The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "server signing = mandatory" setting, which allows man-in-the-middle attackers to spoof SMB servers by modifying the client-server data stream.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade samba-common-toolsUpgrade samba-client-libsUpgrade ctdb-testsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade libwbclient-develUpgrade samba-test-develUpgrade samba-winbind-krb5-locatorUpgrade samba-vfs-glusterfsUpgrade libwbclientUpgrade samba-dcUpgrade libsmbclient-develUpgrade samba-pythonUpgrade samba-develUpgrade samba-test-libsUpgrade ctdbUpgrade samba-clientUpgrade samba-testUpgrade ctdb-develUpgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade samba-commonUpgrade samba-libsUpgrade samba-winbindUpgrade sambaUpgrade samba-pidlUpgrade samba-common-libs | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| Freebsd | — | Upgrade samba43Upgrade samba41Upgrade samba4Upgrade samba42Upgrade samba44Upgrade samba36 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libtdbUpgrade tdb-toolsUpgrade libwbclientUpgrade python-tdbUpgrade pytallocUpgrade samba-clientUpgrade libldbUpgrade libteventUpgrade libtallocUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-pythonUpgrade python-teventUpgrade sambaUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade libsmbclient | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade libtalloc-develUpgrade samba4-clientUpgrade libldbUpgrade ipa-server-trust-adUpgrade samba-dcUpgrade ipa-pythonUpgrade samba-test-libsUpgrade tdb-toolsUpgrade samba4Upgrade samba-testUpgrade libsmbclient-develUpgrade ldb-toolsUpgrade samba-pidlUpgrade python-tdbUpgrade ipa-admintoolsUpgrade sambaUpgrade ctdbUpgrade samba4-pythonUpgrade pytallocUpgrade pytalloc-develUpgrade samba-clientUpgrade libwbclientUpgrade samba4-dcUpgrade samba-vfs-glusterfsUpgrade samba-commonUpgrade samba-develUpgrade samba-libsUpgrade samba4-winbind-clientsUpgrade samba4-libsUpgrade samba-common-toolsUpgrade openchangeUpgrade samba4-pidlUpgrade openchange-devel-docsUpgrade samba4-winbindUpgrade libtdb-develUpgrade ipa-clientUpgrade pyldb-develUpgrade libtdbUpgrade openchange-clientUpgrade samba-winbindUpgrade libteventUpgrade libsmbclientUpgrade python-teventUpgrade samba4-winbind-krb5-locatorUpgrade libtallocUpgrade samba-dc-libsUpgrade ctdb-testsUpgrade libldb-develUpgrade samba-test-develUpgrade ipa-serverUpgrade samba4-testUpgrade samba-client-libsUpgrade pyldbUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-modulesUpgrade openchange-develUpgrade samba-winbind-clientsUpgrade ipa-server-selinuxUpgrade samba4-commonUpgrade samba4-develUpgrade libtevent-develUpgrade samba4-dc-libsUpgrade ctdb-develUpgrade samba-pythonUpgrade libwbclient-develUpgrade samba-common-libsUpgrade ipa-server-dns | Apr 13, 2016 | Apr 13, 2016 |
| Samba | — | Upgrade to Samba version 4.3.8Upgrade to Samba version 4.2.11Upgrade to Samba version 4.4.2 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade libgensec-develUpgrade samba-debuginfo-32bitUpgrade libregistry0-debuginfoUpgrade libndr-nbt0-32bitUpgrade libsamba-hostconfig0Upgrade samba-client-debuginfo-32bitUpgrade libsamba-passdb0-debuginfo-32bitUpgrade libndr-standard0-debuginfoUpgrade libdcerpc-binding0-32bitUpgrade libndr-standard-develUpgrade samba-libs-debuginfo-32bitUpgrade ctdb-tests-debuginfoUpgrade libsamba-util0-debuginfo-32bitUpgrade libsamdb0-debuginfo-32bitUpgrade libndr-standard0Upgrade libdcerpc0Upgrade libdcerpc-binding0-debuginfoUpgrade libsmbclient0-debuginfoUpgrade libgensec0-32bitUpgrade libsamba-credentials0-debuginfo-32bitUpgrade libtevent-util0-debuginfoUpgrade libdcerpc0-debuginfo-32bitUpgrade libsamba-hostconfig0-debuginfo-32bitUpgrade samba-python-debuginfoUpgrade libsamba-util0-32bitUpgrade samba-testUpgrade samba-test-debuginfoUpgrade libsmbclient-raw-develUpgrade libnetapi0-32bitUpgrade libsamba-policy0-32bitUpgrade libndr-standard0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsamba-hostconfig-develUpgrade samba-libsUpgrade libsamba-policy0Upgrade libsamba-passdb0Upgrade libdcerpc-samr0-debuginfo-32bitUpgrade libndr0Upgrade samba-libs-debuginfoUpgrade libndr-krb5pac0-debuginfo-32bitUpgrade libsamba-passdb-develUpgrade samba-test-develUpgrade libnetapi0-debuginfo-32bitUpgrade libsmbclient-develUpgrade libdcerpc-atsvc-develUpgrade libgensec0-debuginfoUpgrade libregistry0-32bitUpgrade libsmbconf0-debuginfo-32bitUpgrade libwbclient0Upgrade libsmbclient-raw0-debuginfoUpgrade libdcerpc-atsvc0-debuginfo-32bitUpgrade libtevent-util-develUpgrade libregistry0Upgrade libndr0-debuginfo-32bitUpgrade ctdb-pcp-pmda-debuginfoUpgrade libsmbconf0Upgrade libdcerpc-samr0Upgrade libndr-standard0-debuginfo-32bitUpgrade ctdbUpgrade samba-pidlUpgrade samba-client-32bitUpgrade libsmbldap-develUpgrade libnetapi0-debuginfoUpgrade libsamdb-develUpgrade libsmbldap0-debuginfo-32bitUpgrade libsamdb0-32bitUpgrade libndr0-debuginfoUpgrade libsamba-credentials0Upgrade libsmbldap0-32bitUpgrade samba-32bitUpgrade libsmbldap0Upgrade libdcerpc-samr0-32bitUpgrade libsamba-credentials-develUpgrade samba-libs-32bitUpgrade libsamba-passdb0-32bitUpgrade libdcerpc-binding0Upgrade samba-winbind-32bitUpgrade libsmbconf-develUpgrade samba-docUpgrade libsamba-util0-debuginfoUpgrade libsamba-policy0-debuginfoUpgrade ctdb-develUpgrade libsamba-policy-develUpgrade sambaUpgrade libsamdb0Upgrade libtevent-util0Upgrade libsmbconf0-32bitUpgrade ctdb-pcp-pmdaUpgrade libndr0-32bitUpgrade libtevent-util0-debuginfo-32bitUpgrade samba-clientUpgrade libsamba-hostconfig0-32bitUpgrade libtevent-util0-32bitUpgrade libsmbclient-raw0Upgrade libsamba-passdb0-debuginfoUpgrade libndr-develUpgrade libndr-nbt0-debuginfo-32bitUpgrade libsmbldap0-debuginfoUpgrade ctdb-testsUpgrade libndr-nbt0Upgrade samba-winbind-debuginfo-32bitUpgrade libwbclient0-32bitUpgrade samba-client-debuginfoUpgrade libdcerpc-atsvc0Upgrade libsamdb0-debuginfoUpgrade libdcerpc-samr0-debuginfoUpgrade libdcerpc-atsvc0-debuginfoUpgrade libsamba-util0Upgrade samba-winbindUpgrade libdcerpc0-debuginfoUpgrade libwbclient0-debuginfoUpgrade samba-debugsourceUpgrade libsmbclient0-debuginfo-32bitUpgrade samba-debuginfoUpgrade libgensec0Upgrade libsamba-credentials0-32bitUpgrade libndr-nbt-develUpgrade libnetapi-develUpgrade libwbclient0-debuginfo-32bitUpgrade libsamba-hostconfig0-debuginfoUpgrade libregistry0-debuginfo-32bitUpgrade libgensec0-debuginfo-32bitUpgrade libsmbclient0Upgrade samba-pythonUpgrade libdcerpc0-32bitUpgrade libndr-krb5pac0Upgrade libndr-nbt0-debuginfoUpgrade libsmbconf0-debuginfoUpgrade samba-core-develUpgrade libdcerpc-develUpgrade samba-winbind-debuginfoUpgrade libsamba-policy0-debuginfo-32bitUpgrade libndr-krb5pac0-debuginfoUpgrade libregistry-develUpgrade libsamba-util-develUpgrade libnetapi0Upgrade libsmbclient-raw0-debuginfo-32bitUpgrade libwbclient-develUpgrade libdcerpc-samr-develUpgrade ctdb-debuginfoUpgrade libdcerpc-atsvc0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libdcerpc-binding0-debuginfo-32bitUpgrade libndr-krb5pac-develUpgrade libsmbclient0-32bitUpgrade libsamba-credentials0-debuginfo | Apr 20, 2016 | Apr 20, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub