A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects, allowing an attacker to read or alter the contents of the connection via a man-in-the-middle attack.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Jul 27, 2018 | Jul 27, 2018 |
| Amazon_linux | — | Upgrade samba | Oct 13, 2017 | Sep 21, 2017 |
| Centos_linux | — | Upgrade sambaUpgrade libwbclient-develUpgrade samba-winbind-clientsUpgrade samba-develUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-dcUpgrade samba-winbindUpgrade libsmbclient-develUpgrade samba-pidlUpgrade samba-vfs-glusterfsUpgrade libsmbclientUpgrade samba-debuginfoUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-pythonUpgrade samba-test-libsUpgrade samba-common-toolsUpgrade samba-dc-libsUpgrade samba-testUpgrade samba-krb5-printingUpgrade samba-clientUpgrade samba-common-libsUpgrade libwbclientUpgrade samba-winbind-krb5-locator | Sep 25, 2017 | Sep 21, 2017 |
| Debian | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
| Hpux | — | Update CIFS-Server to the latest version | Jun 5, 2018 | May 31, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade sambaUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-libsUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade libwbclientUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba-common | Nov 30, 2017 | Sep 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libsmbclientUpgrade samba-common-libsUpgrade samba-libsUpgrade samba-clientUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-pythonUpgrade samba-winbindUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-client-libsUpgrade samba-winbind-clients | Nov 30, 2017 | Sep 20, 2017 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3 | Nov 30, 2017 | Nov 30, 2017 |
| Oracle_linux | — | Upgrade samba-pythonUpgrade samba-clientUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-dc-libsUpgrade samba-dcUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba-vfs-glusterfsUpgrade sambaUpgrade samba-winbindUpgrade ctdbUpgrade libwbclient-develUpgrade samba-test-libsUpgrade samba-common-libsUpgrade libsmbclient-develUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-develUpgrade samba-testUpgrade samba-libsUpgrade samba-pidlUpgrade ctdb-testsUpgrade samba-krb5-printing | Sep 27, 2017 | Sep 20, 2017 |
| Redhat_linux | — | No solution existsUpgrade samba-vfs-glusterfsUpgrade samba-debuginfoUpgrade samba-krb5-printingUpgrade libwbclientUpgrade samba-commonUpgrade samba-dcUpgrade samba-testUpgrade samba-pidlUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade samba-develUpgrade samba-libsUpgrade libsmbclient-develUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-test-libsUpgrade samba-winbind-modulesUpgrade sambaUpgrade libwbclient-devel | Oct 4, 2017 | Sep 21, 2017 |
| Samba | — | Upgrade to Samba version 4.6.8Upgrade to Samba version 4.4.16Upgrade to Samba version 4.5.14 | Sep 29, 2017 | Sep 29, 2017 |
| Suse | — | Upgrade libgensec0-32bitUpgrade libgensec0Upgrade libsamba-errors-develUpgrade sambaUpgrade libdcerpc-develUpgrade libsmbconf0-32bitUpgrade libsamdb0Upgrade libsmbldap2-32bitUpgrade libndr-nbt0-32bitUpgrade libnetapi-develUpgrade libndr-standard-develUpgrade libsmbclient-raw0Upgrade libdcerpc-binding0Upgrade libsamba-hostconfig-develUpgrade samba-pythonUpgrade libndr-develUpgrade libndr1Upgrade samba-client-32bitUpgrade libsamdb-develUpgrade libsamba-hostconfig0Upgrade ctdbUpgrade samba-test-develUpgrade libsmbldap2Upgrade samba-libs-32bitUpgrade libsmbldap0-32bitUpgrade samba-winbindUpgrade libndr-krb5pac0-32bitUpgrade samba-docUpgrade libdcerpc-samr0Upgrade libsamba-credentials0-32bitUpgrade libndr-nbt0Upgrade libsmbconf-develUpgrade libndr0Upgrade samba-kdcUpgrade libndr1-32bitUpgrade samba-winbind-32bitUpgrade libsamba-util0-32bitUpgrade libsamba-policy0-python3Upgrade libtevent-util-develUpgrade libnetapi0Upgrade libsamba-errors0-32bitUpgrade libndr0-32bitUpgrade libsmbconf0Upgrade libsmbclient0Upgrade libsmbldap-develUpgrade samba-cephUpgrade samba-libs-python3Upgrade libndr-standard0Upgrade libsamba-util0Upgrade libsamba-errors0Upgrade libsmbldap0Upgrade libndr-standard0-32bitUpgrade libdcerpc0Upgrade libsamba-passdb-develUpgrade libndr-krb5pac0Upgrade libsamba-passdb0Upgrade libsamba-passdb0-32bitUpgrade libndr-krb5pac-develUpgrade samba-core-develUpgrade libdcerpc0-32bitUpgrade libsmbclient-develUpgrade libwbclient-develUpgrade samba-32bitUpgrade samba-clientUpgrade libsamba-policy-develUpgrade libtevent-util0Upgrade libregistry0Upgrade libsamdb0-32bitUpgrade libsamba-policy-python3-develUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-credentials0Upgrade libsmbclient0-32bitUpgrade samba-libsUpgrade libsamba-credentials-develUpgrade libsmbclient-raw0-32bitUpgrade libwbclient0-32bitUpgrade libwbclient0Upgrade libndr-nbt-develUpgrade libdcerpc-atsvc0Upgrade libsamba-util-develUpgrade libdcerpc-binding0-32bitUpgrade libtevent-util0-32bitUpgrade samba-dsdb-modulesUpgrade libnetapi0-32bitUpgrade samba-python3Upgrade libdcerpc-samr-develUpgrade samba-libs-python3-32bitUpgrade libsamba-policy0 | Oct 5, 2017 | Sep 21, 2017 |
| Ubuntu | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub