It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
- CVSS 3.0 Base Score: 6.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Oct 31, 2018 | Oct 31, 2018 |
| Amazon_linux | — | Upgrade samba | May 31, 2017 | Dec 19, 2016 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 31, 2018 |
| Centos_linux | — | Upgrade samba-dcUpgrade libwbclientUpgrade samba-pythonUpgrade samba4-develUpgrade samba-domainjoin-guiUpgrade samba4-libsUpgrade samba-swatUpgrade samba4-dcUpgrade samba4-commonUpgrade samba-testUpgrade samba-debuginfoUpgrade samba-libsUpgrade libsmbclient-develUpgrade samba-krb5-printingUpgrade samba4Upgrade samba-pidlUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-test-libsUpgrade samba4-winbind-clientsUpgrade samba4-winbind-krb5-locatorUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-vfs-glusterfsUpgrade samba-develUpgrade samba-winbind-modulesUpgrade samba4-clientUpgrade libwbclient-develUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba-winbind-krb5-locatorUpgrade samba-docUpgrade samba-commonUpgrade samba4-testUpgrade samba-common-toolsUpgrade sambaUpgrade samba4-pythonUpgrade samba-winbind-develUpgrade samba-dc-libsUpgrade samba4-dc-libsUpgrade samba-glusterfsUpgrade samba4-winbindUpgrade samba4-debuginfoUpgrade samba4-pidl | May 24, 2017 | Dec 19, 2016 |
| Debian | — | Upgrade samba | Dec 20, 2016 | Dec 19, 2016 |
| Freebsd | — | Upgrade samba44Upgrade samba45Upgrade samba42Upgrade samba4Upgrade samba36Upgrade samba41Upgrade samba43 | Dec 28, 2016 | Dec 26, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libwbclientUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba-libsUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-common | Aug 28, 2019 | Oct 31, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-libsUpgrade sambaUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-pythonUpgrade libwbclientUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-winbind-clients | Aug 28, 2019 | Oct 31, 2018 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.8-0.175.3.17.0.3.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.8-0.175.3.17.0.3.0 on Solaris 11.3 | May 29, 2017 | May 29, 2017 |
| Oracle_linux | — | Upgrade samba-glusterfsUpgrade ctdbUpgrade samba-krb5-printingUpgrade samba4-dc-libsUpgrade libwbclientUpgrade samba4-pythonUpgrade samba-vfs-glusterfsUpgrade samba-test-libsUpgrade samba4-commonUpgrade samba4-dcUpgrade samba4-pidlUpgrade samba-testUpgrade samba4Upgrade samba-pidlUpgrade samba-dcUpgrade samba4-winbind-clientsUpgrade samba-client-libsUpgrade samba4-clientUpgrade samba-winbind-develUpgrade samba-domainjoin-guiUpgrade samba-winbindUpgrade samba-common-toolsUpgrade samba4-winbindUpgrade samba-commonUpgrade ctdb-testsUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade libwbclient-develUpgrade samba-swatUpgrade samba4-winbind-krb5-locatorUpgrade samba-clientUpgrade sambaUpgrade samba-pythonUpgrade samba4-libsUpgrade libsmbclient-develUpgrade samba-common-libsUpgrade samba-develUpgrade samba-winbind-modulesUpgrade samba-docUpgrade samba4-develUpgrade samba-winbind-krb5-locatorUpgrade samba4-testUpgrade samba-libsUpgrade samba-dc-libs | Mar 28, 2017 | Dec 19, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.3R5Update Pulse Connect Secure to version 8.1R14Update Pulse Connect Secure to version 8.2R11Update Pulse Connect Secure to version 9.0R1 | Oct 28, 2020 | Oct 31, 2018 |
| Redhat_linux | — | Upgrade samba-test-libsUpgrade libsmbclient-develUpgrade samba4-pythonUpgrade samba-krb5-printingUpgrade samba-domainjoin-guiUpgrade samba4-dc-libsUpgrade samba-libsUpgrade samba-testUpgrade samba-docUpgrade samba-clientUpgrade samba-pidlUpgrade samba4Upgrade sambaUpgrade samba-dcUpgrade samba4-debuginfoNo solution existsUpgrade samba4-clientUpgrade samba-commonUpgrade samba-common-libsUpgrade ctdbUpgrade samba4-dcUpgrade samba-winbind-develUpgrade samba4-winbind-clientsUpgrade samba-debuginfoUpgrade samba-winbind-clientsUpgrade samba-vfs-glusterfsUpgrade samba4-pidlUpgrade samba4-winbindUpgrade samba-pythonUpgrade samba-develUpgrade samba-dc-libsUpgrade libwbclientUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba4-libsUpgrade samba-glusterfsUpgrade samba4-testUpgrade samba4-winbind-krb5-locatorUpgrade libwbclient-develUpgrade samba4-commonUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbindUpgrade samba4-develUpgrade ctdb-testsUpgrade samba-swatUpgrade samba-winbind-modules | Mar 21, 2017 | Dec 19, 2016 |
| Samba | — | Upgrade to Samba version 4.3.13Upgrade to Samba version 4.5.3Upgrade to Samba version 4.4.8 | Dec 20, 2016 | Dec 20, 2016 |
| Suse | — | Upgrade libsamba-errors0-32bitUpgrade libsamba-util0-debuginfoUpgrade libdcerpc-samr-develUpgrade libtevent-util0Upgrade libnetapi-develUpgrade libsamba-credentials-develUpgrade samba-x86Upgrade libdcerpc-binding0Upgrade libsmbldap0-32bitUpgrade libsmbclient-raw0-debuginfo-32bitUpgrade libdcerpc-samr0-32bitUpgrade libtdb1Upgrade libsmbldap0Upgrade libwbclient0-debuginfoUpgrade libtevent-util0-debuginfo-32bitUpgrade ctdb-develUpgrade libndr-develUpgrade samba-libs-32bitUpgrade libsamba-credentials0-debuginfoUpgrade libdcerpc-atsvc0Upgrade libtdb1-32bitUpgrade libsamba-policy-develUpgrade libsamba-hostconfig0-debuginfoUpgrade libsamba-passdb0-debuginfoUpgrade samba-docUpgrade libwbclient0-debuginfo-32bitUpgrade libregistry0-debuginfo-32bitUpgrade libsmbconf-develUpgrade samba-clientUpgrade samba-libs-python3-32bitUpgrade libndr-nbt0-debuginfo-32bitUpgrade libnetapi0-32bitUpgrade libdcerpc0Upgrade libndr-krb5pac0-debuginfoUpgrade libsmbldap2Upgrade libwbclient-develUpgrade samba-debugsourceUpgrade libndr-krb5pac-develUpgrade ctdb-debuginfoUpgrade libdcerpc-atsvc0-32bitUpgrade libsmbclient0Upgrade libsamdb0Upgrade samba-core-develUpgrade samba-pythonUpgrade libtdb-develUpgrade samba-winbindUpgrade libsamba-errors0-debuginfoUpgrade libdcerpc0-32bitUpgrade ctdbUpgrade libsamba-errors-develUpgrade libldb-develUpgrade libregistry0Upgrade samba-client-debuginfoUpgrade libgensec0-debuginfoUpgrade libndr-krb5pac0Upgrade libsamba-credentials0-32bitUpgrade samba-krb-printingUpgrade libgensec0Upgrade ldapsmbUpgrade libsmbconf0-debuginfoUpgrade samba-winbind-32bitUpgrade libsamba-errors0Upgrade libsamba-policy0-debuginfo-32bitUpgrade libsmbsharemodes0Upgrade libsamba-util0Upgrade libdcerpc0-debuginfoUpgrade libwbclient0-32bitUpgrade libndr0-32bitUpgrade samba-winbind-debuginfoUpgrade libregistry-develUpgrade libsamba-util-develUpgrade libgensec0-debuginfo-32bitUpgrade libsmbclient-raw0-32bitUpgrade libdcerpc-samr0-debuginfoUpgrade libndr-krb5pac0-debuginfo-32bitUpgrade libsmbclient0-32bitUpgrade sambaUpgrade libdcerpc-atsvc0-debuginfo-32bitUpgrade libtalloc2-32bitUpgrade libndr-nbt0Upgrade libndr-krb5pac0-32bitUpgrade libndr-standard0Upgrade samba-libs-python3Upgrade libdcerpc-binding0-debuginfo-32bitUpgrade libsamdb0-debuginfoUpgrade libsamba-hostconfig0-32bitUpgrade libdcerpc-develUpgrade libndr-nbt-develUpgrade samba-32bitUpgrade libsamdb0-debuginfo-32bitUpgrade libdcerpc-atsvc-develUpgrade libsmbsharemodes-develUpgrade libndr-nbt0-debuginfoUpgrade libsamba-policy0Upgrade libndr-standard0-32bitUpgrade libtdb1-x86Upgrade libsmbclient-raw0-debuginfoUpgrade libdcerpc-samr0-debuginfo-32bitUpgrade samba-client-32bitUpgrade libsmbldap-develUpgrade libsamba-policy0-debuginfoUpgrade libnetapi0-debuginfoUpgrade samba-python-debuginfoUpgrade libsmbclient-raw-develUpgrade samba-pidlUpgrade samba-libs-debuginfo-32bitUpgrade libndr0-debuginfoUpgrade libtevent-util-develUpgrade samba-winbind-x86Upgrade libsmbconf0-debuginfo-32bitUpgrade libsamba-passdb0Upgrade libtalloc2Upgrade libtalloc2-x86Upgrade ctdb-tests-debuginfoUpgrade libndr0-debuginfo-32bitUpgrade libsamba-util0-debuginfo-32bitUpgrade libndr-standard0-debuginfoUpgrade libsmbconf0-32bitUpgrade libndr-standard0-debuginfo-32bitUpgrade libsmbclient0-debuginfo-32bitUpgrade libsamba-hostconfig-develUpgrade libtevent-develUpgrade samba-testUpgrade libsamba-errors0-debuginfo-32bitUpgrade samba-winbind-debuginfo-32bitUpgrade libtevent0-32bitUpgrade samba-develUpgrade libsamba-passdb0-debuginfo-32bitUpgrade libsmbldap2-32bitUpgrade libndr-nbt0-32bitUpgrade libdcerpc-samr0Upgrade libdcerpc-atsvc0-debuginfoUpgrade libsmbclient-develUpgrade libdcerpc0-debuginfo-32bitUpgrade samba-libs-debuginfoUpgrade libregistry0-debuginfoUpgrade libsamba-passdb-develUpgrade libgensec-develUpgrade libtevent-util0-32bitUpgrade libsamba-passdb0-32bitUpgrade ctdb-testsUpgrade samba-debuginfoUpgrade samba-dsdb-modulesUpgrade libsmbconf0Upgrade libsamdb0-32bitUpgrade libsmbclient-raw0Upgrade samba-debuginfo-32bitUpgrade libsmbclient0-x86Upgrade libsamba-util0-32bitUpgrade libdcerpc-binding0-debuginfoUpgrade libsmbclient0-debuginfoUpgrade samba-client-debuginfo-32bitUpgrade libndr-standard-develUpgrade libtevent0Upgrade libsmbldap0-debuginfoUpgrade samba-test-develUpgrade libsamdb-develUpgrade libtevent0-x86Upgrade libwbclient0Upgrade libregistry0-32bitUpgrade samba-kdcUpgrade libldb1Upgrade libsamba-hostconfig0-debuginfo-32bitUpgrade libsamba-credentials0-debuginfo-32bitUpgrade samba-test-debuginfoUpgrade libnetapi0Upgrade libsmbldap0-debuginfo-32bitUpgrade libsamba-credentials0Upgrade libgensec0-32bitUpgrade samba-client-x86Upgrade libtalloc-develUpgrade samba-libsUpgrade libsamba-hostconfig0Upgrade libnetapi0-debuginfo-32bitUpgrade libsamba-policy0-32bitUpgrade libndr0Upgrade libtevent-util0-debuginfoUpgrade libwbclient0-x86Upgrade libdcerpc-binding0-32bit | Dec 28, 2016 | Dec 19, 2016 |
| Ubuntu | — | Upgrade winbindUpgrade sambaUpgrade libsmbclient | Dec 20, 2016 | Dec 19, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub