The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "server signing = mandatory" setting, which allows man-in-the-middle attackers to spoof SMB servers by modifying the client-server data stream.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade samba-libsUpgrade ctdb-develUpgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade samba-commonUpgrade sambaUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba-pidlUpgrade libwbclientUpgrade samba-pythonUpgrade samba-clientUpgrade ctdbUpgrade samba-develUpgrade samba-dcUpgrade samba-test-libsUpgrade samba-testUpgrade libsmbclient-develUpgrade samba-client-libsUpgrade libsmbclientUpgrade samba-vfs-glusterfsUpgrade samba-test-develUpgrade ctdb-testsUpgrade samba-winbind-krb5-locatorUpgrade libwbclient-develUpgrade samba-common-toolsUpgrade samba-winbind-modules | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| Freebsd | — | Upgrade samba43Upgrade samba4Upgrade samba41Upgrade samba42Upgrade samba44Upgrade samba36 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libtdbUpgrade samba-clientUpgrade libldbUpgrade python-tdbUpgrade tdb-toolsUpgrade libteventUpgrade pytallocUpgrade libwbclientUpgrade libtallocUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade python-teventUpgrade samba-client-libsUpgrade samba-common-toolsUpgrade samba-pythonUpgrade sambaUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-libsUpgrade samba-winbind-modules | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade samba4-testUpgrade libtevent-develUpgrade samba-winbind-clientsUpgrade ipa-server-dnsUpgrade ipa-serverUpgrade samba-winbind-modulesUpgrade pyldb-develUpgrade libwbclient-develUpgrade libtdbUpgrade samba-winbind-krb5-locatorUpgrade samba-test-develUpgrade ctdb-testsUpgrade openchange-clientUpgrade python-teventUpgrade samba-winbindUpgrade ctdb-develUpgrade ipa-clientUpgrade samba4-commonUpgrade ipa-server-selinuxUpgrade openchange-develUpgrade samba4-develUpgrade samba4-dc-libsUpgrade samba4-winbind-krb5-locatorUpgrade samba-pythonUpgrade samba-dc-libsUpgrade libtallocUpgrade libldb-develUpgrade pyldbUpgrade samba-common-libsUpgrade libsmbclientUpgrade libteventUpgrade samba-client-libsUpgrade pytalloc-develUpgrade samba-dcUpgrade samba-common-toolsUpgrade openchange-devel-docsUpgrade ipa-admintoolsUpgrade samba4-clientUpgrade samba-clientUpgrade samba4-pythonUpgrade samba-libsUpgrade ctdbUpgrade samba-develUpgrade ldb-toolsUpgrade libsmbclient-develUpgrade libldbUpgrade samba4-pidlUpgrade libtdb-develUpgrade samba-testUpgrade samba4-dcUpgrade samba-commonUpgrade libwbclientUpgrade ipa-pythonUpgrade sambaUpgrade samba4-libsUpgrade samba-vfs-glusterfsUpgrade tdb-toolsUpgrade python-tdbUpgrade ipa-server-trust-adUpgrade libtalloc-develUpgrade pytallocUpgrade samba-test-libsUpgrade samba-pidlUpgrade samba4Upgrade openchangeUpgrade samba4-winbindUpgrade samba4-winbind-clients | Apr 13, 2016 | Apr 13, 2016 |
| Samba | — | Upgrade to Samba version 4.3.8Upgrade to Samba version 4.4.2Upgrade to Samba version 4.2.11 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade libdcerpc0-debuginfoUpgrade libtevent-util0-32bitUpgrade ctdb-develUpgrade libndr-develUpgrade libsmbclient-raw0-debuginfo-32bitUpgrade libwbclient0-32bitUpgrade libsamba-policy-develUpgrade libdcerpc-binding0-debuginfo-32bitUpgrade libtevent-util0Upgrade libndr-nbt0Upgrade libsamdb0Upgrade samba-winbind-debuginfoUpgrade libdcerpc-develUpgrade libregistry-develUpgrade samba-debuginfoUpgrade libndr-krb5pac0-debuginfoUpgrade libndr0-32bitUpgrade libdcerpc-atsvc0-32bitUpgrade libsamba-passdb0-debuginfoUpgrade libndr-nbt0-debuginfo-32bitUpgrade libsamba-policy0-debuginfo-32bitUpgrade libsmbclient0Upgrade libwbclient-develUpgrade libwbclient0-debuginfo-32bitUpgrade libnetapi-develUpgrade libsamba-credentials-develUpgrade libsmbldap0-debuginfoUpgrade libsamba-credentials0-32bitUpgrade libdcerpc-binding0Upgrade libregistry0-debuginfo-32bitUpgrade libnetapi0Upgrade samba-core-develUpgrade libsamba-hostconfig0-debuginfoUpgrade samba-debugsourceUpgrade libsamba-passdb0-32bitUpgrade libndr-krb5pac-develUpgrade libndr-nbt-develUpgrade libsmbconf0-32bitUpgrade libsmbclient0-32bitUpgrade libndr-nbt0-debuginfoUpgrade samba-libs-32bitUpgrade libdcerpc-samr0-32bitUpgrade libsmbclient0-debuginfo-32bitUpgrade libdcerpc-samr0-debuginfoUpgrade libsamdb0-debuginfoUpgrade samba-pythonUpgrade libsmbclient-raw0-32bitUpgrade samba-winbindUpgrade libdcerpc-atsvc0-debuginfoUpgrade libwbclient0-debuginfoUpgrade libdcerpc-atsvc0Upgrade samba-client-debuginfoUpgrade libsamba-util0Upgrade libdcerpc0-32bitUpgrade libgensec0Upgrade libsmbconf0-debuginfoUpgrade libtevent-util0-debuginfo-32bitUpgrade libsmbclient-raw0Upgrade libsamba-policy0-debuginfoUpgrade ctdb-pcp-pmdaUpgrade ctdb-testsUpgrade samba-winbind-debuginfo-32bitUpgrade libsamba-credentials0-debuginfoUpgrade ctdb-debuginfoUpgrade libgensec0-debuginfo-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-hostconfig0-32bitUpgrade samba-docUpgrade libsmbconf-develUpgrade libndr-krb5pac0Upgrade samba-clientUpgrade libsamba-util-develUpgrade libsmbldap0Upgrade libsamba-util0-debuginfoUpgrade samba-winbind-32bitUpgrade sambaUpgrade libndr-standard-develUpgrade libsamba-util0-32bitUpgrade libdcerpc-atsvc-develUpgrade libdcerpc-atsvc0-debuginfo-32bitUpgrade libsmbldap0-32bitUpgrade libsamba-policy0-32bitUpgrade libsmbclient-raw-develUpgrade libdcerpc0-debuginfo-32bitUpgrade libdcerpc-binding0-debuginfoUpgrade ctdb-tests-debuginfoUpgrade samba-test-debuginfoUpgrade libsamba-hostconfig-develUpgrade samba-testUpgrade libsamba-passdb-develUpgrade libnetapi0-32bitUpgrade libsmbldap-develUpgrade libndr0Upgrade libndr-standard0-32bitUpgrade libndr0-debuginfoUpgrade ctdb-pcp-pmda-debuginfoUpgrade libtevent-util-develUpgrade libndr0-debuginfo-32bitUpgrade libsamba-passdb0Upgrade libnetapi0-debuginfoUpgrade libsmbclient-develUpgrade samba-libsUpgrade libsmbconf0-debuginfo-32bitUpgrade libsamdb-develUpgrade libnetapi0-debuginfo-32bitUpgrade libregistry0Upgrade samba-libs-debuginfo-32bitUpgrade libndr-standard0-debuginfo-32bitUpgrade libgensec0-debuginfoUpgrade libsmbclient-raw0-debuginfoUpgrade libwbclient0Upgrade libsamba-credentials0Upgrade libtevent-util0-debuginfoUpgrade samba-debuginfo-32bitUpgrade libdcerpc0Upgrade libgensec0-32bitUpgrade libsmbclient0-debuginfoUpgrade libsamba-passdb0-debuginfo-32bitUpgrade samba-client-debuginfo-32bitUpgrade libgensec-develUpgrade libdcerpc-binding0-32bitUpgrade libndr-standard0-debuginfoUpgrade libndr-nbt0-32bitUpgrade libsamba-hostconfig0Upgrade libsamdb0-32bitUpgrade libsamba-policy0Upgrade samba-test-develUpgrade samba-client-32bitUpgrade libsmbldap0-debuginfo-32bitUpgrade libsmbconf0Upgrade libdcerpc-samr0Upgrade libsamdb0-debuginfo-32bitUpgrade libdcerpc-samr0-debuginfo-32bitUpgrade libregistry0-32bitUpgrade libregistry0-debuginfoUpgrade libsamba-credentials0-debuginfo-32bitUpgrade ctdbUpgrade libsamba-util0-debuginfo-32bitUpgrade libndr-standard0Upgrade libndr-krb5pac0-32bitUpgrade samba-pidlUpgrade samba-32bitUpgrade samba-python-debuginfoUpgrade libsamba-hostconfig0-debuginfo-32bitUpgrade libndr-krb5pac0-debuginfo-32bitUpgrade samba-libs-debuginfo | Apr 20, 2016 | Apr 20, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub