The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka "BADLOCK."
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 12, 2016 |
| Centos_linux | — | Upgrade samba-test-develUpgrade ctdb-develUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-vfs-glusterfsUpgrade sambaUpgrade samba3x-docUpgrade ctdbUpgrade samba-winbindUpgrade samba-pythonUpgrade samba-dc-libsUpgrade samba-swatUpgrade samba-develUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-dcUpgrade samba-pidlUpgrade samba3xUpgrade samba-glusterfsUpgrade samba3x-clientUpgrade samba-winbind-develUpgrade samba-testUpgrade samba3x-domainjoin-guiUpgrade samba-test-libsUpgrade samba-domainjoin-guiUpgrade samba-clientUpgrade samba3x-swatUpgrade samba-libsUpgrade samba3x-winbindUpgrade ctdb-testsUpgrade samba-winbind-krb5-locatorUpgrade libwbclientUpgrade samba-docUpgrade libwbclient-develUpgrade samba3x-commonUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade libsmbclient-develUpgrade samba-client-libsUpgrade samba3x-winbind-devel | Jul 6, 2016 | Apr 12, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 12, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 10, 2016 |
| Freebsd | — | Upgrade samba4Upgrade samba42Upgrade samba44Upgrade samba43Upgrade samba41Upgrade samba36 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 12, 2016 |
| Hpux | — | Update CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest version | Aug 11, 2017 | Apr 12, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-clientUpgrade pytallocUpgrade samba-client-libsUpgrade libtdbUpgrade python-tdbUpgrade tdb-toolsUpgrade libteventUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-common-toolsUpgrade libldbUpgrade python-teventUpgrade libtallocUpgrade samba-commonUpgrade samba-libsUpgrade samba-winbindUpgrade samba-common-libsUpgrade sambaUpgrade samba-winbind-clientsUpgrade libwbclientUpgrade samba-winbind-modules | Nov 30, 2017 | Apr 12, 2016 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 12, 2016 |
| Oracle_linux | — | Upgrade samba4-libsUpgrade samba-pidlUpgrade samba-dcUpgrade samba4-testUpgrade pyldb-develUpgrade libtallocUpgrade libsmbclient-develUpgrade ipa-serverUpgrade samba3x-clientUpgrade samba-pythonUpgrade samba3xUpgrade samba-develUpgrade samba-client-libsUpgrade openchangeUpgrade ctdbUpgrade ctdb-testsUpgrade samba-winbindUpgrade openchange-develUpgrade ipa-clientUpgrade samba-winbind-clientsUpgrade samba4-winbind-krb5-locatorUpgrade samba3x-docUpgrade openchange-clientUpgrade libtalloc-develUpgrade samba-docUpgrade samba-winbind-develUpgrade ipa-server-selinuxUpgrade samba4-dc-libsUpgrade samba4-dcUpgrade samba-swatUpgrade samba4-develUpgrade libldb-develUpgrade samba4-commonUpgrade libtevent-develUpgrade python-teventUpgrade libwbclient-develUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade sambaUpgrade ipa-pythonUpgrade libtdbUpgrade samba4-pythonUpgrade samba3x-commonUpgrade samba-dc-libsUpgrade samba3x-domainjoin-guiUpgrade ipa-server-dnsUpgrade samba4-winbindUpgrade samba-glusterfsUpgrade pytallocUpgrade samba-testUpgrade libteventUpgrade python-tdbUpgrade ldb-toolsUpgrade samba3x-winbindUpgrade samba4-clientUpgrade samba3x-swatUpgrade pyldbUpgrade ipa-server-trust-adUpgrade libwbclientUpgrade ipa-admintoolsUpgrade samba-common-toolsUpgrade ctdb-develUpgrade pytalloc-develUpgrade samba4-winbind-clientsUpgrade samba-domainjoin-guiUpgrade samba4-pidlUpgrade samba-winbind-krb5-locatorUpgrade samba3x-winbind-develUpgrade samba-libsUpgrade openchange-devel-docsUpgrade samba-commonUpgrade samba4Upgrade tdb-toolsUpgrade libldbUpgrade samba-test-develUpgrade samba-clientUpgrade libtdb-develUpgrade samba-vfs-glusterfsUpgrade samba-test-libs | Apr 13, 2016 | Apr 12, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.1R10Update Pulse Connect Secure to version 8.2R5 | Oct 28, 2020 | Apr 12, 2016 |
| Samba | — | Upgrade to Samba version 4.2.11Upgrade to Samba version 4.4.2Upgrade to Samba version 4.3.8 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade samba-docUpgrade libdcerpc-binding0Upgrade libdcerpc-develUpgrade libdcerpc-atsvc0Upgrade libldb1Upgrade libregistry-develUpgrade libndr-develUpgrade samba-winbindUpgrade libtalloc2Upgrade libsamba-util-develUpgrade libdcerpc-binding0-32bitUpgrade samba-winbind-32bitUpgrade samba-libs-python3Upgrade samba-dsdb-modulesUpgrade libtevent-develUpgrade libwbclient0-x86Upgrade libsmbldap2-32bitUpgrade libtalloc-develUpgrade libndr-krb5pac-develUpgrade libsamba-passdb0-32bitUpgrade samba-pythonUpgrade libtevent0-x86Upgrade libdcerpc-samr0Upgrade libsmbldap-develUpgrade libtevent-util0Upgrade libsamba-credentials0Upgrade libndr-standard0-32bitUpgrade libwbclient0-32bitUpgrade libgensec0-32bitUpgrade libgensec-develUpgrade libndr-nbt0Upgrade libndr-krb5pac0Upgrade libtdb1-x86Upgrade samba-libsUpgrade libsamdb0Upgrade samba-winbind-x86Upgrade libdcerpc0Upgrade samba-testUpgrade libtdb1Upgrade libsmbclient-raw0-32bitUpgrade samba-core-develUpgrade libsmbsharemodes-develUpgrade libtevent0Upgrade libwbclient-develUpgrade libtevent-util0-32bitUpgrade samba-python3Upgrade libsamba-hostconfig0-32bitUpgrade libtalloc2-32bitUpgrade sambaUpgrade libsamba-policy0Upgrade ldapsmbUpgrade samba-32bitUpgrade libsamba-passdb0Upgrade libndr-nbt0-32bitUpgrade libsmbclient-develUpgrade libnetapi0-32bitUpgrade libsmbclient-raw-develUpgrade samba-libs-python3-32bitUpgrade libsamba-passdb-develUpgrade libnetapi0Upgrade libnetapi-develUpgrade libsamba-policy-develUpgrade libsamba-policy-python3-develUpgrade libtdb1-32bitUpgrade libsamba-util0-32bitUpgrade samba-krb-printingUpgrade libsmbsharemodes0Upgrade libndr-standard0Upgrade samba-client-x86Upgrade libndr-standard-develUpgrade libndr-nbt-develUpgrade libldb-develUpgrade samba-test-develUpgrade libsamba-credentials-develUpgrade libsmbldap0Upgrade ctdb-develUpgrade libsamba-policy0-python3Upgrade samba-cephUpgrade libtalloc2-x86Upgrade libtevent0-32bitUpgrade libsamba-hostconfig0Upgrade libsmbclient0-32bitUpgrade libsmbconf0-32bitUpgrade libdcerpc-atsvc-develUpgrade libsmbclient-raw0Upgrade libsmbclient0-x86Upgrade libsamdb-develUpgrade libsmbconf0Upgrade samba-client-32bitUpgrade libwbclient0Upgrade libsamba-util0Upgrade libndr1Upgrade libdcerpc-samr-develUpgrade libndr1-32bitUpgrade libdcerpc0-32bitUpgrade libsmbldap0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsamba-errors0Upgrade libsamba-hostconfig-develUpgrade libregistry0Upgrade ctdbUpgrade libsamba-credentials0-32bitUpgrade libsmbconf-develUpgrade libsmbclient0Upgrade samba-x86Upgrade samba-clientUpgrade samba-kdcUpgrade libsamdb0-32bitUpgrade libsmbldap2Upgrade libgensec0Upgrade libtevent-util-develUpgrade libndr0Upgrade libsamba-errors0-32bitUpgrade samba-libs-32bitUpgrade libsamba-errors-develUpgrade libndr0-32bitUpgrade libtdb-develUpgrade samba-devel | Apr 13, 2016 | Apr 12, 2016 |
| Ubuntu | — | Upgrade samba | Apr 18, 2016 | Apr 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub