Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 24, 2016 |
| Centos_linux | — | Upgrade ctdbUpgrade samba3x-clientUpgrade samba3x-domainjoin-guiUpgrade samba-test-develUpgrade samba-vfs-glusterfsUpgrade samba3xUpgrade samba-glusterfsUpgrade samba-winbind-develUpgrade ctdb-develUpgrade ctdb-testsUpgrade samba3x-docUpgrade samba-commonUpgrade samba-dcUpgrade samba-testUpgrade samba3x-commonUpgrade samba-pidlUpgrade samba-common-libsUpgrade samba3x-winbindUpgrade libwbclient-develUpgrade samba-winbind-clientsUpgrade libsmbclient-develUpgrade samba3x-winbind-develUpgrade samba-pythonUpgrade sambaUpgrade libwbclientUpgrade samba-winbindUpgrade samba-swatUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-dc-libsUpgrade samba-common-toolsUpgrade samba-domainjoin-guiUpgrade samba-develUpgrade libsmbclientUpgrade samba-test-libsUpgrade samba-winbind-krb5-locatorUpgrade samba3x-swatUpgrade samba-docUpgrade samba-winbind-modules | Jul 6, 2016 | Apr 13, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 13, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 17, 2016 |
| Freebsd | — | Upgrade samba44Upgrade samba4Upgrade samba42Upgrade samba41Upgrade samba36Upgrade samba43 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 24, 2016 |
| Hpux | — | Update CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest version | Aug 11, 2017 | Apr 24, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-libsUpgrade samba-pythonUpgrade samba-client-libsUpgrade libtallocUpgrade sambaUpgrade samba-common-toolsUpgrade libteventUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade pytallocUpgrade python-teventUpgrade samba-clientUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade libtdbUpgrade libldbUpgrade python-tdbUpgrade libwbclientUpgrade tdb-tools | Nov 30, 2017 | Apr 24, 2016 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2016 |
| Oracle_linux | — | Upgrade ldb-toolsUpgrade samba-test-develUpgrade samba4Upgrade ipa-clientUpgrade samba-common-toolsUpgrade libtdb-develUpgrade libsmbclient-develUpgrade samba4-winbindUpgrade samba-common-libsUpgrade samba-dc-libsUpgrade samba-test-libsUpgrade samba4-pidlUpgrade samba-develUpgrade samba-glusterfsUpgrade samba3x-winbind-develUpgrade samba-winbind-clientsUpgrade samba3x-commonUpgrade ipa-server-trust-adUpgrade samba4-winbind-clientsUpgrade samba-clientUpgrade samba-vfs-glusterfsUpgrade pyldbUpgrade libldbUpgrade samba3x-winbindUpgrade samba4-clientUpgrade samba-domainjoin-guiUpgrade samba4-dc-libsUpgrade pytallocUpgrade samba3x-swatUpgrade ipa-serverUpgrade openchangeUpgrade samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-libsUpgrade ctdb-develUpgrade libteventUpgrade samba-commonUpgrade samba-swatUpgrade samba4-pythonUpgrade samba3x-docUpgrade samba4-commonUpgrade ctdb-testsUpgrade samba-winbindUpgrade ipa-admintoolsUpgrade samba-pythonUpgrade pyldb-develUpgrade samba4-develUpgrade samba3x-domainjoin-guiUpgrade tdb-toolsUpgrade samba4-winbind-krb5-locatorUpgrade python-tdbUpgrade samba3xUpgrade samba-winbind-modulesUpgrade samba-winbind-develUpgrade libldb-develUpgrade openchange-devel-docsUpgrade ctdbUpgrade ipa-pythonUpgrade samba3x-clientUpgrade libtalloc-develUpgrade samba-pidlUpgrade samba-client-libsUpgrade libtallocUpgrade libsmbclientUpgrade ipa-server-dnsUpgrade samba4-dcUpgrade openchange-clientUpgrade libwbclient-develUpgrade libtevent-develUpgrade samba4-libsUpgrade sambaUpgrade libwbclientUpgrade pytalloc-develUpgrade ipa-server-selinuxUpgrade samba4-testUpgrade python-teventUpgrade samba-dcUpgrade samba-docUpgrade libtdbUpgrade openchange-devel | Apr 24, 2016 | Apr 24, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 12, 2016 |
| Samba | — | Upgrade to Samba version 4.3.8Upgrade to Samba version 4.2.11Upgrade to Samba version 4.4.2 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade libsamba-util-develUpgrade libsmbclient-raw0-32bitUpgrade libndr-nbt0Upgrade samba-python3Upgrade libregistry-develUpgrade samba-32bitUpgrade libldb-develUpgrade libndr-krb5pac0Upgrade samba-libs-python3-32bitUpgrade samba-docUpgrade libsamba-policy0Upgrade libsmbldap-develUpgrade samba-pythonUpgrade libndr0Upgrade libdcerpc-atsvc0Upgrade samba-libs-python3Upgrade samba-winbindUpgrade libwbclient-develUpgrade libsmbconf0-32bitUpgrade libwbclient0-x86Upgrade samba-winbind-x86Upgrade libwbclient0-32bitUpgrade samba-cephUpgrade libdcerpc-develUpgrade samba-dsdb-modulesUpgrade libdcerpc-binding0Upgrade libsamdb0Upgrade libsamba-hostconfig-develUpgrade libndr1Upgrade libsamba-errors0Upgrade libtdb1-32bitUpgrade libdcerpc-samr0Upgrade sambaUpgrade libsmbsharemodes0Upgrade libtevent0-x86Upgrade libsmbldap2-32bitUpgrade libgensec0-32bitUpgrade libtdb1-x86Upgrade libsamba-hostconfig0-32bitUpgrade libtalloc-develUpgrade libgensec-develUpgrade libtalloc2Upgrade libnetapi0Upgrade libsmbclient-raw-develUpgrade samba-x86Upgrade libtevent0Upgrade libndr-standard0-32bitUpgrade libsamba-passdb0-32bitUpgrade libtalloc2-x86Upgrade libndr-develUpgrade libndr1-32bitUpgrade samba-core-develUpgrade libtevent-develUpgrade libtevent-util0-32bitUpgrade libsmbconf0Upgrade libndr-nbt0-32bitUpgrade libndr-krb5pac-develUpgrade samba-winbind-32bitUpgrade libsmbclient0-x86Upgrade ctdbUpgrade libdcerpc-binding0-32bitUpgrade libwbclient0Upgrade libsmbldap0Upgrade libsamba-passdb-develUpgrade libsamdb-develUpgrade libldb1Upgrade libsamba-passdb0Upgrade samba-client-x86Upgrade samba-testUpgrade libndr-standard0Upgrade libsamba-credentials0Upgrade ctdb-develUpgrade libnetapi0-32bitUpgrade libsamba-policy-develUpgrade libsmbldap0-32bitUpgrade libtevent0-32bitUpgrade samba-libsUpgrade samba-clientUpgrade samba-kdcUpgrade samba-client-32bitUpgrade libtevent-util-develUpgrade libsamdb0-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-credentials-develUpgrade libsamba-hostconfig0Upgrade libsmbldap2Upgrade libtevent-util0Upgrade libsmbclient-raw0Upgrade libsamba-policy-python3-develUpgrade libndr-nbt-develUpgrade libtalloc2-32bitUpgrade samba-develUpgrade libtdb-develUpgrade libsmbsharemodes-develUpgrade ldapsmbUpgrade libsmbclient0Upgrade libsamba-util0Upgrade libnetapi-develUpgrade libdcerpc-atsvc-develUpgrade libtdb1Upgrade libsamba-policy0-python3Upgrade libdcerpc0-32bitUpgrade samba-test-develUpgrade libsmbconf-develUpgrade libsamba-errors0-32bitUpgrade libdcerpc0Upgrade libndr0-32bitUpgrade libsamba-credentials0-32bitUpgrade libsmbclient-develUpgrade libndr-standard-develUpgrade samba-libs-32bitUpgrade libsamba-util0-32bitUpgrade samba-krb-printingUpgrade libgensec0Upgrade libndr-krb5pac0-32bitUpgrade libregistry0Upgrade libsamba-errors-develUpgrade libsmbclient0-32bit | Apr 13, 2016 | Apr 13, 2016 |
| Ubuntu | — | Upgrade samba | Apr 24, 2016 | Apr 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub