Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade samba-swatUpgrade samba-docUpgrade libsmbclient-develUpgrade samba3x-winbind-develUpgrade samba-winbind-clientsUpgrade sambaUpgrade samba-common-libsUpgrade libwbclient-develUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba3x-winbindUpgrade libwbclientUpgrade samba-client-libsUpgrade samba3x-swatUpgrade samba-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-pythonUpgrade samba-clientUpgrade samba-dc-libsUpgrade samba-develUpgrade samba-domainjoin-guiUpgrade samba-vfs-glusterfsUpgrade samba3x-domainjoin-guiUpgrade ctdbUpgrade samba3x-clientUpgrade samba-test-develUpgrade samba-commonUpgrade samba3xUpgrade samba3x-docUpgrade samba-winbind-develUpgrade ctdb-develUpgrade ctdb-testsUpgrade samba-dcUpgrade samba3x-commonUpgrade samba-pidlUpgrade samba-testUpgrade samba-glusterfs | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 17, 2016 |
| Freebsd | — | Upgrade samba44Upgrade samba4Upgrade samba41Upgrade samba43Upgrade samba36 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Hpux | — | Update CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest version | Aug 11, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libldbUpgrade tdb-toolsUpgrade libwbclientUpgrade python-tdbUpgrade libtdbUpgrade sambaUpgrade samba-common-toolsUpgrade samba-libsUpgrade libtallocUpgrade samba-pythonUpgrade samba-winbindUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade pytallocUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade python-teventUpgrade libsmbclientUpgrade libteventUpgrade samba-client-libs | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade samba-pidlUpgrade samba3x-clientUpgrade samba3xUpgrade python-teventUpgrade samba-winbind-develUpgrade samba4-winbind-krb5-locatorUpgrade samba4-develUpgrade libtalloc-develUpgrade sambaUpgrade samba-swatUpgrade tdb-toolsUpgrade samba4-testUpgrade libldb-develUpgrade ipa-server-selinuxUpgrade libtdbUpgrade samba-pythonUpgrade libwbclient-develUpgrade ctdbUpgrade samba-docUpgrade samba-winbind-modulesUpgrade pyldb-develUpgrade samba3x-domainjoin-guiUpgrade openchange-clientUpgrade libtevent-develUpgrade python-tdbUpgrade ctdb-testsUpgrade samba4-commonUpgrade samba4-pythonUpgrade samba-winbindUpgrade libwbclientUpgrade pytalloc-develUpgrade samba-dcUpgrade samba4-libsUpgrade libsmbclientUpgrade libtallocUpgrade ipa-server-dnsUpgrade openchange-develUpgrade samba-client-libsUpgrade samba3x-docUpgrade ipa-admintoolsUpgrade samba4-dcUpgrade ipa-pythonUpgrade openchange-devel-docsUpgrade samba-vfs-glusterfsUpgrade samba-domainjoin-guiUpgrade samba-libsUpgrade samba4-dc-libsUpgrade libteventUpgrade samba-testUpgrade samba-winbind-clientsUpgrade libtdb-develUpgrade samba4Upgrade samba-common-toolsUpgrade samba4-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-commonUpgrade openchangeUpgrade ipa-serverUpgrade samba3x-commonUpgrade samba3x-winbind-develUpgrade pytallocUpgrade ipa-server-trust-adUpgrade samba-glusterfsUpgrade samba-dc-libsUpgrade samba-clientUpgrade ctdb-develUpgrade samba-common-libsUpgrade samba3x-swatUpgrade ipa-clientUpgrade samba-develUpgrade libsmbclient-develUpgrade samba4-winbind-clientsUpgrade libldbUpgrade samba4-pidlUpgrade samba-test-libsUpgrade ldb-toolsUpgrade samba3x-winbindUpgrade pyldbUpgrade samba4-winbindUpgrade samba-test-devel | Apr 24, 2016 | Apr 24, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 12, 2016 |
| Samba | — | Upgrade to Samba version 4.4.2Upgrade to Samba version 4.2.11Upgrade to Samba version 4.3.8 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade libsamba-credentials0Upgrade libsmbldap0Upgrade libtdb1Upgrade libndr-krb5pac0-32bitUpgrade samba-testUpgrade ctdbUpgrade libsamba-util0-32bitUpgrade libgensec0Upgrade libndr-standard0Upgrade samba-krb-printingUpgrade libdcerpc-binding0-32bitUpgrade libsmbclient0Upgrade libsmbclient0-32bitUpgrade libdcerpc0Upgrade libsamba-errors-develUpgrade libregistry0Upgrade libnetapi0-32bitUpgrade libsamba-errors0-32bitUpgrade samba-test-develUpgrade libndr0-32bitUpgrade libsamba-policy0-python3Upgrade libsamba-credentials0-32bitUpgrade libsmbconf-develUpgrade libdcerpc0-32bitUpgrade libsmbclient-develUpgrade libtevent0-32bitUpgrade libtdb-develUpgrade ctdb-develUpgrade libsamba-passdb0Upgrade libsmbclient-raw0Upgrade libdcerpc-atsvc-develUpgrade samba-client-x86Upgrade libndr-standard-develUpgrade libsmbldap2Upgrade libsamba-passdb-develUpgrade samba-libs-32bitUpgrade libnetapi-develUpgrade libsamdb-develUpgrade libtevent-util0Upgrade samba-develUpgrade libsamba-policy-python3-develUpgrade libsamdb0-32bitUpgrade samba-kdcUpgrade libtevent-util-develUpgrade libwbclient0Upgrade libsamba-util0Upgrade libndr-nbt-develUpgrade libsamba-hostconfig0Upgrade libtalloc2-32bitUpgrade libdcerpc-samr-develUpgrade samba-client-32bitUpgrade libsmbclient0-x86Upgrade libsamba-credentials-develUpgrade libsmbldap0-32bitUpgrade samba-libsUpgrade libldb1Upgrade libsamba-policy-develUpgrade samba-clientUpgrade libsmbsharemodes-develUpgrade ldapsmbUpgrade samba-core-develUpgrade libwbclient0-32bitUpgrade libsamba-hostconfig-develUpgrade samba-libs-python3-32bitUpgrade libndr1-32bitUpgrade libgensec-develUpgrade libnetapi0Upgrade libtevent-util0-32bitUpgrade libndr-krb5pac-develUpgrade libsamba-passdb0-32bitUpgrade samba-docUpgrade libndr-develUpgrade libsamba-util-develUpgrade samba-libs-python3Upgrade libdcerpc-samr0Upgrade libndr0Upgrade libregistry-develUpgrade libndr1Upgrade libwbclient0-x86Upgrade samba-winbindUpgrade libsamba-policy0Upgrade sambaUpgrade libndr-krb5pac0Upgrade libsmbsharemodes0Upgrade libdcerpc-atsvc0Upgrade libsamba-hostconfig0-32bitUpgrade libwbclient-develUpgrade libtdb1-x86Upgrade samba-python3Upgrade libndr-standard0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libsmbldap-develUpgrade samba-x86Upgrade libgensec0-32bitUpgrade libtevent0Upgrade samba-32bitUpgrade libsmbldap2-32bitUpgrade libtalloc2Upgrade libtalloc-develUpgrade libtevent-develUpgrade libndr-nbt0-32bitUpgrade libndr-nbt0Upgrade libtevent0-x86Upgrade libtalloc2-x86Upgrade libsamba-errors0Upgrade samba-cephUpgrade libtdb1-32bitUpgrade libdcerpc-develUpgrade libldb-develUpgrade libsamdb0Upgrade libsmbconf0-32bitUpgrade libdcerpc-binding0Upgrade samba-winbind-x86Upgrade samba-pythonUpgrade samba-dsdb-modulesUpgrade samba-winbind-32bitUpgrade libsmbconf0Upgrade libsmbclient-raw-devel | Apr 13, 2016 | Apr 13, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub