A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects, allowing an attacker to read or alter the contents of the connection via a man-in-the-middle attack.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Jul 27, 2018 | Jul 27, 2018 |
| Amazon_linux | — | Upgrade samba | Oct 13, 2017 | Sep 21, 2017 |
| Centos_linux | — | Upgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-debuginfoUpgrade sambaUpgrade libwbclient-develUpgrade libsmbclientUpgrade samba-commonUpgrade samba-vfs-glusterfsUpgrade samba-dcUpgrade libsmbclient-develUpgrade samba-pidlUpgrade samba-develUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-pythonUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade libwbclientUpgrade samba-krb5-printingUpgrade samba-clientUpgrade samba-dc-libsUpgrade samba-test-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-test | Sep 25, 2017 | Sep 21, 2017 |
| Debian | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
| Hpux | — | Update CIFS-Server to the latest version | Jun 5, 2018 | May 31, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-commonUpgrade samba-common-libsUpgrade samba-libsUpgrade samba-winbindUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade sambaUpgrade libsmbclient | Nov 30, 2017 | Sep 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-libsUpgrade libsmbclientUpgrade samba-libsUpgrade samba-clientUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-common-toolsUpgrade libwbclientUpgrade sambaUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-winbind-clients | Nov 30, 2017 | Sep 20, 2017 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3 | Nov 30, 2017 | Nov 30, 2017 |
| Oracle_linux | — | Upgrade samba-libsUpgrade samba-krb5-printingUpgrade ctdb-testsUpgrade libsmbclient-develUpgrade libwbclientUpgrade samba-pidlUpgrade samba-testUpgrade samba-client-libsUpgrade samba-develUpgrade samba-dcUpgrade samba-common-toolsUpgrade samba-test-libsUpgrade samba-dc-libsUpgrade samba-commonUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-vfs-glusterfsUpgrade libwbclient-develUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade ctdbUpgrade samba-winbindUpgrade sambaUpgrade samba-pythonUpgrade samba-client | Sep 27, 2017 | Sep 20, 2017 |
| Redhat_linux | — | Upgrade samba-pythonUpgrade samba-libsUpgrade libwbclient-develUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-test-libsUpgrade samba-dc-libsUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade sambaUpgrade libsmbclient-develUpgrade samba-winbind-clientsUpgrade samba-develUpgrade libsmbclientUpgrade samba-debuginfoUpgrade samba-pidlUpgrade samba-vfs-glusterfsNo solution existsUpgrade samba-testUpgrade samba-krb5-printingUpgrade libwbclientUpgrade samba-dcUpgrade samba-common | Oct 4, 2017 | Sep 21, 2017 |
| Samba | — | Upgrade to Samba version 4.5.14Upgrade to Samba version 4.6.8Upgrade to Samba version 4.4.16 | Sep 29, 2017 | Sep 29, 2017 |
| Suse | — | Upgrade libnetapi0-32bitUpgrade libsamba-policy0Upgrade libsamba-policy-python3-develUpgrade samba-python3Upgrade libdcerpc-samr-develUpgrade libndr-krb5pac-develUpgrade samba-libs-python3-32bitUpgrade libtevent-util0Upgrade libsmbclient-develUpgrade libdcerpc-atsvc0Upgrade libndr-nbt-develUpgrade libdcerpc0Upgrade samba-clientUpgrade libndr-krb5pac0Upgrade libtevent-util0-32bitUpgrade libsamdb0-32bitUpgrade libsamba-passdb0Upgrade samba-libsUpgrade libdcerpc-binding0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-credentials0Upgrade libsamba-credentials-develUpgrade samba-dsdb-modulesUpgrade libwbclient-develUpgrade samba-32bitUpgrade libwbclient0Upgrade libsmbclient-raw0-32bitUpgrade libdcerpc0-32bitUpgrade libsamba-util-develUpgrade libsamba-policy-develUpgrade samba-core-develUpgrade libsamba-passdb0-32bitUpgrade libregistry0Upgrade libwbclient0-32bitUpgrade libndr-standard0-32bitUpgrade libsmbclient0-32bitUpgrade libsamba-passdb-develUpgrade libsmbconf0Upgrade libsmbconf-develUpgrade libdcerpc-develUpgrade libsmbldap2Upgrade libndr0Upgrade sambaUpgrade libnetapi0Upgrade samba-kdcUpgrade libsamba-policy0-python3Upgrade libndr1-32bitUpgrade libsamba-errors0-32bitUpgrade libsamba-util0-32bitUpgrade samba-cephUpgrade libtevent-util-develUpgrade libndr-nbt0Upgrade samba-pythonUpgrade libndr-develUpgrade samba-client-32bitUpgrade libsamba-hostconfig0Upgrade libndr1Upgrade libnetapi-develUpgrade ctdbUpgrade libgensec0-32bitUpgrade libsmbclient-raw0Upgrade libsamdb-develUpgrade libsmbldap0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libdcerpc-binding0Upgrade libsamba-hostconfig-develUpgrade samba-winbind-32bitUpgrade libsamba-credentials0-32bitUpgrade libndr0-32bitUpgrade libsamba-util0Upgrade libndr-standard0Upgrade samba-libs-python3Upgrade libsmbldap0Upgrade libsmbldap-develUpgrade libsamba-errors0Upgrade samba-winbindUpgrade libndr-nbt0-32bitUpgrade libsmbldap2-32bitUpgrade libsamdb0Upgrade samba-docUpgrade libdcerpc-samr0Upgrade samba-test-develUpgrade libsmbconf0-32bitUpgrade libndr-standard-develUpgrade libsamba-errors-develUpgrade samba-libs-32bitUpgrade libgensec0Upgrade libsmbclient0 | Oct 5, 2017 | Sep 21, 2017 |
| Ubuntu | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub