The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka "BADLOCK."
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Apr 12, 2016 |
| Centos_linux | — | Upgrade samba3x-clientUpgrade libsmbclientUpgrade ctdb-develUpgrade samba-commonUpgrade samba-test-libsUpgrade samba-pidlUpgrade samba-glusterfsUpgrade ctdbUpgrade samba-vfs-glusterfsUpgrade samba-dcUpgrade samba-develUpgrade samba-winbind-modulesUpgrade samba-swatUpgrade samba3x-domainjoin-guiUpgrade samba3xUpgrade samba-dc-libsUpgrade samba-pythonUpgrade samba3x-docUpgrade samba-testUpgrade sambaUpgrade samba-common-libsUpgrade samba-winbind-develUpgrade samba-test-develUpgrade samba-winbindUpgrade samba3x-commonUpgrade samba-domainjoin-guiUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade samba-docUpgrade samba-clientUpgrade ctdb-testsUpgrade samba3x-swatUpgrade samba3x-winbindUpgrade libwbclientUpgrade libsmbclient-develUpgrade libwbclient-develUpgrade samba-libsUpgrade samba3x-winbind-devel | Jul 6, 2016 | Apr 12, 2016 |
| Debian | — | Upgrade samba | Apr 14, 2016 | Apr 12, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 10, 2016 |
| Freebsd | — | Upgrade samba4Upgrade samba43Upgrade samba42Upgrade samba44Upgrade samba36Upgrade samba41 | Dec 10, 2025 | Apr 12, 2016 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 12, 2016 |
| Hpux | — | Update CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest version | Aug 11, 2017 | Apr 12, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libtallocUpgrade samba-common-toolsUpgrade samba-libsUpgrade samba-winbindUpgrade sambaUpgrade libsmbclientUpgrade python-teventUpgrade libwbclientUpgrade samba-pythonUpgrade libldbUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-client-libsUpgrade libteventUpgrade samba-clientUpgrade python-tdbUpgrade tdb-toolsUpgrade pytallocUpgrade libtdb | Nov 30, 2017 | Apr 12, 2016 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.5-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Apr 12, 2016 |
| Oracle_linux | — | Upgrade samba-test-develUpgrade python-tdbUpgrade samba-testUpgrade samba-test-libsUpgrade samba3x-commonUpgrade samba-clientUpgrade samba-commonUpgrade samba3x-winbindUpgrade samba4-winbind-clientsUpgrade samba3x-winbind-develUpgrade samba4Upgrade samba4-winbindUpgrade libldbUpgrade samba-libsUpgrade pytalloc-develUpgrade ctdb-develUpgrade libtdb-develUpgrade samba-dc-libsUpgrade samba-glusterfsUpgrade ipa-server-dnsUpgrade ldb-toolsUpgrade tdb-toolsUpgrade pytallocUpgrade samba-winbind-krb5-locatorUpgrade samba4-pidlUpgrade libteventUpgrade ipa-server-trust-adUpgrade openchange-devel-docsUpgrade libwbclientUpgrade samba3x-swatUpgrade samba-domainjoin-guiUpgrade samba3x-domainjoin-guiUpgrade samba-vfs-glusterfsUpgrade pyldbUpgrade samba4-clientUpgrade samba-common-toolsUpgrade ipa-admintoolsUpgrade samba3xUpgrade samba4-commonUpgrade openchange-develUpgrade samba-common-libsUpgrade libldb-develUpgrade libwbclient-develUpgrade samba-winbind-develUpgrade samba-docUpgrade libtalloc-develUpgrade ipa-server-selinuxUpgrade samba-winbindUpgrade samba-dcUpgrade samba3x-clientUpgrade ctdbUpgrade samba4-testUpgrade libsmbclientUpgrade python-teventUpgrade openchangeUpgrade samba-winbind-clientsUpgrade samba-swatUpgrade ipa-pythonUpgrade samba4-dcUpgrade samba-pidlUpgrade samba3x-docUpgrade ipa-clientUpgrade libtevent-develUpgrade samba4-pythonUpgrade samba4-develUpgrade samba4-winbind-krb5-locatorUpgrade sambaUpgrade openchange-clientUpgrade samba-client-libsUpgrade samba4-libsUpgrade ctdb-testsUpgrade libtdbUpgrade samba4-dc-libsUpgrade samba-winbind-modulesUpgrade samba-pythonUpgrade samba-develUpgrade libsmbclient-develUpgrade libtallocUpgrade ipa-serverUpgrade pyldb-devel | Apr 13, 2016 | Apr 12, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.1R10Update Pulse Connect Secure to version 8.2R5 | Oct 28, 2020 | Apr 12, 2016 |
| Samba | — | Upgrade to Samba version 4.2.11Upgrade to Samba version 4.3.8Upgrade to Samba version 4.4.2 | Apr 12, 2016 | Apr 12, 2016 |
| Suse | — | Upgrade libtevent0-32bitUpgrade samba-x86Upgrade libregistry0Upgrade samba-libs-32bitUpgrade libsamdb0-32bitUpgrade libndr1-32bitUpgrade libsamba-util0Upgrade libgensec0Upgrade libsmbldap0Upgrade libndr-krb5pac0-32bitUpgrade libtalloc2-x86Upgrade libsamba-errors0Upgrade libsmbldap0-32bitUpgrade libdcerpc0-32bitUpgrade libsmbclient0-x86Upgrade libsamba-hostconfig0Upgrade libsmbsharemodes0Upgrade samba-client-x86Upgrade libndr-standard0Upgrade libndr-standard-develUpgrade libndr-nbt-develUpgrade libtdb1-32bitUpgrade samba-krb-printingUpgrade libsmbclient0Upgrade samba-test-develUpgrade libsamba-credentials-develUpgrade libnetapi0Upgrade libldb-develUpgrade ctdbUpgrade libnetapi-develUpgrade libsamba-util0-32bitUpgrade libsmbconf-develUpgrade libtdb-develUpgrade libndr0Upgrade libsmbldap2Upgrade libndr1Upgrade libtevent-util-develUpgrade libsamba-errors0-32bitUpgrade libsamba-errors-develUpgrade libsamba-policy0-python3Upgrade ctdb-develUpgrade libndr0-32bitUpgrade libdcerpc-atsvc-develUpgrade samba-clientUpgrade libsamba-policy-python3-develUpgrade libsmbconf0-32bitUpgrade libsamba-credentials0-32bitUpgrade libsamba-hostconfig-develUpgrade libsmbclient0-32bitUpgrade libsamdb-develUpgrade libgensec-develUpgrade samba-client-32bitUpgrade samba-winbindUpgrade libsamba-passdb0-32bitUpgrade libndr-standard0-32bitUpgrade libsmbclient-raw0Upgrade samba-libsUpgrade libtevent-util0Upgrade libdcerpc-develUpgrade libgensec0-32bitUpgrade samba-testUpgrade libndr-develUpgrade libregistry-develUpgrade samba-develUpgrade samba-winbind-32bitUpgrade libtalloc2-32bitUpgrade libndr-nbt0Upgrade libsmbclient-develUpgrade libsmbclient-raw-develUpgrade libdcerpc-binding0Upgrade libsamba-passdb0Upgrade libsamba-passdb-develUpgrade sambaUpgrade libwbclient0-x86Upgrade libdcerpc-binding0-32bitUpgrade libdcerpc-samr0Upgrade samba-pythonUpgrade libtevent0-x86Upgrade libwbclient0-32bitUpgrade libwbclient0Upgrade libtdb1Upgrade libsamdb0Upgrade libtdb1-x86Upgrade samba-dsdb-modulesUpgrade libsmbldap2-32bitUpgrade libsamba-util-develUpgrade libndr-krb5pac-develUpgrade libtalloc2Upgrade samba-docUpgrade samba-libs-python3Upgrade libtevent-develUpgrade libtalloc-develUpgrade samba-libs-python3-32bitUpgrade libdcerpc0Upgrade ldapsmbUpgrade libsamba-policy0Upgrade samba-32bitUpgrade samba-python3Upgrade libsmbclient-raw0-32bitUpgrade libndr-nbt0-32bitUpgrade libdcerpc-atsvc0Upgrade libtevent-util0-32bitUpgrade libnetapi0-32bitUpgrade samba-core-develUpgrade libwbclient-develUpgrade libsamba-hostconfig0-32bitUpgrade libldb1Upgrade libsmbldap-develUpgrade libsmbsharemodes-develUpgrade libtevent0Upgrade samba-winbind-x86Upgrade samba-cephUpgrade libsamba-credentials0Upgrade libndr-krb5pac0Upgrade libsamba-policy-develUpgrade libdcerpc-samr-develUpgrade libsmbconf0Upgrade samba-kdc | Apr 13, 2016 | Apr 12, 2016 |
| Ubuntu | — | Upgrade samba | Apr 18, 2016 | Apr 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub