It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
- CVSS 3.0 Base Score: 6.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-samba | Oct 31, 2018 | Oct 31, 2018 | |
| Amazon_linux | — | amazon-linux-upgrade-samba | May 31, 2017 | Dec 19, 2016 |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Oct 31, 2018 | |
| Centos_linux | — | centos-upgrade-libsmbclientcentos-upgrade-libsmbclient-develcentos-upgrade-libwbclientcentos-upgrade-libwbclient-develcentos-upgrade-sambacentos-upgrade-samba-clientcentos-upgrade-samba-client-libscentos-upgrade-samba-commoncentos-upgrade-samba-common-libscentos-upgrade-samba-common-toolscentos-upgrade-samba-dccentos-upgrade-samba-dc-libscentos-upgrade-samba-debuginfocentos-upgrade-samba-develcentos-upgrade-samba-doccentos-upgrade-samba-domainjoin-guicentos-upgrade-samba-glusterfscentos-upgrade-samba-krb5-printingcentos-upgrade-samba-libscentos-upgrade-samba-pidlcentos-upgrade-samba-pythoncentos-upgrade-samba-swatcentos-upgrade-samba-testcentos-upgrade-samba-test-libscentos-upgrade-samba-vfs-glusterfscentos-upgrade-samba-winbindcentos-upgrade-samba-winbind-clientscentos-upgrade-samba-winbind-develcentos-upgrade-samba-winbind-krb5-locatorcentos-upgrade-samba-winbind-modulescentos-upgrade-samba4centos-upgrade-samba4-clientcentos-upgrade-samba4-commoncentos-upgrade-samba4-dccentos-upgrade-samba4-dc-libscentos-upgrade-samba4-debuginfocentos-upgrade-samba4-develcentos-upgrade-samba4-libscentos-upgrade-samba4-pidlcentos-upgrade-samba4-pythoncentos-upgrade-samba4-testcentos-upgrade-samba4-winbindcentos-upgrade-samba4-winbind-clientscentos-upgrade-samba4-winbind-krb5-locator | May 24, 2017 | Dec 19, 2016 |
| Debian | debian-upgrade-samba | Dec 20, 2016 | Dec 19, 2016 | |
| Freebsd | freebsd-upgrade-package-samba36freebsd-upgrade-package-samba4freebsd-upgrade-package-samba41freebsd-upgrade-package-samba42freebsd-upgrade-package-samba43freebsd-upgrade-package-samba44freebsd-upgrade-package-samba45 | Dec 28, 2016 | Dec 26, 2016 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-libsmbclienthuawei-euleros-2_0_sp1-upgrade-libwbclienthuawei-euleros-2_0_sp1-upgrade-sambahuawei-euleros-2_0_sp1-upgrade-samba-clienthuawei-euleros-2_0_sp1-upgrade-samba-client-libshuawei-euleros-2_0_sp1-upgrade-samba-commonhuawei-euleros-2_0_sp1-upgrade-samba-common-libshuawei-euleros-2_0_sp1-upgrade-samba-common-toolshuawei-euleros-2_0_sp1-upgrade-samba-libshuawei-euleros-2_0_sp1-upgrade-samba-pythonhuawei-euleros-2_0_sp1-upgrade-samba-winbindhuawei-euleros-2_0_sp1-upgrade-samba-winbind-clientshuawei-euleros-2_0_sp1-upgrade-samba-winbind-modules | Aug 28, 2019 | Oct 31, 2018 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-libsmbclienthuawei-euleros-2_0_sp2-upgrade-libwbclienthuawei-euleros-2_0_sp2-upgrade-sambahuawei-euleros-2_0_sp2-upgrade-samba-clienthuawei-euleros-2_0_sp2-upgrade-samba-client-libshuawei-euleros-2_0_sp2-upgrade-samba-commonhuawei-euleros-2_0_sp2-upgrade-samba-common-libshuawei-euleros-2_0_sp2-upgrade-samba-common-toolshuawei-euleros-2_0_sp2-upgrade-samba-libshuawei-euleros-2_0_sp2-upgrade-samba-pythonhuawei-euleros-2_0_sp2-upgrade-samba-winbindhuawei-euleros-2_0_sp2-upgrade-samba-winbind-clientshuawei-euleros-2_0_sp2-upgrade-samba-winbind-modules | Aug 28, 2019 | Oct 31, 2018 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-library-samba-libsmbclient-4-4-8-0-175-3-17-0-3-0oracle-solaris-11-3-upgrade-service-network-samba-4-4-8-0-175-3-17-0-3-0 | May 29, 2017 | May 29, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-ctdboracle-linux-upgrade-ctdb-testsoracle-linux-upgrade-libsmbclientoracle-linux-upgrade-libsmbclient-develoracle-linux-upgrade-libwbclientoracle-linux-upgrade-libwbclient-develoracle-linux-upgrade-sambaoracle-linux-upgrade-samba4oracle-linux-upgrade-samba4-clientoracle-linux-upgrade-samba4-commonoracle-linux-upgrade-samba4-dcoracle-linux-upgrade-samba4-dc-libsoracle-linux-upgrade-samba4-develoracle-linux-upgrade-samba4-libsoracle-linux-upgrade-samba4-pidloracle-linux-upgrade-samba4-pythonoracle-linux-upgrade-samba4-testoracle-linux-upgrade-samba4-winbindoracle-linux-upgrade-samba4-winbind-clientsoracle-linux-upgrade-samba4-winbind-krb5-locatororacle-linux-upgrade-samba-clientoracle-linux-upgrade-samba-client-libsoracle-linux-upgrade-samba-commonoracle-linux-upgrade-samba-common-libsoracle-linux-upgrade-samba-common-toolsoracle-linux-upgrade-samba-dcoracle-linux-upgrade-samba-dc-libsoracle-linux-upgrade-samba-develoracle-linux-upgrade-samba-docoracle-linux-upgrade-samba-domainjoin-guioracle-linux-upgrade-samba-glusterfsoracle-linux-upgrade-samba-krb5-printingoracle-linux-upgrade-samba-libsoracle-linux-upgrade-samba-pidloracle-linux-upgrade-samba-pythonoracle-linux-upgrade-samba-swatoracle-linux-upgrade-samba-testoracle-linux-upgrade-samba-test-libsoracle-linux-upgrade-samba-vfs-glusterfsoracle-linux-upgrade-samba-winbindoracle-linux-upgrade-samba-winbind-clientsoracle-linux-upgrade-samba-winbind-develoracle-linux-upgrade-samba-winbind-krb5-locatororacle-linux-upgrade-samba-winbind-modules | Mar 28, 2017 | Dec 19, 2016 |
| Pulse Secure Pulse Connect Secure | pulse-secure-pulse-connect-secure-upgrade-8_1r14pulse-secure-pulse-connect-secure-upgrade-8_2r11pulse-secure-pulse-connect-secure-upgrade-8_3r5pulse-secure-pulse-connect-secure-upgrade-9_0r1 | Oct 28, 2020 | Oct 31, 2018 | |
| Redhat_linux | — | redhat-upgrade-ctdbredhat-upgrade-ctdb-testsredhat-upgrade-libsmbclientredhat-upgrade-libsmbclient-develredhat-upgrade-libwbclientredhat-upgrade-libwbclient-develredhat-upgrade-sambaredhat-upgrade-samba-clientredhat-upgrade-samba-client-libsredhat-upgrade-samba-commonredhat-upgrade-samba-common-libsredhat-upgrade-samba-common-toolsredhat-upgrade-samba-dcredhat-upgrade-samba-dc-libsredhat-upgrade-samba-debuginforedhat-upgrade-samba-develredhat-upgrade-samba-docredhat-upgrade-samba-domainjoin-guiredhat-upgrade-samba-glusterfsredhat-upgrade-samba-krb5-printingredhat-upgrade-samba-libsredhat-upgrade-samba-pidlredhat-upgrade-samba-pythonredhat-upgrade-samba-swatredhat-upgrade-samba-testredhat-upgrade-samba-test-libsredhat-upgrade-samba-vfs-glusterfsredhat-upgrade-samba-winbindredhat-upgrade-samba-winbind-clientsredhat-upgrade-samba-winbind-develredhat-upgrade-samba-winbind-krb5-locatorredhat-upgrade-samba-winbind-modulesredhat-upgrade-samba4redhat-upgrade-samba4-clientredhat-upgrade-samba4-commonredhat-upgrade-samba4-dcredhat-upgrade-samba4-dc-libsredhat-upgrade-samba4-debuginforedhat-upgrade-samba4-develredhat-upgrade-samba4-libsredhat-upgrade-samba4-pidlredhat-upgrade-samba4-pythonredhat-upgrade-samba4-testredhat-upgrade-samba4-winbindredhat-upgrade-samba4-winbind-clientsredhat-upgrade-samba4-winbind-krb5-locator | Mar 21, 2017 | Dec 19, 2016 |
| Samba | samba-upgrade-4_3_13samba-upgrade-4_4_8samba-upgrade-4_5_3 | Dec 20, 2016 | Dec 20, 2016 | |
| Suse | — | suse-upgrade-ctdbsuse-upgrade-ctdb-debuginfosuse-upgrade-ctdb-develsuse-upgrade-ctdb-testssuse-upgrade-ctdb-tests-debuginfosuse-upgrade-ldapsmbsuse-upgrade-libdcerpc-atsvc-develsuse-upgrade-libdcerpc-atsvc0suse-upgrade-libdcerpc-atsvc0-32bitsuse-upgrade-libdcerpc-atsvc0-debuginfosuse-upgrade-libdcerpc-atsvc0-debuginfo-32bitsuse-upgrade-libdcerpc-binding0suse-upgrade-libdcerpc-binding0-32bitsuse-upgrade-libdcerpc-binding0-debuginfosuse-upgrade-libdcerpc-binding0-debuginfo-32bitsuse-upgrade-libdcerpc-develsuse-upgrade-libdcerpc-samr-develsuse-upgrade-libdcerpc-samr0suse-upgrade-libdcerpc-samr0-32bitsuse-upgrade-libdcerpc-samr0-debuginfosuse-upgrade-libdcerpc-samr0-debuginfo-32bitsuse-upgrade-libdcerpc0suse-upgrade-libdcerpc0-32bitsuse-upgrade-libdcerpc0-debuginfosuse-upgrade-libdcerpc0-debuginfo-32bitsuse-upgrade-libgensec-develsuse-upgrade-libgensec0suse-upgrade-libgensec0-32bitsuse-upgrade-libgensec0-debuginfosuse-upgrade-libgensec0-debuginfo-32bitsuse-upgrade-libldb-develsuse-upgrade-libldb1suse-upgrade-libndr-develsuse-upgrade-libndr-krb5pac-develsuse-upgrade-libndr-krb5pac0suse-upgrade-libndr-krb5pac0-32bitsuse-upgrade-libndr-krb5pac0-debuginfosuse-upgrade-libndr-krb5pac0-debuginfo-32bitsuse-upgrade-libndr-nbt-develsuse-upgrade-libndr-nbt0suse-upgrade-libndr-nbt0-32bitsuse-upgrade-libndr-nbt0-debuginfosuse-upgrade-libndr-nbt0-debuginfo-32bitsuse-upgrade-libndr-standard-develsuse-upgrade-libndr-standard0suse-upgrade-libndr-standard0-32bitsuse-upgrade-libndr-standard0-debuginfosuse-upgrade-libndr-standard0-debuginfo-32bitsuse-upgrade-libndr0suse-upgrade-libndr0-32bitsuse-upgrade-libndr0-debuginfosuse-upgrade-libndr0-debuginfo-32bitsuse-upgrade-libnetapi-develsuse-upgrade-libnetapi0suse-upgrade-libnetapi0-32bitsuse-upgrade-libnetapi0-debuginfosuse-upgrade-libnetapi0-debuginfo-32bitsuse-upgrade-libregistry-develsuse-upgrade-libregistry0suse-upgrade-libregistry0-32bitsuse-upgrade-libregistry0-debuginfosuse-upgrade-libregistry0-debuginfo-32bitsuse-upgrade-libsamba-credentials-develsuse-upgrade-libsamba-credentials0suse-upgrade-libsamba-credentials0-32bitsuse-upgrade-libsamba-credentials0-debuginfosuse-upgrade-libsamba-credentials0-debuginfo-32bitsuse-upgrade-libsamba-errors-develsuse-upgrade-libsamba-errors0suse-upgrade-libsamba-errors0-32bitsuse-upgrade-libsamba-errors0-debuginfosuse-upgrade-libsamba-errors0-debuginfo-32bitsuse-upgrade-libsamba-hostconfig-develsuse-upgrade-libsamba-hostconfig0suse-upgrade-libsamba-hostconfig0-32bitsuse-upgrade-libsamba-hostconfig0-debuginfosuse-upgrade-libsamba-hostconfig0-debuginfo-32bitsuse-upgrade-libsamba-passdb-develsuse-upgrade-libsamba-passdb0suse-upgrade-libsamba-passdb0-32bitsuse-upgrade-libsamba-passdb0-debuginfosuse-upgrade-libsamba-passdb0-debuginfo-32bitsuse-upgrade-libsamba-policy-develsuse-upgrade-libsamba-policy0suse-upgrade-libsamba-policy0-32bitsuse-upgrade-libsamba-policy0-debuginfosuse-upgrade-libsamba-policy0-debuginfo-32bitsuse-upgrade-libsamba-util-develsuse-upgrade-libsamba-util0suse-upgrade-libsamba-util0-32bitsuse-upgrade-libsamba-util0-debuginfosuse-upgrade-libsamba-util0-debuginfo-32bitsuse-upgrade-libsamdb-develsuse-upgrade-libsamdb0suse-upgrade-libsamdb0-32bitsuse-upgrade-libsamdb0-debuginfosuse-upgrade-libsamdb0-debuginfo-32bitsuse-upgrade-libsmbclient-develsuse-upgrade-libsmbclient-raw-develsuse-upgrade-libsmbclient-raw0suse-upgrade-libsmbclient-raw0-32bitsuse-upgrade-libsmbclient-raw0-debuginfosuse-upgrade-libsmbclient-raw0-debuginfo-32bitsuse-upgrade-libsmbclient0suse-upgrade-libsmbclient0-32bitsuse-upgrade-libsmbclient0-debuginfosuse-upgrade-libsmbclient0-debuginfo-32bitsuse-upgrade-libsmbclient0-x86suse-upgrade-libsmbconf-develsuse-upgrade-libsmbconf0suse-upgrade-libsmbconf0-32bitsuse-upgrade-libsmbconf0-debuginfosuse-upgrade-libsmbconf0-debuginfo-32bitsuse-upgrade-libsmbldap-develsuse-upgrade-libsmbldap0suse-upgrade-libsmbldap0-32bitsuse-upgrade-libsmbldap0-debuginfosuse-upgrade-libsmbldap0-debuginfo-32bitsuse-upgrade-libsmbldap2suse-upgrade-libsmbldap2-32bitsuse-upgrade-libsmbsharemodes-develsuse-upgrade-libsmbsharemodes0suse-upgrade-libtalloc-develsuse-upgrade-libtalloc2suse-upgrade-libtalloc2-32bitsuse-upgrade-libtalloc2-x86suse-upgrade-libtdb-develsuse-upgrade-libtdb1suse-upgrade-libtdb1-32bitsuse-upgrade-libtdb1-x86suse-upgrade-libtevent-develsuse-upgrade-libtevent-util-develsuse-upgrade-libtevent-util0suse-upgrade-libtevent-util0-32bitsuse-upgrade-libtevent-util0-debuginfosuse-upgrade-libtevent-util0-debuginfo-32bitsuse-upgrade-libtevent0suse-upgrade-libtevent0-32bitsuse-upgrade-libtevent0-x86suse-upgrade-libwbclient-develsuse-upgrade-libwbclient0suse-upgrade-libwbclient0-32bitsuse-upgrade-libwbclient0-debuginfosuse-upgrade-libwbclient0-debuginfo-32bitsuse-upgrade-libwbclient0-x86suse-upgrade-sambasuse-upgrade-samba-32bitsuse-upgrade-samba-clientsuse-upgrade-samba-client-32bitsuse-upgrade-samba-client-debuginfosuse-upgrade-samba-client-debuginfo-32bitsuse-upgrade-samba-client-x86suse-upgrade-samba-core-develsuse-upgrade-samba-debuginfosuse-upgrade-samba-debuginfo-32bitsuse-upgrade-samba-debugsourcesuse-upgrade-samba-develsuse-upgrade-samba-docsuse-upgrade-samba-dsdb-modulessuse-upgrade-samba-kdcsuse-upgrade-samba-krb-printingsuse-upgrade-samba-libssuse-upgrade-samba-libs-32bitsuse-upgrade-samba-libs-debuginfosuse-upgrade-samba-libs-debuginfo-32bitsuse-upgrade-samba-libs-python3suse-upgrade-samba-libs-python3-32bitsuse-upgrade-samba-pidlsuse-upgrade-samba-pythonsuse-upgrade-samba-python-debuginfosuse-upgrade-samba-testsuse-upgrade-samba-test-debuginfosuse-upgrade-samba-test-develsuse-upgrade-samba-winbindsuse-upgrade-samba-winbind-32bitsuse-upgrade-samba-winbind-debuginfosuse-upgrade-samba-winbind-debuginfo-32bitsuse-upgrade-samba-winbind-x86suse-upgrade-samba-x86 | Dec 28, 2016 | Dec 19, 2016 |
| Ubuntu | ubuntu-upgrade-libsmbclientubuntu-upgrade-sambaubuntu-upgrade-winbind | Dec 20, 2016 | Dec 19, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub