A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects, allowing an attacker to read or alter the contents of the connection via a man-in-the-middle attack.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Jul 27, 2018 | Jul 27, 2018 |
| Amazon_linux | — | Upgrade samba | Oct 13, 2017 | Sep 21, 2017 |
| Centos_linux | — | Upgrade samba-clientUpgrade samba-krb5-printingUpgrade samba-common-toolsUpgrade samba-dc-libsUpgrade libwbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-testUpgrade samba-test-libsUpgrade samba-common-libsUpgrade samba-dcUpgrade samba-winbindUpgrade libsmbclientUpgrade libsmbclient-develUpgrade sambaUpgrade samba-develUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade samba-pidlUpgrade samba-vfs-glusterfsUpgrade samba-debuginfoUpgrade samba-commonUpgrade libwbclient-devel | Sep 25, 2017 | Sep 21, 2017 |
| Debian | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
| Hpux | — | Update CIFS-Server to the latest version | Jun 5, 2018 | May 31, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-commonUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-libsUpgrade sambaUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-winbindUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade libsmbclient | Nov 30, 2017 | Sep 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-libsUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-pythonUpgrade samba-commonUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-libs | Nov 30, 2017 | Sep 20, 2017 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3 | Nov 30, 2017 | Nov 30, 2017 |
| Oracle_linux | — | Upgrade samba-develUpgrade ctdb-testsUpgrade samba-libsUpgrade samba-krb5-printingUpgrade samba-testUpgrade samba-client-libsUpgrade samba-pidlUpgrade libsmbclient-develUpgrade libwbclientUpgrade samba-winbind-krb5-locatorUpgrade sambaUpgrade libwbclient-develUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade ctdbUpgrade samba-clientUpgrade samba-pythonUpgrade samba-dc-libsUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-test-libsUpgrade samba-winbind-modulesUpgrade samba-dcUpgrade samba-vfs-glusterfsUpgrade libsmbclient | Sep 27, 2017 | Sep 20, 2017 |
| Redhat_linux | — | Upgrade samba-vfs-glusterfsUpgrade libwbclientUpgrade samba-commonUpgrade samba-dcUpgrade samba-krb5-printingUpgrade samba-pidlUpgrade samba-testNo solution existsUpgrade samba-debuginfoUpgrade samba-develUpgrade samba-dc-libsUpgrade libwbclient-develUpgrade samba-pythonUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade libsmbclient-develUpgrade samba-client-libsUpgrade samba-test-libsUpgrade samba-winbindUpgrade samba-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba | Oct 4, 2017 | Sep 21, 2017 |
| Samba | — | Upgrade to Samba version 4.5.14Upgrade to Samba version 4.4.16Upgrade to Samba version 4.6.8 | Sep 29, 2017 | Sep 29, 2017 |
| Suse | — | Upgrade libnetapi-develUpgrade libdcerpc-samr0Upgrade libndr0Upgrade libsmbldap0Upgrade libtevent-util-develUpgrade libndr1Upgrade libndr-nbt0Upgrade ctdbUpgrade samba-pythonUpgrade libsamba-hostconfig0Upgrade samba-client-32bitUpgrade libndr-develUpgrade samba-winbind-32bitUpgrade libsamba-errors0-32bitUpgrade libsamba-util0-32bitUpgrade libnetapi0Upgrade libsamba-policy0-python3Upgrade libndr1-32bitUpgrade samba-docUpgrade libsmbldap0-32bitUpgrade libsmbldap2Upgrade libsmbclient0Upgrade libgensec0Upgrade libsmbconf0-32bitUpgrade sambaUpgrade libdcerpc-develUpgrade samba-libs-32bitUpgrade libsamba-errors-develUpgrade libsamdb-develUpgrade libsmbclient-raw0Upgrade libsmbconf-develUpgrade libsamba-util0Upgrade libndr0-32bitUpgrade samba-winbindUpgrade libsamba-hostconfig-develUpgrade libsmbconf0Upgrade libndr-standard-develUpgrade samba-test-develUpgrade libsamba-credentials0-32bitUpgrade samba-kdcUpgrade libndr-nbt0-32bitUpgrade libsmbldap2-32bitUpgrade libsamdb0Upgrade libndr-krb5pac0-32bitUpgrade libsamba-errors0Upgrade libndr-standard0Upgrade samba-cephUpgrade samba-libs-python3Upgrade libgensec0-32bitUpgrade libsmbldap-develUpgrade libdcerpc-binding0Upgrade libdcerpc-samr-develUpgrade libsamba-policy-develUpgrade libndr-standard0-32bitUpgrade samba-libs-python3-32bitUpgrade libsamba-util-develUpgrade libwbclient0-32bitUpgrade libsamba-passdb0-32bitUpgrade libdcerpc0-32bitUpgrade libndr-krb5pac-develUpgrade libsmbclient-develUpgrade libdcerpc0Upgrade samba-core-develUpgrade libsamba-policy-python3-develUpgrade libsmbclient-raw0-32bitUpgrade libndr-nbt-develUpgrade libsamba-passdb0Upgrade samba-32bitUpgrade samba-clientUpgrade libsamba-policy0Upgrade libnetapi0-32bitUpgrade libdcerpc-atsvc0Upgrade samba-python3Upgrade samba-dsdb-modulesUpgrade libsamdb0-32bitUpgrade libtevent-util0Upgrade samba-libsUpgrade libtevent-util0-32bitUpgrade libsamba-passdb-develUpgrade libndr-krb5pac0Upgrade libwbclient0Upgrade libwbclient-develUpgrade libsamba-credentials0Upgrade libdcerpc-binding0-32bitUpgrade libsmbclient0-32bitUpgrade libregistry0Upgrade libsamba-credentials-develUpgrade libsamba-hostconfig0-32bit | Oct 5, 2017 | Sep 21, 2017 |
| Ubuntu | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub