It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Jul 26, 2018 | Jul 26, 2018 |
| Amazon_linux | — | Upgrade samba | Oct 13, 2017 | Sep 21, 2017 |
| Centos_linux | — | Upgrade samba4-winbind-krb5-locatorUpgrade samba4-libsUpgrade samba4-testUpgrade samba4-commonUpgrade libwbclient-develUpgrade samba-winbind-modulesUpgrade samba4-pidlUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade samba-client-libsUpgrade libwbclientUpgrade samba4-develUpgrade samba-testUpgrade samba-glusterfsUpgrade samba-clientUpgrade samba-pythonUpgrade samba-winbind-develUpgrade samba-domainjoin-guiUpgrade samba-winbindUpgrade samba4-dcUpgrade samba-swatUpgrade sambaUpgrade samba-pidlUpgrade samba-test-libsUpgrade samba4-dc-libsUpgrade samba4-clientUpgrade samba-dcUpgrade samba4Upgrade samba-winbind-clientsUpgrade samba-docUpgrade samba-vfs-glusterfsUpgrade samba4-winbindUpgrade samba-dc-libsUpgrade samba-common-libsUpgrade samba-debuginfoUpgrade samba4-pythonUpgrade libsmbclient-develUpgrade samba4-debuginfoUpgrade samba4-winbind-clientsUpgrade samba-libsUpgrade samba-develUpgrade samba-commonUpgrade samba-krb5-printing | Sep 25, 2017 | Sep 21, 2017 |
| Debian | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
| Hpux | — | Update CIFS-Server to the latest version | Jun 5, 2018 | May 31, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-libsUpgrade samba-winbindUpgrade sambaUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade samba-pythonUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade libwbclient | Nov 30, 2017 | Sep 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-commonUpgrade samba-libsUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-common-toolsUpgrade sambaUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-pythonUpgrade libsmbclient | Nov 30, 2017 | Sep 20, 2017 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3 | Nov 30, 2017 | Nov 30, 2017 |
| Oracle_linux | — | Upgrade samba-dcUpgrade samba-testUpgrade ctdbUpgrade samba-winbind-develUpgrade samba4-pidlUpgrade samba-test-libsUpgrade samba4-clientUpgrade samba4-dc-libsUpgrade samba4-pythonUpgrade libwbclientUpgrade samba-vfs-glusterfsUpgrade samba-krb5-printingUpgrade samba-glusterfsUpgrade samba4Upgrade samba-pidlUpgrade samba4-commonUpgrade samba4-dcUpgrade samba4-libsUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade libsmbclient-develUpgrade samba-docUpgrade samba-winbindUpgrade samba4-testUpgrade libwbclient-develUpgrade samba4-develUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-dc-libsUpgrade samba4-winbind-clientsUpgrade samba4-winbind-krb5-locatorUpgrade samba-client-libsUpgrade samba-commonUpgrade samba-pythonUpgrade samba-libsUpgrade samba-swatUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-modulesUpgrade ctdb-testsUpgrade samba-develUpgrade libsmbclientUpgrade samba4-winbindUpgrade sambaUpgrade samba-domainjoin-gui | Sep 27, 2017 | Sep 20, 2017 |
| Redhat_linux | — | Upgrade samba-winbindUpgrade samba4-pythonUpgrade samba-common-libsUpgrade samba4-debuginfoUpgrade sambaUpgrade samba4-develUpgrade samba-dc-libsUpgrade samba4-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-krb5-printingUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade samba-pythonUpgrade libwbclientUpgrade samba-debuginfoUpgrade samba4-libsUpgrade samba-docUpgrade samba-clientUpgrade samba4-winbind-clientsUpgrade samba-swatUpgrade samba-commonUpgrade samba4-dcUpgrade samba-common-toolsUpgrade samba-winbind-develUpgrade samba-domainjoin-guiUpgrade libsmbclient-develUpgrade samba-client-libsUpgrade samba4-testUpgrade samba-develUpgrade samba4-winbindUpgrade samba4-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba-glusterfsUpgrade samba-testNo solution existsUpgrade samba4-pidlUpgrade samba4-commonUpgrade samba-dcUpgrade libwbclient-develUpgrade samba-test-libsUpgrade samba4-dc-libsUpgrade samba4Upgrade samba-pidlUpgrade samba-vfs-glusterfs | Oct 4, 2017 | Sep 21, 2017 |
| Samba | — | Upgrade to Samba version 4.6.8Upgrade to Samba version 4.5.14Upgrade to Samba version 4.4.16 | Sep 29, 2017 | Sep 29, 2017 |
| Suse | — | Upgrade libsamba-util0Upgrade libdcerpc0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libsmbclient0Upgrade libsamdb0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade samba-x86Upgrade libtalloc2-32bitUpgrade libwbclient-develUpgrade samba-libs-32bitUpgrade libsmbclient0-32bitUpgrade libdcerpc0Upgrade libndr-krb5pac0-32bitUpgrade libsamba-errors0-32bitUpgrade libtdb-develUpgrade samba-core-develUpgrade libndr-standard0Upgrade samba-libs-python3-32bitUpgrade libnetapi0-32bitUpgrade libsamba-credentials0-32bitUpgrade libgensec0Upgrade libsamba-errors0Upgrade libtdb1-32bitUpgrade libsamdb0Upgrade libdcerpc-atsvc0Upgrade samba-client-x86Upgrade libsamdb-develUpgrade libndr-develUpgrade ldapsmbUpgrade samba-winbind-32bitUpgrade libtdb1Upgrade libsamba-policy-python3-develUpgrade samba-krb-printingUpgrade ctdbUpgrade samba-winbindUpgrade libtevent-util0Upgrade libregistry0Upgrade libsamba-errors-develUpgrade libsmbldap0Upgrade libsmbldap2Upgrade libsamba-util-develUpgrade libwbclient0-32bitUpgrade libndr-nbt-develUpgrade libndr0-32bitUpgrade libndr-nbt0Upgrade libdcerpc-binding0Upgrade libsamba-credentials-develUpgrade samba-kdcUpgrade samba-pythonUpgrade libsmbconf-develUpgrade libldb-develUpgrade libsamba-policy-develUpgrade samba-libs-python3Upgrade libsmbsharemodes0Upgrade libsamba-passdb0Upgrade samba-docUpgrade libnetapi-develUpgrade sambaUpgrade libdcerpc-samr-develUpgrade samba-clientUpgrade libtevent-develUpgrade samba-32bitUpgrade libdcerpc-binding0-32bitUpgrade libsmbldap0-32bitUpgrade libtalloc2-x86Upgrade libsamba-policy0-python3Upgrade samba-dsdb-modulesUpgrade samba-testUpgrade samba-libsUpgrade libsmbconf0Upgrade libsmbclient0-x86Upgrade libsamba-credentials0Upgrade samba-develUpgrade libsmbldap2-32bitUpgrade libdcerpc-samr0Upgrade libldb1Upgrade libnetapi0Upgrade libsamba-passdb0-32bitUpgrade libndr1-32bitUpgrade libsmbldap-develUpgrade libdcerpc-develUpgrade libndr-krb5pac-develUpgrade libsmbsharemodes-develUpgrade libsmbclient-develUpgrade libndr-standard-develUpgrade libgensec0-32bitUpgrade libsamba-util0-32bitUpgrade libsmbclient-raw0Upgrade libndr-krb5pac0Upgrade libsamba-hostconfig-develUpgrade libtevent0-32bitUpgrade libsmbconf0-32bitUpgrade samba-python3Upgrade libsamba-hostconfig0Upgrade libndr0Upgrade libndr-nbt0-32bitUpgrade libtevent0-x86Upgrade libtdb1-x86Upgrade libtevent0Upgrade libwbclient0-x86Upgrade samba-cephUpgrade samba-client-32bitUpgrade libtevent-util-develUpgrade libsamba-policy0Upgrade libtevent-util0-32bitUpgrade libsamba-passdb-develUpgrade libndr1Upgrade samba-test-develUpgrade samba-winbind-x86Upgrade libtalloc-develUpgrade libwbclient0Upgrade libndr-standard0-32bitUpgrade libtalloc2 | Oct 5, 2017 | Sep 21, 2017 |
| Ubuntu | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub