The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects, allowing an attacker to read or alter the contents of the connection via a man-in-the-middle attack.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Jul 27, 2018 | Jul 27, 2018 |
| Amazon_linux | — | Upgrade samba | Oct 13, 2017 | Sep 21, 2017 |
| Centos_linux | — | Upgrade samba-winbind-modulesUpgrade samba-pythonUpgrade samba-client-libsUpgrade sambaUpgrade libwbclient-develUpgrade samba-develUpgrade samba-dcUpgrade libsmbclientUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-debuginfoUpgrade samba-commonUpgrade samba-pidlUpgrade libsmbclient-develUpgrade samba-vfs-glusterfsUpgrade samba-winbindUpgrade samba-winbind-krb5-locatorUpgrade libwbclientUpgrade samba-common-libsUpgrade samba-test-libsUpgrade samba-clientUpgrade samba-dc-libsUpgrade samba-krb5-printingUpgrade samba-testUpgrade samba-common-tools | Sep 25, 2017 | Sep 21, 2017 |
| Debian | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
| Hpux | — | Update CIFS-Server to the latest version | Jun 5, 2018 | May 31, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-commonUpgrade samba-winbindUpgrade samba-client-libsUpgrade libsmbclientUpgrade samba-common-libsUpgrade libwbclientUpgrade samba-clientUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade sambaUpgrade samba-python | Nov 30, 2017 | Sep 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-libsUpgrade libsmbclientUpgrade samba-commonUpgrade libwbclientUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba | Nov 30, 2017 | Sep 20, 2017 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3 | Nov 30, 2017 | Nov 30, 2017 |
| Oracle_linux | — | Upgrade ctdbUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade sambaUpgrade libsmbclientUpgrade libwbclient-develUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba-dc-libsUpgrade samba-dcUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-pythonUpgrade samba-vfs-glusterfsUpgrade samba-test-libsUpgrade libwbclientUpgrade samba-testUpgrade libsmbclient-develUpgrade samba-krb5-printingUpgrade samba-libsUpgrade samba-pidlUpgrade ctdb-testsUpgrade samba-develUpgrade samba-client-libs | Sep 27, 2017 | Sep 20, 2017 |
| Redhat_linux | — | Upgrade libwbclient-develUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-libsUpgrade samba-test-libsUpgrade sambaUpgrade samba-client-libsUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade libsmbclient-develUpgrade samba-dc-libsUpgrade samba-winbindUpgrade samba-develUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-debuginfoUpgrade samba-dcUpgrade samba-testUpgrade samba-krb5-printingUpgrade libwbclientNo solution existsUpgrade samba-vfs-glusterfsUpgrade samba-commonUpgrade samba-pidl | Oct 4, 2017 | Sep 21, 2017 |
| Samba | — | Upgrade to Samba version 4.6.8Upgrade to Samba version 4.5.14Upgrade to Samba version 4.4.16 | Sep 29, 2017 | Sep 29, 2017 |
| Suse | — | Upgrade libsmbclient0Upgrade libdcerpc-develUpgrade libgensec0Upgrade samba-libs-python3Upgrade libnetapi0Upgrade libsmbldap0-32bitUpgrade libsmbconf0-32bitUpgrade libsmbldap2Upgrade samba-winbind-32bitUpgrade libndr-standard-develUpgrade libsamba-errors0-32bitUpgrade libndr0Upgrade libsamba-errors-develUpgrade sambaUpgrade samba-libs-32bitUpgrade samba-docUpgrade libndr-nbt0-32bitUpgrade libtevent-util-develUpgrade ctdbUpgrade libndr-develUpgrade samba-pythonUpgrade libnetapi-develUpgrade libgensec0-32bitUpgrade libsamdb-develUpgrade libsmbclient-raw0Upgrade samba-client-32bitUpgrade libndr1Upgrade libndr0-32bitUpgrade libndr1-32bitUpgrade libsamba-hostconfig0Upgrade samba-cephUpgrade samba-test-develUpgrade libsmbldap-develUpgrade libndr-krb5pac0-32bitUpgrade libsmbldap2-32bitUpgrade libsamba-hostconfig-develUpgrade libsamba-policy0-python3Upgrade libsamba-credentials0-32bitUpgrade libsamba-errors0Upgrade libdcerpc-binding0Upgrade libdcerpc-samr0Upgrade libsmbconf0Upgrade libsamba-util0-32bitUpgrade libsamba-util0Upgrade libsmbldap0Upgrade libsmbconf-develUpgrade samba-kdcUpgrade libndr-nbt0Upgrade libndr-standard0Upgrade samba-winbindUpgrade libsamdb0Upgrade libwbclient0Upgrade libsmbclient-raw0-32bitUpgrade libndr-krb5pac0Upgrade libnetapi0-32bitUpgrade samba-libsUpgrade libdcerpc-atsvc0Upgrade libsamba-policy-develUpgrade libndr-nbt-develUpgrade libtevent-util0-32bitUpgrade libsamba-util-develUpgrade libsamba-hostconfig0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libsamba-credentials-develUpgrade libdcerpc0Upgrade libndr-krb5pac-develUpgrade samba-core-develUpgrade libdcerpc0-32bitUpgrade libsamba-credentials0Upgrade samba-libs-python3-32bitUpgrade libtevent-util0Upgrade libsamba-passdb-develUpgrade libregistry0Upgrade libsamdb0-32bitUpgrade libdcerpc-samr-develUpgrade samba-dsdb-modulesUpgrade libsamba-policy0Upgrade libsmbclient-develUpgrade libsamba-policy-python3-develUpgrade libwbclient-develUpgrade samba-python3Upgrade libsamba-passdb0Upgrade samba-32bitUpgrade samba-clientUpgrade libwbclient0-32bitUpgrade libndr-standard0-32bitUpgrade libsamba-passdb0-32bitUpgrade libsmbclient0-32bit | Oct 5, 2017 | Sep 21, 2017 |
| Ubuntu | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub