Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate) checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the winbindd privileged pipe can cause winbindd to cache elevated access permissions.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | May 11, 2017 |
| Amazon_linux | — | — | May 31, 2017 | Dec 19, 2016 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 11, 2017 |
| Centos_linux | — | Upgrade samba4Upgrade samba-common-toolsUpgrade samba-libsUpgrade samba-docUpgrade samba4-libsUpgrade samba-testUpgrade sambaUpgrade samba-dcUpgrade samba4-commonUpgrade samba-swatUpgrade samba4-develUpgrade samba4-pythonUpgrade samba4-winbind-krb5-locatorUpgrade samba-winbind-modulesUpgrade samba-debuginfoUpgrade libwbclient-develUpgrade samba4-dcUpgrade samba-winbind-develUpgrade samba4-testUpgrade samba-winbind-clientsUpgrade samba-glusterfsUpgrade samba4-pidlUpgrade samba-develUpgrade samba-krb5-printingUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade samba4-winbind-clientsUpgrade samba-client-libsUpgrade samba-winbindUpgrade libsmbclient-develUpgrade samba-commonUpgrade samba-pythonUpgrade libwbclientUpgrade samba4-winbindUpgrade samba4-debuginfoUpgrade samba4-clientUpgrade samba-domainjoin-gui | May 24, 2017 | Dec 19, 2016 |
| Debian | — | Upgrade samba | Dec 20, 2016 | Dec 19, 2016 |
| Freebsd | — | Upgrade samba42Upgrade samba4Upgrade samba36Upgrade samba43Upgrade samba45Upgrade samba44Upgrade samba41 | Dec 28, 2016 | Dec 26, 2016 |
| Oracle_linux | — | Upgrade samba-develUpgrade samba-common-toolsUpgrade samba4-dcUpgrade samba-test-libsUpgrade samba-winbind-develUpgrade samba-winbind-modulesUpgrade samba-dcUpgrade samba-winbind-clientsUpgrade ctdbUpgrade samba4-winbind-clientsUpgrade samba-dc-libsUpgrade samba-common-libsUpgrade samba-vfs-glusterfsUpgrade samba4Upgrade samba-glusterfsUpgrade samba4-clientUpgrade samba4-winbindUpgrade samba-winbind-krb5-locatorUpgrade samba4-dc-libsUpgrade samba-clientUpgrade samba-commonUpgrade samba4-pidlUpgrade libwbclient-develUpgrade samba-testUpgrade samba-swatUpgrade samba4-develUpgrade samba4-pythonUpgrade libwbclientUpgrade samba4-testUpgrade samba4-winbind-krb5-locatorUpgrade samba4-libsUpgrade libsmbclient-develUpgrade ctdb-testsUpgrade samba-pidlUpgrade samba4-commonUpgrade samba-libsUpgrade samba-winbindUpgrade samba-docUpgrade samba-domainjoin-guiUpgrade samba-pythonUpgrade samba-client-libsUpgrade libsmbclientUpgrade sambaUpgrade samba-krb5-printing | Mar 28, 2017 | Dec 19, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.1R14Update Pulse Connect Secure to version 8.3R5Update Pulse Connect Secure to version 9.0R1Update Pulse Connect Secure to version 8.2R11 | Oct 28, 2020 | May 11, 2017 |
| Redhat_linux | — | Upgrade samba-krb5-printingUpgrade samba-debuginfoUpgrade samba4Upgrade samba4-winbindUpgrade samba-vfs-glusterfsUpgrade samba4-winbind-clientsUpgrade samba-pidlUpgrade samba4-clientUpgrade samba-develUpgrade samba-commonUpgrade samba-domainjoin-guiUpgrade samba-libsUpgrade samba-testNo solution existsUpgrade samba-test-libsUpgrade samba4-debuginfoUpgrade samba4-libsUpgrade samba4-pidlUpgrade ctdbUpgrade libsmbclient-develUpgrade libwbclientUpgrade libsmbclientUpgrade samba4-dc-libsUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-winbind-develUpgrade samba4-winbind-krb5-locatorUpgrade ctdb-testsUpgrade samba-dcUpgrade samba-common-libsUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba-docUpgrade samba-common-toolsUpgrade samba4-develUpgrade libwbclient-develUpgrade samba-dc-libsUpgrade samba4-dcUpgrade samba-winbind-krb5-locatorUpgrade samba-swatUpgrade samba-glusterfsUpgrade samba-clientUpgrade samba-winbindUpgrade samba4-commonUpgrade samba4-testUpgrade samba4-pythonUpgrade samba | Mar 21, 2017 | Dec 19, 2016 |
| Samba | — | Upgrade to Samba version 4.3.13Upgrade to Samba version 4.5.3Upgrade to Samba version 4.4.8 | Dec 20, 2016 | Dec 20, 2016 |
| Suse | — | Upgrade libndr1Upgrade libtevent-develUpgrade ctdb-develUpgrade libsmbconf-develUpgrade libnetapi0Upgrade samba-docUpgrade libdcerpc-binding0Upgrade samba-pythonUpgrade libsamba-util0Upgrade libsmbconf0Upgrade libtevent-util0-32bitUpgrade samba-libs-python3-32bitUpgrade libsmbconf0-32bitUpgrade libsmbldap0Upgrade samba-python3Upgrade ctdbUpgrade libsmbsharemodes0Upgrade libndr-develUpgrade ldapsmbUpgrade libsmbldap2-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsmbclient0-32bitUpgrade libndr0Upgrade libsmbldap0-32bitUpgrade samba-libs-python3Upgrade libndr-krb5pac-develUpgrade samba-winbind-32bitUpgrade libdcerpc-develUpgrade libsamba-hostconfig0-32bitUpgrade samba-core-develUpgrade libndr0-32bitUpgrade libnetapi-develUpgrade sambaUpgrade libldb-develUpgrade libsamba-policy0Upgrade libsamba-passdb0-32bitUpgrade libsamba-util-develUpgrade libdcerpc-samr-develUpgrade libsamba-policy-develUpgrade libsmbclient-raw0-32bitUpgrade libwbclient0-x86Upgrade libtdb1-32bitUpgrade samba-32bitUpgrade libdcerpc-atsvc0Upgrade libsamba-errors0Upgrade libsamba-errors-develUpgrade libndr-nbt-develUpgrade libsmbclient-raw-develUpgrade samba-winbindUpgrade samba-libs-32bitUpgrade libwbclient-develUpgrade libtalloc2-x86Upgrade libtevent0-x86Upgrade libndr-nbt0Upgrade libndr-krb5pac0Upgrade libsamba-credentials-develUpgrade samba-x86Upgrade libdcerpc0-32bitUpgrade libsamdb0Upgrade libsamba-hostconfig0Upgrade libtevent-util0Upgrade libsmbldap2Upgrade libwbclient0-32bitUpgrade samba-cephUpgrade samba-krb-printingUpgrade libregistry-develUpgrade samba-winbind-x86Upgrade samba-testUpgrade libregistry0Upgrade libndr1-32bitUpgrade libndr-standard0-32bitUpgrade libndr-standard0Upgrade samba-client-32bitUpgrade samba-libsUpgrade samba-test-develUpgrade libdcerpc-samr0Upgrade libwbclient0Upgrade libsamba-credentials0-32bitUpgrade libsmbclient0Upgrade libgensec-develUpgrade libdcerpc-atsvc-develUpgrade libsamba-errors0-32bitUpgrade libtalloc2-32bitUpgrade libsamba-util0-32bitUpgrade libtevent0Upgrade libtdb-develUpgrade libsamba-policy-python3-develUpgrade libsmbldap-develUpgrade libsamdb0-32bitUpgrade libsamba-passdb-develUpgrade libsamba-policy0-python3Upgrade samba-develUpgrade libsmbclient-develUpgrade libsamba-credentials0Upgrade libsmbsharemodes-develUpgrade libndr-nbt0-32bitUpgrade libsmbclient-raw0Upgrade samba-dsdb-modulesUpgrade libsamdb-develUpgrade libtalloc-develUpgrade libndr-standard-develUpgrade libnetapi0-32bitUpgrade libsamba-passdb0Upgrade libgensec0-32bitUpgrade libtdb1Upgrade libsamba-hostconfig-develUpgrade libtdb1-x86Upgrade samba-clientUpgrade libdcerpc0Upgrade libdcerpc-binding0-32bitUpgrade libgensec0Upgrade libtalloc2Upgrade samba-kdcUpgrade libtevent-util-develUpgrade samba-client-x86Upgrade libldb1Upgrade libsmbclient0-x86Upgrade libtevent0-32bit | Dec 28, 2016 | Dec 19, 2016 |
| Suse Suse | — | Upgrade libtevent0-32bitUpgrade libsmbclient0-x86Upgrade samba-test-develUpgrade libtevent-util0-debuginfoUpgrade libdcerpc-binding0-32bitUpgrade samba-test-debuginfoUpgrade samba-libs-debuginfo-32bitUpgrade libtdb1-x86Upgrade libtdb1Upgrade libsamba-credentials0Upgrade libnetapi0-32bitUpgrade libndr-nbt0-32bitUpgrade libsamba-util0Upgrade libsamba-credentials0-32bitUpgrade libndr0-32bitUpgrade libndr-nbt0-debuginfo-32bitUpgrade libgensec0-debuginfo-32bitUpgrade samba-krb-printingUpgrade libsmbclient-raw-develUpgrade libsamba-util0-debuginfo-32bitUpgrade libsamba-passdb0Upgrade libsamba-hostconfig-develUpgrade libsamba-policy0-32bitUpgrade libldb1Upgrade libdcerpc-samr0Upgrade libregistry0-debuginfoUpgrade libndr0-debuginfo-32bitUpgrade libsmbclient0-32bitUpgrade libsamdb0-debuginfo-32bitUpgrade libsamdb-develUpgrade libsmbsharemodes-develUpgrade libsamba-passdb-develUpgrade libtdb-develUpgrade libregistry0Upgrade libregistry-develUpgrade libndr-krb5pac0-debuginfo-32bitUpgrade libdcerpc0Upgrade libdcerpc-samr0-debuginfo-32bitUpgrade libdcerpc-binding0-debuginfoUpgrade libdcerpc-atsvc0-debuginfo-32bitUpgrade samba-libs-debuginfoUpgrade samba-client-x86Upgrade libtalloc2-32bitUpgrade samba-client-32bitUpgrade samba-clientUpgrade libtevent-util-develUpgrade libdcerpc-binding0-debuginfo-32bitUpgrade libdcerpc-samr-develUpgrade libndr-standard0-debuginfoUpgrade libgensec-develUpgrade ldapsmbUpgrade ctdb-develUpgrade samba-python-debuginfoUpgrade samba-libsUpgrade libnetapi-develUpgrade libdcerpc-atsvc-develUpgrade samba-testUpgrade libsamba-hostconfig0-debuginfo-32bitUpgrade libregistry0-32bitUpgrade libsmbconf0-debuginfo-32bitUpgrade libsmbclient0Upgrade libsmbclient-raw0-debuginfoUpgrade libsamdb0-32bitUpgrade libsamba-policy-develUpgrade libsamba-util0-32bitUpgrade libsamba-errors0-debuginfoUpgrade libsamba-errors0-32bitUpgrade libsamba-credentials0-debuginfo-32bitUpgrade samba-client-debuginfoUpgrade libtevent0Upgrade libndr-develUpgrade libgensec0-debuginfoUpgrade libdcerpc0-32bitUpgrade libdcerpc-atsvc0-debuginfoUpgrade libndr-standard0Upgrade libndr-standard-develUpgrade libsmbldap-develUpgrade libsmbconf0Upgrade libsmbldap0-debuginfo-32bitUpgrade libsmbldap0Upgrade libsamba-passdb0-32bitUpgrade libnetapi0-debuginfoUpgrade libsmbldap0-debuginfoUpgrade libsmbclient0-debuginfoUpgrade libndr0Upgrade libsamba-hostconfig0-32bitUpgrade libtevent-util0Upgrade libtevent-develUpgrade libsmbldap0-32bitUpgrade libsmbconf0-32bitUpgrade libsamba-util-develUpgrade libsamba-passdb0-debuginfo-32bitUpgrade libsamba-errors0-debuginfo-32bitUpgrade ctdb-testsUpgrade libsamba-errors0Upgrade libnetapi0-debuginfo-32bitUpgrade libndr0-debuginfoUpgrade libndr-standard0-debuginfo-32bitUpgrade libndr-krb5pac-develUpgrade libdcerpc-samr0-debuginfoUpgrade libdcerpc-binding0Upgrade samba-docUpgrade samba-core-develUpgrade libwbclient0-debuginfo-32bitUpgrade libsmbclient-raw0-debuginfo-32bitUpgrade libtdb1-32bitUpgrade libtalloc2-x86Upgrade libsmbconf-develUpgrade libsmbclient-develUpgrade libndr-nbt0Upgrade libsamba-credentials-develUpgrade libnetapi0Upgrade libgensec0Upgrade libdcerpc0-debuginfoUpgrade ctdb-tests-debuginfoUpgrade samba-pythonUpgrade samba-libs-32bitUpgrade libsamba-hostconfig0-debuginfoUpgrade libwbclient0-32bitUpgrade libwbclient-develUpgrade libtalloc-develUpgrade libsmbsharemodes0Upgrade libsamdb0-debuginfoUpgrade libsamba-util0-debuginfoUpgrade libndr-krb5pac0-32bitUpgrade libdcerpc-develUpgrade ctdb-debuginfoUpgrade samba-winbind-debuginfo-32bitUpgrade samba-debugsourceUpgrade samba-32bitUpgrade libwbclient0-debuginfoUpgrade libsamba-errors-develUpgrade libsamba-credentials0-debuginfoUpgrade libsmbconf0-debuginfoUpgrade libregistry0-debuginfo-32bitUpgrade libgensec0-32bitUpgrade libdcerpc-samr0-32bitUpgrade libdcerpc-atsvc0Upgrade libsamba-policy0-debuginfo-32bitUpgrade libsamba-policy0-debuginfoUpgrade samba-debuginfo-32bitUpgrade libsmbclient-raw0-32bitUpgrade libsmbclient-raw0Upgrade samba-develUpgrade samba-client-debuginfo-32bitUpgrade libwbclient0-x86Upgrade libtevent0-x86Upgrade libtevent-util0-debuginfo-32bitUpgrade libtalloc2Upgrade libsamba-policy0Upgrade samba-winbind-debuginfoUpgrade libdcerpc0-debuginfo-32bitUpgrade samba-winbind-x86Upgrade samba-pidlUpgrade samba-debuginfoUpgrade libwbclient0Upgrade samba-x86Upgrade samba-winbind-32bitUpgrade libsamba-hostconfig0Upgrade libndr-standard0-32bitUpgrade libndr-nbt-develUpgrade ctdbUpgrade libndr-krb5pac0Upgrade samba-winbindUpgrade libsmbclient0-debuginfo-32bitUpgrade libldb-develUpgrade libdcerpc-atsvc0-32bitUpgrade libndr-nbt0-debuginfoUpgrade libndr-krb5pac0-debuginfoUpgrade libsamba-passdb0-debuginfoUpgrade libsamdb0Upgrade sambaUpgrade libtevent-util0-32bit | Jul 28, 2017 | Dec 27, 2016 |
| Ubuntu | — | Upgrade libsmbclientUpgrade winbindUpgrade samba | Dec 20, 2016 | Dec 19, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub