Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate) checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the winbindd privileged pipe can cause winbindd to cache elevated access permissions.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | May 11, 2017 |
| Amazon_linux | — | — | May 31, 2017 | Dec 19, 2016 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 11, 2017 |
| Centos_linux | — | Upgrade samba-pythonUpgrade samba-krb5-printingUpgrade sambaUpgrade samba-test-libsUpgrade samba4-winbind-clientsUpgrade samba4Upgrade samba-winbindUpgrade samba-domainjoin-guiUpgrade libsmbclient-develUpgrade samba-develUpgrade samba-winbind-krb5-locatorUpgrade samba-testUpgrade samba-commonUpgrade samba4-pidlUpgrade samba-docUpgrade samba4-winbindUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-libsUpgrade samba-dcUpgrade samba4-commonUpgrade samba-winbind-develUpgrade samba4-develUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba4-pythonUpgrade libwbclient-develUpgrade samba4-winbind-krb5-locatorUpgrade samba4-dc-libsUpgrade samba-pidlUpgrade samba-vfs-glusterfsUpgrade samba-winbind-clientsUpgrade samba4-testUpgrade samba-glusterfsUpgrade samba-winbind-modulesUpgrade samba-swatUpgrade samba4-dcUpgrade samba-clientUpgrade samba-dc-libsUpgrade samba-debuginfo | May 24, 2017 | Dec 19, 2016 |
| Debian | — | Upgrade samba | Dec 20, 2016 | Dec 19, 2016 |
| Freebsd | — | Upgrade samba44Upgrade samba43Upgrade samba45Upgrade samba36Upgrade samba41Upgrade samba42Upgrade samba4 | Dec 28, 2016 | Dec 26, 2016 |
| Oracle_linux | — | Upgrade libsmbclientUpgrade samba4-winbind-krb5-locatorUpgrade samba4-testUpgrade libwbclientUpgrade samba-libsUpgrade samba-winbindUpgrade samba-docUpgrade libsmbclient-develUpgrade samba-krb5-printingUpgrade samba4-commonUpgrade samba-client-libsUpgrade samba4-develUpgrade samba-pythonUpgrade samba-domainjoin-guiUpgrade ctdb-testsUpgrade samba4-libsUpgrade samba-testUpgrade samba-swatUpgrade samba-pidlUpgrade samba4-pythonUpgrade sambaUpgrade libwbclient-develUpgrade ctdbUpgrade samba4-winbindUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba4Upgrade samba4-pidlUpgrade samba-test-libsUpgrade samba-glusterfsUpgrade samba-vfs-glusterfsUpgrade samba-develUpgrade samba-winbind-develUpgrade samba-clientUpgrade samba-commonUpgrade samba4-clientUpgrade samba4-dc-libsUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba4-dcUpgrade samba-common-libsUpgrade samba4-winbind-clientsUpgrade samba-dc-libsUpgrade samba-dc | Mar 28, 2017 | Dec 19, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.2R11Update Pulse Connect Secure to version 9.0R1Update Pulse Connect Secure to version 8.3R5Update Pulse Connect Secure to version 8.1R14 | Oct 28, 2020 | May 11, 2017 |
| Redhat_linux | — | Upgrade samba4Upgrade samba-domainjoin-guiUpgrade samba4-libsUpgrade samba-testUpgrade libwbclientUpgrade samba4-pidlUpgrade samba-develUpgrade samba4-winbind-clientsUpgrade samba-krb5-printingUpgrade samba-test-libsNo solution existsUpgrade samba-debuginfoUpgrade samba4-winbindUpgrade samba-libsUpgrade samba4-clientUpgrade samba-commonUpgrade samba4-debuginfoUpgrade libsmbclient-develUpgrade samba-vfs-glusterfsUpgrade samba-pidlUpgrade ctdbUpgrade samba-client-libsUpgrade samba-common-libsUpgrade samba4-develUpgrade samba-winbind-clientsUpgrade ctdb-testsUpgrade samba-docUpgrade samba4-dc-libsUpgrade samba-winbindUpgrade samba4-winbind-krb5-locatorUpgrade samba-winbind-modulesUpgrade samba4-testUpgrade samba-clientUpgrade samba4-dcUpgrade samba-dcUpgrade samba4-pythonUpgrade samba4-commonUpgrade samba-dc-libsUpgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade libwbclient-develUpgrade samba-swatUpgrade samba-common-toolsUpgrade samba-winbind-develUpgrade sambaUpgrade samba-glusterfsUpgrade samba-python | Mar 21, 2017 | Dec 19, 2016 |
| Samba | — | Upgrade to Samba version 4.3.13Upgrade to Samba version 4.4.8Upgrade to Samba version 4.5.3 | Dec 20, 2016 | Dec 20, 2016 |
| Suse | — | Upgrade libdcerpc0-32bitUpgrade samba-x86Upgrade libsamba-policy-develUpgrade libsmbclient0-32bitUpgrade libnetapi-develUpgrade libsamba-hostconfig0-32bitUpgrade libldb-develUpgrade libndr-krb5pac-develUpgrade libtevent-util0-32bitUpgrade libsmbldap2Upgrade samba-libs-python3Upgrade libtdb1-32bitUpgrade sambaUpgrade libsmbconf0-32bitUpgrade libsamba-hostconfig0Upgrade libwbclient0-32bitUpgrade libndr-krb5pac0Upgrade libtevent0-x86Upgrade samba-cephUpgrade samba-pythonUpgrade libsmbsharemodes0Upgrade libdcerpc-binding0Upgrade libsamba-policy0Upgrade libndr-develUpgrade ldapsmbUpgrade libsamba-passdb0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libsmbconf0Upgrade libsmbldap0Upgrade libsmbldap0-32bitUpgrade samba-libs-python3-32bitUpgrade libsamba-util-develUpgrade samba-docUpgrade libsmbconf-develUpgrade libsamba-util0Upgrade ctdb-develUpgrade libnetapi0Upgrade samba-32bitUpgrade libndr0Upgrade libndr-krb5pac0-32bitUpgrade libdcerpc-develUpgrade samba-core-develUpgrade samba-winbind-32bitUpgrade libndr-nbt-develUpgrade libdcerpc-atsvc0Upgrade libwbclient0-x86Upgrade libndr0-32bitUpgrade libsamba-credentials-develUpgrade libndr-nbt0Upgrade libsmbldap2-32bitUpgrade libdcerpc-samr-develUpgrade libsmbclient-raw-develUpgrade libwbclient-develUpgrade samba-python3Upgrade ctdbUpgrade libtevent-develUpgrade libtevent-util0Upgrade samba-winbindUpgrade libtalloc2-x86Upgrade libsamba-errors0Upgrade libsamdb0Upgrade samba-libs-32bitUpgrade libsamba-errors-develUpgrade libndr1Upgrade libdcerpc-samr0Upgrade libsamba-policy0-python3Upgrade libnetapi0-32bitUpgrade libsamdb0-32bitUpgrade libsamba-hostconfig-develUpgrade libsamba-credentials0Upgrade libdcerpc-binding0-32bitUpgrade libgensec0Upgrade libdcerpc0Upgrade libsmbclient-develUpgrade libsmbldap-develUpgrade libsamba-policy-python3-develUpgrade libsmbclient0Upgrade libsamba-errors0-32bitUpgrade libdcerpc-atsvc-develUpgrade libsamba-passdb-develUpgrade libgensec-develUpgrade libtevent0Upgrade libtdb1-x86Upgrade libtalloc2-32bitUpgrade libtdb-develUpgrade samba-kdcUpgrade samba-client-x86Upgrade libregistry0Upgrade libtdb1Upgrade libsmbsharemodes-develUpgrade libgensec0-32bitUpgrade libregistry-develUpgrade samba-krb-printingUpgrade samba-client-32bitUpgrade libndr-standard0Upgrade samba-winbind-x86Upgrade libndr-standard0-32bitUpgrade libsamba-util0-32bitUpgrade samba-libsUpgrade libndr-standard-develUpgrade samba-clientUpgrade samba-develUpgrade libndr-nbt0-32bitUpgrade libsamba-passdb0Upgrade libwbclient0Upgrade libsamdb-develUpgrade libsamba-credentials0-32bitUpgrade libtalloc-develUpgrade libndr1-32bitUpgrade samba-test-develUpgrade samba-testUpgrade libtevent-util-develUpgrade libtalloc2Upgrade libsmbclient0-x86Upgrade libldb1Upgrade libtevent0-32bitUpgrade samba-dsdb-modulesUpgrade libsmbclient-raw0 | Dec 28, 2016 | Dec 19, 2016 |
| Suse Suse | — | Upgrade libndr-develUpgrade samba-libsUpgrade samba-libs-debuginfoUpgrade libdcerpc-atsvc0-debuginfo-32bitUpgrade samba-client-debuginfoUpgrade libsamba-credentials0-debuginfo-32bitUpgrade libtdb1Upgrade libdcerpc-binding0-32bitUpgrade ldapsmbUpgrade libdcerpc-binding0-debuginfoUpgrade libsamba-credentials0Upgrade libndr0-32bitUpgrade libdcerpc-samr-develUpgrade libsmbclient-raw-develUpgrade libsamba-passdb0Upgrade libsamba-hostconfig-develUpgrade samba-python-debuginfoUpgrade samba-krb-printingUpgrade libsamba-credentials0-32bitUpgrade libtdb-develUpgrade libsmbsharemodes-develUpgrade libsamba-passdb-develUpgrade libregistry0Upgrade libregistry-develUpgrade libndr-krb5pac0-debuginfo-32bitUpgrade libdcerpc-samr0-debuginfo-32bitUpgrade libdcerpc0Upgrade libndr-standard-develUpgrade libgensec0-debuginfoUpgrade libdcerpc0-32bitUpgrade libdcerpc-atsvc0-debuginfoUpgrade libtevent0Upgrade libsamba-util0-32bitUpgrade libsamba-errors0-debuginfoUpgrade libtevent-util-develUpgrade samba-testUpgrade libtalloc2-32bitUpgrade libnetapi-develUpgrade samba-client-32bitUpgrade samba-clientUpgrade libsamba-errors0-32bitUpgrade libndr-standard0Upgrade libdcerpc-atsvc-develUpgrade libtdb1-x86Upgrade libsmbclient0-x86Upgrade libsamba-util0Upgrade samba-test-develUpgrade libtevent0-32bitUpgrade libtevent-util0-debuginfoUpgrade libndr-nbt0-debuginfo-32bitUpgrade libgensec0-debuginfo-32bitUpgrade samba-test-debuginfoUpgrade libndr-nbt0-32bitUpgrade libnetapi0-32bitUpgrade libsamdb0-debuginfo-32bitUpgrade libsamba-policy0-32bitUpgrade libdcerpc-samr0Upgrade libndr0-debuginfo-32bitUpgrade libregistry0-debuginfoUpgrade libldb1Upgrade libsmbclient0-32bitUpgrade libsamba-util0-debuginfo-32bitUpgrade libdcerpc-binding0-debuginfo-32bitUpgrade libsmbclient0Upgrade libsmbclient-raw0-debuginfoUpgrade libsamdb0-32bitUpgrade libsamba-policy-develUpgrade libsamba-hostconfig0-debuginfo-32bitUpgrade libregistry0-32bitUpgrade libsmbconf0-debuginfo-32bitUpgrade ctdb-develUpgrade libsamdb-develUpgrade libndr-standard0-debuginfoUpgrade samba-client-x86Upgrade samba-libs-debuginfo-32bitUpgrade libgensec-develUpgrade samba-winbind-x86Upgrade libwbclient0Upgrade ctdb-tests-debuginfoUpgrade libdcerpc-atsvc0Upgrade samba-winbind-32bitUpgrade libsmbldap0-debuginfoUpgrade libsamba-passdb0-debuginfoUpgrade libndr-standard0-32bitUpgrade libndr-nbt-develUpgrade libdcerpc0-debuginfo-32bitUpgrade libsamba-passdb0-32bitUpgrade libsamba-hostconfig0Upgrade libtevent-develUpgrade samba-docUpgrade samba-pythonUpgrade samba-libs-32bitUpgrade libtalloc2-x86Upgrade libsmbldap-develUpgrade libsmbconf0Upgrade libsmbconf-develUpgrade libsmbclient-develUpgrade libsamba-hostconfig0-debuginfoUpgrade libsamba-credentials-develUpgrade libnetapi0Upgrade libndr-nbt0Upgrade libgensec0Upgrade libdcerpc0-debuginfoUpgrade libsmbclient0-debuginfo-32bitUpgrade libndr-nbt0-debuginfoUpgrade libndr-krb5pac0-debuginfoUpgrade libsamba-errors0Upgrade libsamba-util-develUpgrade libsamba-passdb0-debuginfo-32bitUpgrade libsamba-errors0-debuginfo-32bitUpgrade libnetapi0-debuginfo-32bitUpgrade libndr-standard0-debuginfo-32bitUpgrade libndr-krb5pac-develUpgrade libdcerpc-samr0-debuginfoUpgrade samba-core-develUpgrade libwbclient0-debuginfo-32bitUpgrade libtevent-util0Upgrade libsmbconf0-32bitUpgrade samba-debuginfo-32bitUpgrade libndr-krb5pac0Upgrade libldb-develUpgrade libdcerpc-atsvc0-32bitUpgrade samba-winbindUpgrade libsmbclient-raw0-debuginfo-32bitUpgrade libsmbldap0-32bitUpgrade ctdb-testsUpgrade libsmbconf0-debuginfoUpgrade libsmbclient-raw0-32bitUpgrade libsmbclient-raw0Upgrade libsamba-policy0-debuginfo-32bitUpgrade libsamba-policy0-debuginfoUpgrade libregistry0-debuginfo-32bitUpgrade libsamba-errors-develUpgrade libsamba-credentials0-debuginfoUpgrade libgensec0-32bitUpgrade libdcerpc-samr0-32bitUpgrade libndr0-debuginfoUpgrade libwbclient-develUpgrade libtalloc-develUpgrade libsmbsharemodes0Upgrade libsamdb0-debuginfoUpgrade libsamba-util0-debuginfoUpgrade libndr-krb5pac0-32bitUpgrade ctdb-debuginfoUpgrade samba-winbind-debuginfo-32bitUpgrade samba-debugsourceUpgrade samba-32bitUpgrade libwbclient0-debuginfoUpgrade libwbclient0-32bitUpgrade libwbclient0-x86Upgrade libtevent0-x86Upgrade libtevent-util0-debuginfo-32bitUpgrade libtdb1-32bitUpgrade libtalloc2Upgrade libsamba-policy0Upgrade libsamba-hostconfig0-32bitUpgrade samba-winbind-debuginfoUpgrade samba-develUpgrade samba-client-debuginfo-32bitUpgrade libdcerpc-develUpgrade libdcerpc-binding0Upgrade sambaUpgrade libndr0Upgrade samba-pidlUpgrade samba-debuginfoUpgrade libtevent-util0-32bitUpgrade libsmbldap0-debuginfo-32bitUpgrade libsmbldap0Upgrade libsmbclient0-debuginfoUpgrade libsamdb0Upgrade libnetapi0-debuginfoUpgrade ctdbUpgrade samba-x86 | Jul 28, 2017 | Dec 27, 2016 |
| Ubuntu | — | Upgrade sambaUpgrade winbindUpgrade libsmbclient | Dec 20, 2016 | Dec 19, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub