-debuginfo-32bitUpgrade samba-libsUpgrade libsamdb0-32bitUpgrade libtevent-util0-debuginfoUpgrade libndr0-debuginfoUpgrade samba-python-debuginfoUpgrade samba-test-debuginfoUpgrade ctdb-tests-debuginfoUpgrade libdcerpc-binding0-debuginfoUpgrade libdcerpc0-debuginfo-32bitUpgrade libsmbldap-develUpgrade libregistry0-32bitUpgrade libndr0-debuginfo-32bitUpgrade libnetapi0-debuginfoUpgrade libsamba-passdb0 | Apr 20, 2016 | Apr 20, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub