The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka "BADLOCK."
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 12, 2016 |
| Centos_linux | — | Upgrade libwbclient-develUpgrade samba-docUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba3x-swatUpgrade ctdb-testsUpgrade samba3x-winbind-develUpgrade libsmbclient-develUpgrade libwbclientUpgrade samba-domainjoin-guiUpgrade samba3x-winbindUpgrade samba3x-commonUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-swatUpgrade samba-vfs-glusterfsUpgrade samba-winbindUpgrade libsmbclientUpgrade sambaUpgrade samba-dcUpgrade ctdbUpgrade samba-common-libsUpgrade samba3x-docUpgrade samba-testUpgrade samba-pythonUpgrade samba-test-develUpgrade samba3x-clientUpgrade ctdb-develUpgrade samba3xUpgrade samba-develUpgrade samba3x-domainjoin-guiUpgrade samba-winbind-modulesUpgrade samba-glusterfsUpgrade samba-pidlUpgrade samba-test-libsUpgrade samba-commonUpgrade samba-winbind-develUpgrade samba-dc-libs | Jul 6, 2016 | Apr 12, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 12, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 10, 2016 |
| Freebsd | — | Upgrade samba36Upgrade samba41Upgrade samba4Upgrade samba44Upgrade samba43Upgrade samba42 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 12, 2016 |
| Hpux | — | Update CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest version | Aug 11, 2017 | Apr 12, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libteventUpgrade samba-clientUpgrade python-tdbUpgrade tdb-toolsUpgrade pytallocUpgrade libtdbUpgrade samba-client-libsUpgrade libsmbclientUpgrade python-teventUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade libwbclientUpgrade libtallocUpgrade samba-winbindUpgrade samba-libsUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-pythonUpgrade libldb | Nov 30, 2017 | Apr 12, 2016 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 12, 2016 |
| Oracle_linux | — | Upgrade samba-glusterfsUpgrade ipa-server-dnsUpgrade samba3x-domainjoin-guiUpgrade samba-winbind-krb5-locatorUpgrade openchange-devel-docsUpgrade samba-testUpgrade ldb-toolsUpgrade samba3x-commonUpgrade libteventUpgrade samba-domainjoin-guiUpgrade samba3x-winbind-develUpgrade libldbUpgrade samba4-winbindUpgrade samba-commonUpgrade samba4-winbind-clientsUpgrade pytallocUpgrade samba-test-develUpgrade samba-test-libsUpgrade samba4-pidlUpgrade samba4Upgrade python-tdbUpgrade samba-clientUpgrade libtdb-develUpgrade samba-libsUpgrade ctdb-develUpgrade samba3x-swatUpgrade samba4-clientUpgrade samba-dc-libsUpgrade ipa-admintoolsUpgrade ipa-server-trust-adUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba3x-winbindUpgrade samba-vfs-glusterfsUpgrade pyldbUpgrade tdb-toolsUpgrade pytalloc-develUpgrade samba-common-libsUpgrade libldb-develUpgrade samba-develUpgrade samba-winbindUpgrade samba-swatUpgrade samba-winbind-clientsUpgrade libwbclient-develUpgrade samba4-dc-libsUpgrade samba4-libsUpgrade openchange-clientUpgrade ipa-pythonUpgrade samba-dcUpgrade libtdbUpgrade samba4-dcUpgrade samba-pythonUpgrade openchange-develUpgrade samba3x-docUpgrade samba3xUpgrade ipa-serverUpgrade pyldb-develUpgrade libtallocUpgrade libsmbclient-develUpgrade samba4-pythonUpgrade sambaUpgrade samba-winbind-modulesUpgrade ctdb-testsUpgrade python-teventUpgrade libsmbclientUpgrade ctdbUpgrade samba3x-clientUpgrade libtevent-develUpgrade samba4-winbind-krb5-locatorUpgrade samba4-develUpgrade samba-pidlUpgrade openchangeUpgrade samba-client-libsUpgrade ipa-clientUpgrade samba4-testUpgrade samba4-commonUpgrade ipa-server-selinuxUpgrade samba-docUpgrade libtalloc-develUpgrade samba-winbind-devel | Apr 13, 2016 | Apr 12, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.2R5Update Pulse Connect Secure to version 8.1R10 | Oct 28, 2020 | Apr 12, 2016 |
| Samba | — | Upgrade to Samba version 4.2.11Upgrade to Samba version 4.3.8Upgrade to Samba version 4.4.2 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade samba-winbind-32bitUpgrade libldb1Upgrade libwbclient0-x86Upgrade libsamba-passdb0Upgrade libndr-krb5pac-develUpgrade libsmbclient-raw-develUpgrade sambaUpgrade libdcerpc0Upgrade libsamba-util-develUpgrade libsamba-passdb-develUpgrade libsmbldap2-32bitUpgrade libndr-krb5pac0Upgrade samba-python3Upgrade samba-winbind-x86Upgrade samba-libs-python3-32bitUpgrade libtalloc-develUpgrade libsamba-passdb0-32bitUpgrade libsmbsharemodes-develUpgrade samba-libsUpgrade libndr-nbt0Upgrade libdcerpc-samr0Upgrade libwbclient-develUpgrade libtdb1Upgrade ldapsmbUpgrade libtdb1-x86Upgrade libgensec0-32bitUpgrade libsamdb0Upgrade libsmbldap-develUpgrade samba-pythonUpgrade libsamba-credentials0Upgrade libtalloc2Upgrade libdcerpc-atsvc0Upgrade libsamba-hostconfig0-32bitUpgrade libsamba-policy0Upgrade libndr-nbt0-32bitUpgrade libtevent-util0-32bitUpgrade samba-core-develUpgrade samba-32bitUpgrade libnetapi0-32bitUpgrade libndr-standard0-32bitUpgrade libgensec-develUpgrade libsmbclient-develUpgrade samba-libs-python3Upgrade samba-docUpgrade libtalloc2-32bitUpgrade libsmbclient-raw0-32bitUpgrade libregistry-develUpgrade samba-winbindUpgrade libndr-develUpgrade libdcerpc-binding0Upgrade samba-testUpgrade samba-dsdb-modulesUpgrade libtevent0Upgrade libtevent-develUpgrade libdcerpc-develUpgrade libtevent-util0Upgrade libtevent0-x86Upgrade libwbclient0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libndr-nbt-develUpgrade libsamba-hostconfig-develUpgrade libsmbldap0Upgrade libndr-krb5pac0-32bitUpgrade samba-krb-printingUpgrade libsamba-util0-32bitUpgrade libsamba-policy-python3-develUpgrade libsamba-hostconfig0Upgrade libsmbconf0-32bitUpgrade libsmbclient0-x86Upgrade libtevent0-32bitUpgrade libsamba-errors-develUpgrade libsamba-errors0-32bitUpgrade samba-libs-32bitUpgrade libsmbconf-develUpgrade libsmbclient0-32bitUpgrade samba-x86Upgrade libsmbsharemodes0Upgrade libnetapi-develUpgrade libndr0Upgrade ctdb-develUpgrade libsamdb-develUpgrade libndr0-32bitUpgrade samba-client-32bitUpgrade libsmbclient-raw0Upgrade libdcerpc-atsvc-develUpgrade samba-develUpgrade libsamba-credentials-develUpgrade libnetapi0Upgrade samba-clientUpgrade libldb-develUpgrade samba-test-develUpgrade ctdbUpgrade libregistry0Upgrade libsamdb0-32bitUpgrade libwbclient0Upgrade libsamba-credentials0-32bitUpgrade libtdb1-32bitUpgrade samba-cephUpgrade libdcerpc-samr-develUpgrade libtdb-develUpgrade libgensec0Upgrade libndr1Upgrade libndr-standard0Upgrade libsmbclient0Upgrade libndr-standard-develUpgrade libsamba-util0Upgrade libsmbconf0Upgrade samba-client-x86Upgrade samba-kdcUpgrade libsamba-policy0-python3Upgrade libsmbldap2Upgrade libsamba-policy-develUpgrade libtevent-util-develUpgrade libtalloc2-x86Upgrade libsmbldap0-32bitUpgrade libsamba-errors0Upgrade libndr1-32bitUpgrade libdcerpc0-32bit | Apr 13, 2016 | Apr 12, 2016 |
| Ubuntu | — | Upgrade samba | Apr 18, 2016 | Apr 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub