The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "server signing = mandatory" setting, which allows man-in-the-middle attackers to spoof SMB servers by modifying the client-server data stream.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade samba-client-libsUpgrade libsmbclientUpgrade libwbclient-develUpgrade samba-test-develUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade ctdb-testsUpgrade samba-test-libsUpgrade ctdbUpgrade samba-pythonUpgrade samba-develUpgrade samba-dcUpgrade samba-commonUpgrade samba-libsUpgrade samba-dc-libsUpgrade sambaUpgrade samba-testUpgrade samba-pidlUpgrade libsmbclient-develUpgrade samba-vfs-glusterfsUpgrade samba-winbindUpgrade samba-common-libsUpgrade ctdb-develUpgrade libwbclientUpgrade samba-winbind-clientsUpgrade samba-client | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| Freebsd | — | Upgrade samba43Upgrade samba41Upgrade samba42Upgrade samba44Upgrade samba36Upgrade samba4 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-libsUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade python-teventUpgrade libtallocUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade samba-pythonUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-commonUpgrade pytallocUpgrade samba-clientUpgrade libldbUpgrade python-tdbUpgrade libtdbUpgrade libteventUpgrade libwbclientUpgrade tdb-tools | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade samba4-dcUpgrade samba-pidlUpgrade samba-commonUpgrade libwbclientUpgrade samba4-winbind-clientsUpgrade libtdb-develUpgrade tdb-toolsUpgrade ipa-pythonUpgrade samba-testUpgrade pytallocUpgrade samba-dcUpgrade ipa-server-trust-adUpgrade samba-develUpgrade pytalloc-develUpgrade ctdbUpgrade samba4-winbindUpgrade samba-test-libsUpgrade libsmbclient-develUpgrade libtalloc-develUpgrade libldbUpgrade samba4-libsUpgrade openchangeUpgrade samba-vfs-glusterfsUpgrade samba-libsUpgrade samba-clientUpgrade python-tdbUpgrade samba4-pidlUpgrade ldb-toolsUpgrade ipa-admintoolsUpgrade samba-common-toolsUpgrade samba4Upgrade sambaUpgrade samba4-pythonUpgrade openchange-devel-docsUpgrade samba4-clientUpgrade samba-common-libsUpgrade libtdbUpgrade libwbclient-develUpgrade ipa-clientUpgrade samba4-dc-libsUpgrade samba4-testUpgrade ipa-serverUpgrade pyldb-develUpgrade samba-winbind-modulesUpgrade ctdb-testsUpgrade openchange-develUpgrade libtevent-develUpgrade ipa-server-selinuxUpgrade samba4-develUpgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade ipa-server-dnsUpgrade libtallocUpgrade samba4-commonUpgrade samba4-winbind-krb5-locatorUpgrade python-teventUpgrade openchange-clientUpgrade libsmbclientUpgrade libteventUpgrade samba-winbindUpgrade samba-test-develUpgrade samba-winbind-krb5-locatorUpgrade samba-client-libsUpgrade pyldbUpgrade libldb-develUpgrade ctdb-develUpgrade samba-python | Apr 13, 2016 | Apr 13, 2016 |
| Samba | — | Upgrade to Samba version 4.4.2Upgrade to Samba version 4.3.8Upgrade to Samba version 4.2.11 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade libsamba-hostconfig0-debuginfoUpgrade libwbclient0-debuginfo-32bitUpgrade libdcerpc-samr0-32bitUpgrade sambaUpgrade libsamba-passdb0-32bitUpgrade samba-core-develUpgrade samba-debugsourceUpgrade libndr-nbt-develUpgrade libdcerpc-binding0Upgrade libsamba-credentials-develUpgrade libsmbclient0-debuginfo-32bitUpgrade libndr-nbt0-debuginfoUpgrade libsamba-util0-debuginfoUpgrade libwbclient-develUpgrade libdcerpc0-32bitUpgrade libdcerpc-binding0-debuginfo-32bitUpgrade samba-libs-32bitUpgrade samba-docUpgrade libndr-krb5pac-develUpgrade samba-winbind-32bitUpgrade samba-pythonUpgrade libsmbconf-develUpgrade libndr-nbt0Upgrade ctdb-testsUpgrade libsmbldap0-debuginfoUpgrade libtevent-util0-debuginfo-32bitUpgrade libsmbclient-raw0Upgrade libsamba-policy0-debuginfoUpgrade libsmbldap0Upgrade libwbclient0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libsmbclient-raw0-debuginfo-32bitUpgrade libndr-nbt0-debuginfo-32bitUpgrade libsamba-util-develUpgrade libdcerpc0-debuginfoUpgrade ctdb-develUpgrade libsmbclient0Upgrade libdcerpc-develUpgrade libdcerpc-atsvc0-debuginfoUpgrade libnetapi0Upgrade libtevent-util0-32bitUpgrade libndr-krb5pac0-debuginfoUpgrade samba-winbind-debuginfoUpgrade libndr-develUpgrade samba-winbind-debuginfo-32bitUpgrade libsamba-util0Upgrade samba-client-debuginfoUpgrade libwbclient0-debuginfoUpgrade libdcerpc-samr0-debuginfoUpgrade libsamba-credentials0-32bitUpgrade samba-winbindUpgrade libtevent-util0Upgrade libregistry-develUpgrade libregistry0-debuginfo-32bitUpgrade libsamba-policy0-debuginfo-32bitUpgrade libsamba-passdb0-debuginfoUpgrade libsamba-policy-develUpgrade libndr0-32bitUpgrade libsmbclient0-32bitUpgrade samba-clientUpgrade libsmbconf0-debuginfoUpgrade libsamdb0-debuginfoUpgrade libgensec0-debuginfo-32bitUpgrade libnetapi-develUpgrade libsmbclient-raw0-32bitUpgrade samba-debuginfoUpgrade libgensec0Upgrade libsamba-credentials0-debuginfoUpgrade libdcerpc-atsvc0-32bitUpgrade libsamdb0Upgrade libsmbconf0-32bitUpgrade libndr-krb5pac0Upgrade libdcerpc-atsvc0Upgrade ctdb-pcp-pmdaUpgrade libdcerpc-samr-develUpgrade ctdb-debuginfoUpgrade libdcerpc-binding0-32bitUpgrade libndr-standard0-32bitUpgrade libsmbclient-raw0-debuginfoUpgrade libndr0-debuginfoUpgrade libnetapi0-32bitUpgrade libndr0Upgrade libsamba-util0-32bitUpgrade libndr-standard-develUpgrade libdcerpc-atsvc-develUpgrade libsamdb-develUpgrade libregistry0Upgrade samba-libsUpgrade libnetapi0-debuginfo-32bitUpgrade libsmbconf0-debuginfo-32bitUpgrade samba-32bitUpgrade libsamba-hostconfig0-debuginfo-32bitUpgrade libsmbldap0-32bitUpgrade libsmbclient-raw-develUpgrade libsamba-policy0-32bitUpgrade samba-libs-debuginfoUpgrade libndr-krb5pac0-debuginfo-32bitUpgrade libdcerpc-binding0-debuginfoUpgrade libdcerpc0-debuginfo-32bitUpgrade ctdb-tests-debuginfoUpgrade samba-python-debuginfoUpgrade libsamba-passdb0-debuginfo-32bitUpgrade samba-client-debuginfo-32bitUpgrade libsamba-credentials0Upgrade libtevent-util0-debuginfoUpgrade libgensec-develUpgrade samba-debuginfo-32bitUpgrade libndr-standard0-debuginfoUpgrade libndr-nbt0-32bitUpgrade libgensec0-32bitUpgrade libdcerpc0Upgrade libsmbclient0-debuginfoUpgrade libsamdb0-debuginfo-32bitUpgrade libsamba-passdb-develUpgrade libsmbldap-develUpgrade libndr-standard0Upgrade libsmbconf0Upgrade libsamdb0-32bitUpgrade samba-pidlUpgrade libsamba-policy0Upgrade libdcerpc-samr0Upgrade ctdbUpgrade samba-client-32bitUpgrade ctdb-pcp-pmda-debuginfoUpgrade libsmbldap0-debuginfo-32bitUpgrade libsamba-hostconfig0Upgrade libsamba-util0-debuginfo-32bitUpgrade samba-test-debuginfoUpgrade samba-testUpgrade libsamba-hostconfig-develUpgrade libsamba-credentials0-debuginfo-32bitUpgrade libndr-krb5pac0-32bitUpgrade libregistry0-debuginfoUpgrade libgensec0-debuginfoUpgrade libtevent-util-develUpgrade libregistry0-32bitUpgrade libdcerpc-atsvc0-debuginfo-32bitUpgrade libnetapi0-debuginfoUpgrade libdcerpc-samr0-debuginfo-32bitUpgrade libndr0-debuginfo-32bitUpgrade libwbclient0Upgrade libsamba-passdb0Upgrade samba-test-develUpgrade samba-libs-debuginfo-32bitUpgrade libsmbclient-develUpgrade libndr-standard0-debuginfo-32bit | Apr 20, 2016 | Apr 20, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub