It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Jul 26, 2018 | Jul 26, 2018 |
| Amazon_linux | — | Upgrade samba | Oct 13, 2017 | Sep 21, 2017 |
| Centos_linux | — | Upgrade libwbclient-develUpgrade samba4-commonUpgrade samba4-pidlUpgrade libwbclientUpgrade samba-glusterfsUpgrade samba-testUpgrade samba-client-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade samba4-testUpgrade samba4-develUpgrade samba-clientUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba4-winbind-krb5-locatorUpgrade samba4-libsUpgrade samba4-pythonUpgrade samba-vfs-glusterfsUpgrade samba-debuginfoUpgrade samba-winbindUpgrade samba4-winbind-clientsUpgrade samba-test-libsUpgrade samba-dcUpgrade samba-winbind-clientsUpgrade sambaUpgrade samba-pidlUpgrade samba-winbind-develUpgrade samba-common-libsUpgrade libsmbclient-develUpgrade samba4-dcUpgrade samba-dc-libsUpgrade samba4-winbindUpgrade samba-pythonUpgrade samba-domainjoin-guiUpgrade samba-krb5-printingUpgrade samba-docUpgrade samba-commonUpgrade samba4-debuginfoUpgrade samba4-dc-libsUpgrade samba4Upgrade samba-swatUpgrade samba4-clientUpgrade samba-libsUpgrade samba-devel | Sep 25, 2017 | Sep 21, 2017 |
| Debian | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
| Hpux | — | Update CIFS-Server to the latest version | Jun 5, 2018 | May 31, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-clientUpgrade samba-common-toolsUpgrade samba-libsUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-pythonUpgrade samba-client-libsUpgrade sambaUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade libwbclient | Nov 30, 2017 | Sep 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-clientUpgrade libsmbclientUpgrade samba-common-libsUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-libsUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-common | Nov 30, 2017 | Sep 20, 2017 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3 | Nov 30, 2017 | Nov 30, 2017 |
| Oracle_linux | — | Upgrade samba-dcUpgrade samba4-pidlUpgrade samba4-clientUpgrade samba4Upgrade samba4-commonUpgrade samba-glusterfsUpgrade samba-vfs-glusterfsUpgrade samba-test-libsUpgrade libwbclientUpgrade samba4-dcUpgrade samba4-pythonUpgrade samba-testUpgrade samba-pidlUpgrade samba-winbind-develUpgrade samba4-dc-libsUpgrade ctdbUpgrade samba-krb5-printingUpgrade samba-winbind-krb5-locatorUpgrade samba4-develUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-dc-libsUpgrade samba4-testUpgrade samba-clientUpgrade samba4-libsUpgrade ctdb-testsUpgrade samba-domainjoin-guiUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-develUpgrade sambaUpgrade libwbclient-develUpgrade samba-docUpgrade samba-commonUpgrade libsmbclient-develUpgrade samba-common-toolsUpgrade samba-swatUpgrade samba-winbind-modulesUpgrade samba4-winbind-clientsUpgrade samba4-winbindUpgrade samba-pythonUpgrade samba4-winbind-krb5-locatorUpgrade samba-client-libsUpgrade samba-libs | Sep 27, 2017 | Sep 20, 2017 |
| Redhat_linux | — | Upgrade sambaUpgrade samba-winbind-modulesUpgrade samba4-dcUpgrade samba-common-toolsUpgrade samba-winbindUpgrade libsmbclient-develUpgrade samba-client-libsUpgrade samba-krb5-printingUpgrade samba-domainjoin-guiUpgrade samba-swatUpgrade samba4-develUpgrade samba4-clientUpgrade samba-docUpgrade samba-commonUpgrade samba4-libsUpgrade samba4-winbind-krb5-locatorUpgrade samba-libsUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-clientUpgrade samba4-pythonUpgrade libwbclientUpgrade samba-debuginfoUpgrade samba-pythonUpgrade samba-winbind-krb5-locatorUpgrade samba4-winbindUpgrade samba-winbind-clientsUpgrade samba4-debuginfoUpgrade samba-winbind-develUpgrade samba-dc-libsUpgrade samba4-winbind-clientsUpgrade samba-develUpgrade samba4-testUpgrade samba4-commonNo solution existsUpgrade samba4-dc-libsUpgrade samba-dcUpgrade samba-test-libsUpgrade samba4-pidlUpgrade samba-testUpgrade samba-glusterfsUpgrade libwbclient-develUpgrade samba-vfs-glusterfsUpgrade samba4Upgrade samba-pidl | Oct 4, 2017 | Sep 21, 2017 |
| Samba | — | Upgrade to Samba version 4.4.16Upgrade to Samba version 4.5.14Upgrade to Samba version 4.6.8 | Sep 29, 2017 | Sep 29, 2017 |
| Suse | — | Upgrade libwbclient0-32bitUpgrade libgensec0Upgrade libndr0-32bitUpgrade libsamba-policy-python3-develUpgrade libsamba-util-develUpgrade libsamba-util0Upgrade libwbclient-develUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-policy0Upgrade libsamba-passdb0-32bitUpgrade samba-client-32bitUpgrade samba-cephUpgrade samba-libsUpgrade samba-dsdb-modulesUpgrade libwbclient0-x86Upgrade libwbclient0Upgrade samba-test-develUpgrade libndr-standard-develUpgrade libsmbclient-raw0Upgrade libtalloc2-x86Upgrade libtevent-develUpgrade samba-develUpgrade libndr-krb5pac0Upgrade samba-32bitUpgrade libsmbconf0-32bitUpgrade libndr-standard0-32bitUpgrade libtalloc-develUpgrade libtalloc2Upgrade libsamba-policy0-python3Upgrade libsamba-hostconfig-develUpgrade libtevent0-32bitUpgrade libsmbsharemodes-develUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc-develUpgrade libndr0Upgrade samba-winbind-x86Upgrade libtevent0-x86Upgrade libldb1Upgrade libnetapi0Upgrade libndr-nbt0-32bitUpgrade libsmbconf0Upgrade libndr1-32bitUpgrade samba-python3Upgrade libtevent0Upgrade libndr1Upgrade libsmbldap0-32bitUpgrade samba-testUpgrade libtevent-util0-32bitUpgrade libsamba-hostconfig0Upgrade libtdb1-x86Upgrade libsmbclient0-x86Upgrade libsamba-util0-32bitUpgrade libsamba-passdb-develUpgrade libdcerpc-binding0Upgrade libsamba-policy-develUpgrade libtdb1-32bitUpgrade samba-pythonUpgrade libtdb-develUpgrade libsamdb0Upgrade ctdbUpgrade samba-krb-printingUpgrade samba-winbind-32bitUpgrade samba-client-x86Upgrade libsmbldap2Upgrade samba-libs-32bitUpgrade libsmbclient0-32bitUpgrade libsmbclient-raw0-32bitUpgrade samba-core-develUpgrade libsmbclient0Upgrade samba-x86Upgrade libndr-krb5pac0-32bitUpgrade samba-kdcUpgrade libsamba-errors0-32bitUpgrade libsamdb-develUpgrade libsamdb0-32bitUpgrade libtalloc2-32bitUpgrade libsamba-credentials-develUpgrade sambaUpgrade samba-clientUpgrade libnetapi-develUpgrade libdcerpc-samr-develUpgrade libdcerpc-atsvc0Upgrade ldapsmbUpgrade libndr-nbt0Upgrade libtevent-util0Upgrade libregistry0Upgrade libtdb1Upgrade libndr-develUpgrade libsmbconf-develUpgrade libndr-nbt-develUpgrade libdcerpc0-32bitUpgrade libsmbldap0Upgrade libdcerpc0Upgrade samba-libs-python3Upgrade libsamba-credentials0-32bitUpgrade libnetapi0-32bitUpgrade libsamba-passdb0Upgrade libsmbsharemodes0Upgrade libsamba-errors0Upgrade libldb-develUpgrade samba-libs-python3-32bitUpgrade libndr-standard0Upgrade samba-winbindUpgrade libsamba-errors-develUpgrade samba-doc | Oct 5, 2017 | Sep 21, 2017 |
| Ubuntu | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub