A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects, allowing an attacker to read or alter the contents of the connection via a man-in-the-middle attack.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Jul 27, 2018 | Jul 27, 2018 |
| Amazon_linux | — | Upgrade samba | Oct 13, 2017 | Sep 21, 2017 |
| Centos_linux | — | Upgrade samba-vfs-glusterfsUpgrade samba-winbindUpgrade samba-pidlUpgrade libsmbclient-develUpgrade samba-commonUpgrade samba-dcUpgrade libsmbclientUpgrade samba-libsUpgrade libwbclient-develUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba-debuginfoUpgrade samba-develUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-testUpgrade samba-krb5-printingUpgrade libwbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade samba-dc-libs | Sep 25, 2017 | Sep 21, 2017 |
| Debian | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
| Hpux | — | Update CIFS-Server to the latest version | Jun 5, 2018 | May 31, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-winbind-clientsUpgrade sambaUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-winbindUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-common | Nov 30, 2017 | Sep 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-libsUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade libwbclientUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-pythonUpgrade samba-clientUpgrade samba-libsUpgrade samba-common-tools | Nov 30, 2017 | Sep 20, 2017 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3 | Nov 30, 2017 | Nov 30, 2017 |
| Oracle_linux | — | Upgrade ctdbUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-vfs-glusterfsUpgrade samba-common-libsUpgrade samba-pythonUpgrade samba-clientUpgrade libwbclient-develUpgrade samba-winbind-krb5-locatorUpgrade samba-dcUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-dc-libsUpgrade samba-test-libsUpgrade samba-krb5-printingUpgrade libsmbclient-develUpgrade samba-pidlUpgrade ctdb-testsUpgrade libwbclientUpgrade samba-libsUpgrade samba-develUpgrade samba-client-libsUpgrade samba-test | Sep 27, 2017 | Sep 20, 2017 |
| Redhat_linux | — | Upgrade samba-krb5-printingUpgrade samba-vfs-glusterfsUpgrade samba-commonUpgrade samba-pidlUpgrade samba-dcUpgrade samba-debuginfoNo solution existsUpgrade samba-testUpgrade libwbclientUpgrade samba-dc-libsUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-develUpgrade samba-test-libsUpgrade samba-client-libsUpgrade samba-pythonUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade libwbclient-develUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-winbind-krb5-locatorUpgrade sambaUpgrade samba-common-libsUpgrade libsmbclient-devel | Oct 4, 2017 | Sep 21, 2017 |
| Samba | — | Upgrade to Samba version 4.4.16Upgrade to Samba version 4.5.14Upgrade to Samba version 4.6.8 | Sep 29, 2017 | Sep 29, 2017 |
| Suse | — | Upgrade libsamdb-develUpgrade samba-docUpgrade libsamba-errors0Upgrade samba-libs-python3Upgrade libsamdb0Upgrade libgensec0-32bitUpgrade libsmbldap2-32bitUpgrade libndr-develUpgrade samba-test-develUpgrade libndr-nbt0-32bitUpgrade libsmbldap-develUpgrade libsmbclient-raw0Upgrade samba-pythonUpgrade samba-cephUpgrade libsamba-credentials0-32bitUpgrade libndr-standard0Upgrade samba-client-32bitUpgrade libdcerpc-samr0Upgrade sambaUpgrade samba-winbindUpgrade libsmbldap0-32bitUpgrade libndr-nbt0Upgrade libndr-krb5pac0-32bitUpgrade ctdbUpgrade libsamba-util0Upgrade libsmbconf-develUpgrade libndr0Upgrade libndr-standard-develUpgrade libdcerpc-binding0Upgrade libnetapi-develUpgrade libndr1Upgrade libsamba-hostconfig-develUpgrade libdcerpc-develUpgrade libsamba-errors-develUpgrade libsmbldap2Upgrade libgensec0Upgrade libsmbconf0-32bitUpgrade samba-libs-32bitUpgrade samba-kdcUpgrade samba-winbind-32bitUpgrade libndr0-32bitUpgrade libsamba-policy0-python3Upgrade libndr1-32bitUpgrade libnetapi0Upgrade libsmbclient0Upgrade libsmbconf0Upgrade libsmbldap0Upgrade libsamba-hostconfig0Upgrade libsamba-util0-32bitUpgrade libsamba-errors0-32bitUpgrade libtevent-util-develUpgrade libsamba-policy0Upgrade libnetapi0-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-credentials0Upgrade libwbclient-develUpgrade libregistry0Upgrade libndr-krb5pac-develUpgrade libsamba-hostconfig0-32bitUpgrade libdcerpc0-32bitUpgrade libsamba-passdb0-32bitUpgrade libwbclient0Upgrade samba-clientUpgrade libndr-nbt-develUpgrade libsamdb0-32bitUpgrade samba-libsUpgrade libtevent-util0Upgrade libsamba-passdb0Upgrade samba-32bitUpgrade libtevent-util0-32bitUpgrade libsmbclient0-32bitUpgrade libdcerpc-binding0-32bitUpgrade samba-core-develUpgrade libsamba-policy-python3-develUpgrade libsmbclient-develUpgrade libsamba-util-develUpgrade libwbclient0-32bitUpgrade libdcerpc0Upgrade libndr-standard0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libsamba-policy-develUpgrade libsamba-credentials-develUpgrade samba-libs-python3-32bitUpgrade samba-python3Upgrade samba-dsdb-modulesUpgrade libsamba-passdb-develUpgrade libndr-krb5pac0Upgrade libdcerpc-atsvc0 | Oct 5, 2017 | Sep 21, 2017 |
| Ubuntu | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub