The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka "BADLOCK."
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 12, 2016 |
| Centos_linux | — | Upgrade samba3x-commonUpgrade samba-common-toolsUpgrade libwbclient-develUpgrade libwbclientUpgrade samba-libsUpgrade samba3x-winbind-develUpgrade libsmbclient-develUpgrade samba-docUpgrade samba-winbind-krb5-locatorUpgrade samba3x-winbindUpgrade samba3x-swatUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade ctdb-testsUpgrade samba-domainjoin-guiUpgrade samba-clientUpgrade samba-pidlUpgrade samba-swatUpgrade samba-testUpgrade samba3x-domainjoin-guiUpgrade samba3x-clientUpgrade ctdb-develUpgrade samba3x-docUpgrade samba-dc-libsUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-test-develUpgrade sambaUpgrade samba-vfs-glusterfsUpgrade samba-dcUpgrade samba-develUpgrade samba-winbind-develUpgrade samba-winbindUpgrade samba3xUpgrade ctdbUpgrade samba-glusterfsUpgrade samba-test-libsUpgrade samba-commonUpgrade libsmbclient | Jul 6, 2016 | Apr 12, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 12, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 10, 2016 |
| Freebsd | — | Upgrade samba36Upgrade samba41Upgrade samba42Upgrade samba43Upgrade samba44Upgrade samba4 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 12, 2016 |
| Hpux | — | Update CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest version | Aug 11, 2017 | Apr 12, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-common-libsUpgrade samba-pythonUpgrade samba-common-toolsUpgrade samba-winbindUpgrade sambaUpgrade libsmbclientUpgrade samba-libsUpgrade libtallocUpgrade samba-commonUpgrade libwbclientUpgrade python-teventUpgrade samba-winbind-clientsUpgrade libldbUpgrade samba-winbind-modulesUpgrade libtdbUpgrade python-tdbUpgrade tdb-toolsUpgrade libteventUpgrade samba-clientUpgrade samba-client-libsUpgrade pytalloc | Nov 30, 2017 | Apr 12, 2016 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 12, 2016 |
| Oracle_linux | — | Upgrade samba4-commonUpgrade ipa-server-selinuxUpgrade samba-winbind-modulesUpgrade samba-docUpgrade samba-winbind-develUpgrade ctdb-testsUpgrade openchangeUpgrade samba-client-libsUpgrade libtalloc-develUpgrade openchange-develUpgrade samba3x-clientUpgrade samba-winbindUpgrade libldb-develUpgrade libtdbUpgrade samba-dcUpgrade ipa-serverUpgrade ctdbUpgrade libwbclient-develUpgrade samba4-develUpgrade samba4-dcUpgrade libtevent-develUpgrade samba3x-docUpgrade libsmbclientUpgrade samba-swatUpgrade samba4-testUpgrade samba4-pythonUpgrade samba4-libsUpgrade samba-winbind-clientsUpgrade libsmbclient-develUpgrade ipa-clientUpgrade libtallocUpgrade openchange-clientUpgrade sambaUpgrade samba-pidlUpgrade ipa-pythonUpgrade pyldb-develUpgrade samba4-dc-libsUpgrade samba-common-libsUpgrade python-teventUpgrade samba-pythonUpgrade samba-develUpgrade samba3xUpgrade samba4-winbind-krb5-locatorUpgrade samba-winbind-krb5-locatorUpgrade samba-domainjoin-guiUpgrade samba3x-winbindUpgrade samba4-winbindUpgrade samba-glusterfsUpgrade ldb-toolsUpgrade pytalloc-develUpgrade samba-test-libsUpgrade samba-test-develUpgrade samba-vfs-glusterfsUpgrade samba-clientUpgrade samba3x-winbind-develUpgrade samba4-winbind-clientsUpgrade libteventUpgrade samba4-pidlUpgrade samba4Upgrade tdb-toolsUpgrade samba3x-commonUpgrade samba3x-swatUpgrade pytallocUpgrade samba-testUpgrade samba3x-domainjoin-guiUpgrade openchange-devel-docsUpgrade python-tdbUpgrade libldbUpgrade samba-common-toolsUpgrade ipa-server-trust-adUpgrade libwbclientUpgrade samba-dc-libsUpgrade ctdb-develUpgrade samba-libsUpgrade libtdb-develUpgrade pyldbUpgrade samba4-clientUpgrade ipa-server-dnsUpgrade samba-commonUpgrade ipa-admintools | Apr 13, 2016 | Apr 12, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.1R10Update Pulse Connect Secure to version 8.2R5 | Oct 28, 2020 | Apr 12, 2016 |
| Samba | — | Upgrade to Samba version 4.3.8Upgrade to Samba version 4.2.11Upgrade to Samba version 4.4.2 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade samba-krb-printingUpgrade libtdb1-32bitUpgrade libsmbsharemodes0Upgrade libsamba-util0-32bitUpgrade samba-libs-32bitUpgrade ctdbUpgrade samba-x86Upgrade libnetapi-develUpgrade libndr-nbt-develUpgrade libregistry0Upgrade samba-client-32bitUpgrade libndr0-32bitUpgrade libndr-standard-develUpgrade libdcerpc0-32bitUpgrade libtalloc2-x86Upgrade libsmbclient-raw0Upgrade libsmbldap0-32bitUpgrade libsamba-errors-develUpgrade samba-test-develUpgrade libsamba-errors0Upgrade libndr-standard0Upgrade libsmbconf-develUpgrade libwbclient0Upgrade libsamba-util0Upgrade libndr-krb5pac0-32bitUpgrade samba-kdcUpgrade libsmbclient0Upgrade libsamba-credentials0-32bitUpgrade libsamba-errors0-32bitUpgrade libnetapi0Upgrade samba-clientUpgrade libndr1-32bitUpgrade samba-client-x86Upgrade libsamdb-develUpgrade ctdb-develUpgrade libsmbclient0-32bitUpgrade libsamba-credentials-develUpgrade libsamba-policy-develUpgrade samba-develUpgrade libdcerpc-atsvc-develUpgrade libldb-develUpgrade libndr0Upgrade libsmbldap2Upgrade libtdb-develUpgrade libsamba-policy0-python3Upgrade libdcerpc-samr-develUpgrade libndr1Upgrade libgensec0Upgrade libsmbconf0Upgrade libsmbconf0-32bitUpgrade libsmbclient0-x86Upgrade libsamba-hostconfig0Upgrade libtevent0-32bitUpgrade libtevent-util-develUpgrade libsamba-policy-python3-develUpgrade samba-cephUpgrade libsamba-hostconfig-develUpgrade libsmbldap0Upgrade libsamdb0-32bitUpgrade samba-pythonUpgrade libdcerpc-atsvc0Upgrade libsmbclient-develUpgrade libsamba-passdb-develUpgrade libndr-nbt0Upgrade samba-winbind-x86Upgrade libndr-krb5pac0Upgrade samba-winbind-32bitUpgrade libndr-krb5pac-develUpgrade libsamba-credentials0Upgrade libsamba-passdb0-32bitUpgrade libdcerpc0Upgrade libsamdb0Upgrade libtdb1-x86Upgrade libtdb1Upgrade ldapsmbUpgrade libtevent0Upgrade libndr-nbt0-32bitUpgrade samba-libs-python3Upgrade libtevent-develUpgrade libtalloc-develUpgrade libsmbldap2-32bitUpgrade libtalloc2Upgrade libsmbsharemodes-develUpgrade libdcerpc-binding0-32bitUpgrade libsamba-util-develUpgrade libwbclient0-x86Upgrade samba-dsdb-modulesUpgrade samba-docUpgrade libdcerpc-samr0Upgrade libsmbldap-develUpgrade libtevent0-x86Upgrade libwbclient0-32bitUpgrade libdcerpc-develUpgrade samba-libsUpgrade libtevent-util0Upgrade libgensec-develUpgrade libgensec0-32bitUpgrade samba-testUpgrade libregistry-develUpgrade libndr-standard0-32bitUpgrade samba-libs-python3-32bitUpgrade sambaUpgrade libdcerpc-binding0Upgrade samba-python3Upgrade libtalloc2-32bitUpgrade libsmbclient-raw0-32bitUpgrade libsamba-policy0Upgrade libnetapi0-32bitUpgrade libtevent-util0-32bitUpgrade libwbclient-develUpgrade samba-core-develUpgrade libsamba-hostconfig0-32bitUpgrade samba-32bitUpgrade libsmbclient-raw-develUpgrade libsamba-passdb0Upgrade samba-winbindUpgrade libldb1Upgrade libndr-devel | Apr 13, 2016 | Apr 12, 2016 |
| Ubuntu | — | Upgrade samba | Apr 18, 2016 | Apr 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub