It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
- CVSS 3.0 Base Score: 6.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Oct 31, 2018 | Oct 31, 2018 |
| Amazon_linux | — | Upgrade samba | May 31, 2017 | Dec 19, 2016 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 31, 2018 |
| Centos_linux | — | Upgrade samba4Upgrade samba-dcUpgrade libwbclientUpgrade samba-debuginfoUpgrade samba-libsUpgrade samba-testUpgrade samba-krb5-printingUpgrade samba4-develUpgrade samba-swatUpgrade samba4-commonUpgrade samba-pythonUpgrade samba-winbind-develUpgrade samba4-dcUpgrade samba4-pidlUpgrade samba4-libsUpgrade samba-client-libsUpgrade sambaUpgrade samba4-winbindUpgrade samba-winbind-clientsUpgrade libwbclient-develUpgrade samba4-debuginfoUpgrade samba4-pythonUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba4-testUpgrade samba4-dc-libsUpgrade samba-glusterfsUpgrade samba-winbindUpgrade samba-docUpgrade samba-vfs-glusterfsUpgrade samba-dc-libsUpgrade samba-test-libsUpgrade samba4-clientUpgrade samba-common-libsUpgrade samba-develUpgrade samba4-winbind-clientsUpgrade libsmbclient-develUpgrade samba-domainjoin-guiUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba-commonUpgrade samba4-winbind-krb5-locatorUpgrade samba-pidl | May 24, 2017 | Dec 19, 2016 |
| Debian | — | Upgrade samba | Dec 20, 2016 | Dec 19, 2016 |
| Freebsd | — | Upgrade samba41Upgrade samba36Upgrade samba43Upgrade samba42Upgrade samba45Upgrade samba44Upgrade samba4 | Dec 28, 2016 | Dec 26, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libwbclientUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-pythonUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-winbindUpgrade sambaUpgrade samba-client | Aug 28, 2019 | Oct 31, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade sambaUpgrade samba-commonUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-libsUpgrade samba-clientUpgrade libwbclientUpgrade samba-pythonUpgrade samba-common-tools | Aug 28, 2019 | Oct 31, 2018 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.8-0.175.3.17.0.3.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.8-0.175.3.17.0.3.0 on Solaris 11.3 | May 29, 2017 | May 29, 2017 |
| Oracle_linux | — | Upgrade samba-krb5-printingUpgrade samba-pidlUpgrade samba4-dcUpgrade ctdbUpgrade samba-vfs-glusterfsUpgrade samba-testUpgrade samba4-pidlUpgrade samba4Upgrade samba-dcUpgrade samba-test-libsUpgrade samba4-pythonUpgrade libwbclientUpgrade samba4-commonUpgrade samba-glusterfsUpgrade samba4-clientUpgrade samba-client-libsUpgrade samba-winbind-develUpgrade samba4-dc-libsUpgrade samba4-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba4-libsUpgrade libsmbclient-develUpgrade samba-clientUpgrade samba-pythonUpgrade samba-winbindUpgrade samba-dc-libsUpgrade samba-domainjoin-guiUpgrade samba-common-libsUpgrade samba-develUpgrade libsmbclientUpgrade samba4-testUpgrade libwbclient-develUpgrade samba-common-toolsUpgrade samba-docUpgrade samba-winbind-krb5-locatorUpgrade samba4-winbind-krb5-locatorUpgrade samba-libsUpgrade samba-commonUpgrade samba4-develUpgrade samba-swatUpgrade samba4-winbindUpgrade sambaUpgrade ctdb-testsUpgrade samba-winbind-clients | Mar 28, 2017 | Dec 19, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.2R11Update Pulse Connect Secure to version 9.0R1Update Pulse Connect Secure to version 8.1R14Update Pulse Connect Secure to version 8.3R5 | Oct 28, 2020 | Oct 31, 2018 |
| Redhat_linux | — | Upgrade samba-dcUpgrade samba-pythonUpgrade samba-clientUpgrade samba-vfs-glusterfsUpgrade samba-debuginfoUpgrade samba-docUpgrade ctdbUpgrade samba-pidlUpgrade samba-domainjoin-guiUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade samba4-debuginfoUpgrade samba-testNo solution existsUpgrade samba4-dc-libsUpgrade samba4-pythonUpgrade libsmbclient-develUpgrade samba4-winbindUpgrade samba4Upgrade samba-krb5-printingUpgrade samba-winbind-develUpgrade samba-develUpgrade samba4-pidlUpgrade samba-test-libsUpgrade samba-commonUpgrade samba4-clientUpgrade samba-dc-libsUpgrade sambaUpgrade samba4-winbind-clientsUpgrade samba-common-libsUpgrade samba4-dcUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-glusterfsUpgrade libwbclientUpgrade samba4-develUpgrade samba-winbindUpgrade samba4-testUpgrade samba4-winbind-krb5-locatorUpgrade samba-client-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-swatUpgrade libwbclient-develUpgrade samba4-commonUpgrade ctdb-testsUpgrade samba4-libsUpgrade samba-common-tools | Mar 21, 2017 | Dec 19, 2016 |
| Samba | — | Upgrade to Samba version 4.3.13Upgrade to Samba version 4.4.8Upgrade to Samba version 4.5.3 | Dec 20, 2016 | Dec 20, 2016 |
| Suse | — | Upgrade samba-docUpgrade samba-x86Upgrade samba-libs-32bitUpgrade libwbclient0-debuginfoUpgrade libtevent-util0Upgrade libdcerpc-atsvc0Upgrade libsamba-passdb0-debuginfoUpgrade libtalloc2-32bitUpgrade libwbclient-develUpgrade libndr-standard0Upgrade libsmbldap0-32bitUpgrade libdcerpc0-debuginfoUpgrade libsamba-credentials0-debuginfoUpgrade libregistry-develUpgrade libtdb1-32bitUpgrade libsamba-policy-develUpgrade ctdb-develUpgrade libsmbconf0-debuginfoUpgrade libtdb1Upgrade libndr-krb5pac-develUpgrade libsamba-errors-develUpgrade libwbclient0-debuginfo-32bitUpgrade libsamdb0Upgrade libdcerpc0Upgrade libgensec0-debuginfo-32bitUpgrade libdcerpc-samr0-32bitUpgrade libsmbclient0-32bitUpgrade samba-krb-printingUpgrade samba-libs-python3-32bitUpgrade ctdb-debuginfoUpgrade libsamba-hostconfig0-debuginfoUpgrade libregistry0Upgrade libsmbconf-develUpgrade libldb-develUpgrade libsmbldap2Upgrade libdcerpc-atsvc0-32bitUpgrade ctdbUpgrade libdcerpc-binding0-debuginfo-32bitUpgrade libsamdb0-debuginfoUpgrade libsamba-errors0Upgrade libndr-krb5pac0-32bitUpgrade libdcerpc-samr-develUpgrade libregistry0-debuginfo-32bitUpgrade ldapsmbUpgrade libndr-krb5pac0-debuginfoUpgrade samba-clientUpgrade libndr-develUpgrade samba-client-debuginfoUpgrade libtdb-develUpgrade libndr0-32bitUpgrade samba-winbind-debuginfoUpgrade libsmbclient0Upgrade sambaUpgrade libgensec0Upgrade libsamba-util-develUpgrade libdcerpc-samr0-debuginfoUpgrade libsmbclient-raw0-32bitUpgrade libsamba-credentials-develUpgrade samba-libs-python3Upgrade libtevent-util0-debuginfo-32bitUpgrade libdcerpc-develUpgrade libsamba-policy0-debuginfo-32bitUpgrade libsamba-util0Upgrade samba-winbind-32bitUpgrade samba-core-develUpgrade libsamba-credentials0-32bitUpgrade libnetapi-develUpgrade libndr-krb5pac0-debuginfo-32bitUpgrade libdcerpc-binding0Upgrade libdcerpc0-32bitUpgrade libsmbldap0Upgrade libndr-nbt0Upgrade libndr-nbt-develUpgrade libsmbclient-raw0-debuginfo-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libnetapi0-32bitUpgrade libndr-nbt0-debuginfo-32bitUpgrade libndr-krb5pac0Upgrade samba-winbindUpgrade libgensec0-debuginfoUpgrade libdcerpc-atsvc0-debuginfo-32bitUpgrade samba-pythonUpgrade libsamba-errors0-debuginfoUpgrade libsamba-errors0-32bitUpgrade samba-debugsourceUpgrade libsmbsharemodes0Upgrade libsamba-util0-debuginfoUpgrade libwbclient0-32bitUpgrade samba-test-debuginfoUpgrade libtevent-util0-debuginfoUpgrade libsmbldap2-32bitUpgrade libtalloc2-x86Upgrade libsamba-hostconfig0Upgrade libndr0Upgrade libtalloc-develUpgrade libtevent-develUpgrade samba-debuginfo-32bitUpgrade libsmbldap0-debuginfoUpgrade libtevent0-x86Upgrade libndr-nbt0-debuginfoUpgrade samba-libsUpgrade libldb1Upgrade samba-testUpgrade libtevent0-32bitUpgrade libsmbconf0Upgrade libtevent0Upgrade libregistry0-32bitUpgrade libsamba-util0-32bitUpgrade libsamba-errors0-debuginfo-32bitUpgrade libsmbclient0-debuginfoUpgrade libndr-standard-develUpgrade libsamdb-develUpgrade samba-test-develUpgrade libwbclient0Upgrade samba-winbind-debuginfo-32bitUpgrade samba-debuginfoUpgrade samba-dsdb-modulesUpgrade libsamba-passdb0-debuginfo-32bitUpgrade libsamdb0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libtevent-util0-32bitUpgrade samba-python-debuginfoUpgrade libsamba-passdb0-32bitUpgrade libsmbclient-raw-develUpgrade samba-winbind-x86Upgrade libsamba-policy0-debuginfoUpgrade ctdb-testsUpgrade libsmbclient-raw0-debuginfoUpgrade libsmbclient-develUpgrade libnetapi0-debuginfoUpgrade libndr-standard0-debuginfo-32bitUpgrade libsamdb0-debuginfo-32bitUpgrade libsamba-policy0-32bitUpgrade libdcerpc-binding0-debuginfoUpgrade samba-kdcUpgrade libsamba-hostconfig0-debuginfo-32bitUpgrade libsmbsharemodes-develUpgrade libtalloc2Upgrade libtdb1-x86Upgrade ctdb-tests-debuginfoUpgrade libsmbconf0-debuginfo-32bitUpgrade samba-libs-debuginfoUpgrade libregistry0-debuginfoUpgrade samba-client-32bitUpgrade samba-develUpgrade libsamba-hostconfig-develUpgrade libdcerpc0-debuginfo-32bitUpgrade libsmbconf0-32bitUpgrade libsmbclient0-debuginfo-32bitUpgrade libsamba-credentials0-debuginfo-32bitUpgrade libndr-standard0-debuginfoUpgrade samba-client-debuginfo-32bitUpgrade libgensec-develUpgrade samba-32bitUpgrade libdcerpc-atsvc-develUpgrade libsamba-policy0Upgrade libtevent-util-develUpgrade libndr-nbt0-32bitUpgrade libdcerpc-atsvc0-debuginfoUpgrade samba-libs-debuginfo-32bitUpgrade libndr0-debuginfoUpgrade samba-pidlUpgrade libgensec0-32bitUpgrade libwbclient0-x86Upgrade libsamba-credentials0Upgrade samba-client-x86Upgrade libsamba-util0-debuginfo-32bitUpgrade libnetapi0Upgrade libsmbldap0-debuginfo-32bitUpgrade libnetapi0-debuginfo-32bitUpgrade libndr0-debuginfo-32bitUpgrade libndr-standard0-32bitUpgrade libsmbclient-raw0Upgrade libsmbclient0-x86Upgrade libdcerpc-samr0-debuginfo-32bitUpgrade libsamba-passdb0Upgrade libsmbldap-develUpgrade libsamba-passdb-develUpgrade libdcerpc-samr0 | Dec 28, 2016 | Dec 19, 2016 |
| Ubuntu | — | Upgrade libsmbclientUpgrade winbindUpgrade samba | Dec 20, 2016 | Dec 19, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub