The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "server signing = mandatory" setting, which allows man-in-the-middle attackers to spoof SMB servers by modifying the client-server data stream.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade ctdb-develUpgrade libwbclientUpgrade samba-clientUpgrade ctdbUpgrade samba-develUpgrade samba-vfs-glusterfsUpgrade samba-pythonUpgrade samba-common-libsUpgrade samba-test-libsUpgrade samba-dc-libsUpgrade samba-commonUpgrade sambaUpgrade samba-dcUpgrade samba-winbindUpgrade libsmbclient-develUpgrade samba-testUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-pidlUpgrade samba-test-develUpgrade ctdb-testsUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade libsmbclientUpgrade libwbclient-devel | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| Freebsd | — | Upgrade samba43Upgrade samba42Upgrade samba41Upgrade samba4Upgrade samba44Upgrade samba36 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-winbind-clientsUpgrade samba-pythonUpgrade samba-commonUpgrade samba-common-libsUpgrade libsmbclientUpgrade sambaUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-winbindUpgrade python-teventUpgrade libtallocUpgrade samba-client-libsUpgrade libteventUpgrade tdb-toolsUpgrade libwbclientUpgrade samba-clientUpgrade libldbUpgrade python-tdbUpgrade pytallocUpgrade libtdb | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade ipa-serverUpgrade samba-test-develUpgrade ctdb-develUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade openchange-develUpgrade samba4-develUpgrade ipa-server-selinuxUpgrade openchange-clientUpgrade libsmbclientUpgrade libteventUpgrade libtevent-develUpgrade ipa-server-dnsUpgrade ctdb-testsUpgrade libwbclient-develUpgrade samba4-commonUpgrade python-teventUpgrade samba-dc-libsUpgrade pyldb-develUpgrade samba4-winbind-krb5-locatorUpgrade samba-winbind-krb5-locatorUpgrade ipa-clientUpgrade libtallocUpgrade pyldbUpgrade samba4-dc-libsUpgrade samba4-testUpgrade samba-common-libsUpgrade samba-pythonUpgrade libtdbUpgrade libldb-develUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade tdb-toolsUpgrade libtdb-develUpgrade sambaUpgrade openchange-devel-docsUpgrade pytalloc-develUpgrade ctdbUpgrade samba-commonUpgrade samba4-dcUpgrade libwbclientUpgrade libldbUpgrade samba-testUpgrade pytallocUpgrade python-tdbUpgrade samba4-pythonUpgrade samba4-libsUpgrade samba-libsUpgrade samba-develUpgrade samba-test-libsUpgrade ipa-server-trust-adUpgrade ipa-admintoolsUpgrade samba-dcUpgrade libtalloc-develUpgrade ipa-pythonUpgrade samba4-clientUpgrade samba-pidlUpgrade samba-clientUpgrade samba4Upgrade samba4-winbind-clientsUpgrade samba4-winbindUpgrade libsmbclient-develUpgrade ldb-toolsUpgrade openchangeUpgrade samba4-pidlUpgrade samba-vfs-glusterfsUpgrade samba-common-tools | Apr 13, 2016 | Apr 13, 2016 |
| Samba | — | Upgrade to Samba version 4.4.2Upgrade to Samba version 4.2.11Upgrade to Samba version 4.3.8 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade libndr0-32bitUpgrade libndr-nbt0-debuginfo-32bitUpgrade libwbclient0-debuginfoUpgrade samba-winbindUpgrade libsmbclient-raw0-debuginfo-32bitUpgrade libsamdb0Upgrade samba-winbind-debuginfo-32bitUpgrade ctdb-testsUpgrade libsamba-policy0-debuginfo-32bitUpgrade libwbclient-develUpgrade libtevent-util0-32bitUpgrade libgensec0Upgrade libsmbclient-raw0Upgrade libsmbclient-raw0-32bitUpgrade ctdb-debuginfoUpgrade ctdb-pcp-pmdaUpgrade libsmbconf0-32bitUpgrade samba-libs-32bitUpgrade samba-winbind-32bitUpgrade libtevent-util0-debuginfo-32bitUpgrade libndr-krb5pac0Upgrade libsmbclient0Upgrade libdcerpc-samr-develUpgrade libsmbldap0-debuginfoUpgrade libsmbclient0-32bitUpgrade libdcerpc-atsvc0-debuginfoUpgrade libndr-develUpgrade samba-docUpgrade libsamba-util0Upgrade libsmbldap0Upgrade samba-debugsourceUpgrade ctdb-develUpgrade libsamba-policy0-debuginfoUpgrade sambaUpgrade libregistry-develUpgrade samba-winbind-debuginfoUpgrade samba-clientUpgrade libsamba-hostconfig0-32bitUpgrade libwbclient0-32bitUpgrade libsamba-util-develUpgrade libdcerpc-binding0-debuginfo-32bitUpgrade libdcerpc-samr0-debuginfoUpgrade libnetapi-develUpgrade samba-client-debuginfoUpgrade libgensec0-debuginfo-32bitUpgrade libregistry0-debuginfo-32bitUpgrade libdcerpc-atsvc0Upgrade libwbclient0-debuginfo-32bitUpgrade libdcerpc-samr0-32bitUpgrade libsamba-hostconfig0-debuginfoUpgrade libsamba-credentials0-32bitUpgrade libsamba-credentials-develUpgrade libndr-nbt-develUpgrade libtevent-util0Upgrade samba-core-develUpgrade libdcerpc-binding0Upgrade libndr-nbt0Upgrade libdcerpc-atsvc0-32bitUpgrade libdcerpc0-debuginfoUpgrade libsamba-passdb0-32bitUpgrade libsamba-policy-develUpgrade libsmbconf-develUpgrade libsamba-util0-debuginfoUpgrade libndr-krb5pac0-debuginfoUpgrade libsamba-credentials0-debuginfoUpgrade libnetapi0Upgrade libsamdb0-debuginfoUpgrade libdcerpc-develUpgrade libsamba-passdb0-debuginfoUpgrade samba-debuginfoUpgrade libsmbclient0-debuginfo-32bitUpgrade libndr-nbt0-debuginfoUpgrade libsmbconf0-debuginfoUpgrade libdcerpc0-32bitUpgrade libndr-krb5pac-develUpgrade samba-pythonUpgrade libndr-standard0-debuginfo-32bitUpgrade libndr-standard-develUpgrade libsamdb-develUpgrade libsmbconf0-debuginfo-32bitUpgrade libsmbclient-raw0-debuginfoUpgrade libsamba-passdb-develUpgrade samba-32bitUpgrade libndr0-debuginfo-32bitUpgrade libndr0-debuginfoUpgrade libsmbldap0-32bitUpgrade samba-libs-debuginfo-32bitUpgrade libdcerpc-atsvc0-debuginfo-32bitUpgrade samba-testUpgrade libsamba-passdb0Upgrade libsmbldap-develUpgrade libnetapi0-32bitUpgrade samba-libs-debuginfoUpgrade libsamba-hostconfig0-debuginfo-32bitUpgrade libndr-standard0-32bitUpgrade libregistry0-32bitUpgrade libsamba-policy0-32bitUpgrade libwbclient0Upgrade libsamba-util0-debuginfo-32bitUpgrade libndr-krb5pac0-32bitUpgrade libdcerpc0Upgrade libsmbclient0-debuginfoUpgrade libsamdb0-debuginfo-32bitUpgrade libndr-standard0Upgrade libgensec0-32bitUpgrade libsamba-credentials0-debuginfo-32bitUpgrade samba-test-develUpgrade libsamba-hostconfig-develUpgrade libndr-krb5pac0-debuginfo-32bitUpgrade libsmbclient-raw-develUpgrade libsamba-passdb0-debuginfo-32bitUpgrade libsamba-credentials0Upgrade libndr-standard0-debuginfoUpgrade libndr-nbt0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libgensec-develUpgrade libregistry0-debuginfoUpgrade samba-client-debuginfo-32bitUpgrade samba-client-32bitUpgrade samba-python-debuginfoUpgrade libsamba-policy0Upgrade libsamdb0-32bitUpgrade libsmbconf0Upgrade ctdbUpgrade libsmbldap0-debuginfo-32bitUpgrade ctdb-tests-debuginfoUpgrade ctdb-pcp-pmda-debuginfoUpgrade libdcerpc-binding0-debuginfoUpgrade libdcerpc0-debuginfo-32bitUpgrade samba-pidlUpgrade samba-test-debuginfoUpgrade libdcerpc-samr0Upgrade libsamba-hostconfig0Upgrade samba-debuginfo-32bitUpgrade libtevent-util0-debuginfoUpgrade samba-libsUpgrade libndr0Upgrade libnetapi0-debuginfoUpgrade libdcerpc-samr0-debuginfo-32bitUpgrade libtevent-util-develUpgrade libsmbclient-develUpgrade libdcerpc-atsvc-develUpgrade libgensec0-debuginfoUpgrade libsamba-util0-32bitUpgrade libnetapi0-debuginfo-32bitUpgrade libregistry0 | Apr 20, 2016 | Apr 20, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub