A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects, allowing an attacker to read or alter the contents of the connection via a man-in-the-middle attack.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-samba | Jul 27, 2018 | Jul 27, 2018 | |
| Amazon_linux | — | amazon-linux-upgrade-samba | Oct 13, 2017 | Sep 21, 2017 |
| Centos_linux | — | centos-upgrade-libsmbclientcentos-upgrade-libsmbclient-develcentos-upgrade-libwbclientcentos-upgrade-libwbclient-develcentos-upgrade-sambacentos-upgrade-samba-clientcentos-upgrade-samba-client-libscentos-upgrade-samba-commoncentos-upgrade-samba-common-libscentos-upgrade-samba-common-toolscentos-upgrade-samba-dccentos-upgrade-samba-dc-libscentos-upgrade-samba-debuginfocentos-upgrade-samba-develcentos-upgrade-samba-krb5-printingcentos-upgrade-samba-libscentos-upgrade-samba-pidlcentos-upgrade-samba-pythoncentos-upgrade-samba-testcentos-upgrade-samba-test-libscentos-upgrade-samba-vfs-glusterfscentos-upgrade-samba-winbindcentos-upgrade-samba-winbind-clientscentos-upgrade-samba-winbind-krb5-locatorcentos-upgrade-samba-winbind-modules | Sep 25, 2017 | Sep 21, 2017 |
| Debian | debian-upgrade-samba | Sep 25, 2017 | Sep 21, 2017 | |
| Hpux | — | hpux-update-cifs-server | Jun 5, 2018 | May 31, 2018 |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-libsmbclienthuawei-euleros-2_0_sp1-upgrade-libwbclienthuawei-euleros-2_0_sp1-upgrade-sambahuawei-euleros-2_0_sp1-upgrade-samba-clienthuawei-euleros-2_0_sp1-upgrade-samba-client-libshuawei-euleros-2_0_sp1-upgrade-samba-commonhuawei-euleros-2_0_sp1-upgrade-samba-common-libshuawei-euleros-2_0_sp1-upgrade-samba-common-toolshuawei-euleros-2_0_sp1-upgrade-samba-libshuawei-euleros-2_0_sp1-upgrade-samba-pythonhuawei-euleros-2_0_sp1-upgrade-samba-winbindhuawei-euleros-2_0_sp1-upgrade-samba-winbind-clientshuawei-euleros-2_0_sp1-upgrade-samba-winbind-modules | Nov 30, 2017 | Sep 20, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-libsmbclienthuawei-euleros-2_0_sp2-upgrade-libwbclienthuawei-euleros-2_0_sp2-upgrade-sambahuawei-euleros-2_0_sp2-upgrade-samba-clienthuawei-euleros-2_0_sp2-upgrade-samba-client-libshuawei-euleros-2_0_sp2-upgrade-samba-commonhuawei-euleros-2_0_sp2-upgrade-samba-common-libshuawei-euleros-2_0_sp2-upgrade-samba-common-toolshuawei-euleros-2_0_sp2-upgrade-samba-libshuawei-euleros-2_0_sp2-upgrade-samba-pythonhuawei-euleros-2_0_sp2-upgrade-samba-winbindhuawei-euleros-2_0_sp2-upgrade-samba-winbind-clientshuawei-euleros-2_0_sp2-upgrade-samba-winbind-modules | Nov 30, 2017 | Sep 20, 2017 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-library-samba-libsmbclient-4-4-16-0-175-3-25-0-3-0oracle-solaris-11-3-upgrade-service-network-samba-4-4-16-0-175-3-25-0-3-0 | Nov 30, 2017 | Nov 30, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-ctdboracle-linux-upgrade-ctdb-testsoracle-linux-upgrade-libsmbclientoracle-linux-upgrade-libsmbclient-develoracle-linux-upgrade-libwbclientoracle-linux-upgrade-libwbclient-develoracle-linux-upgrade-sambaoracle-linux-upgrade-samba-clientoracle-linux-upgrade-samba-client-libsoracle-linux-upgrade-samba-commonoracle-linux-upgrade-samba-common-libsoracle-linux-upgrade-samba-common-toolsoracle-linux-upgrade-samba-dcoracle-linux-upgrade-samba-dc-libsoracle-linux-upgrade-samba-develoracle-linux-upgrade-samba-krb5-printingoracle-linux-upgrade-samba-libsoracle-linux-upgrade-samba-pidloracle-linux-upgrade-samba-pythonoracle-linux-upgrade-samba-testoracle-linux-upgrade-samba-test-libsoracle-linux-upgrade-samba-vfs-glusterfsoracle-linux-upgrade-samba-winbindoracle-linux-upgrade-samba-winbind-clientsoracle-linux-upgrade-samba-winbind-krb5-locatororacle-linux-upgrade-samba-winbind-modules | Sep 27, 2017 | Sep 20, 2017 |
| Redhat_linux | — | redhat-upgrade-libsmbclientredhat-upgrade-libsmbclient-develredhat-upgrade-libwbclientredhat-upgrade-libwbclient-develredhat-upgrade-sambaredhat-upgrade-samba-clientredhat-upgrade-samba-client-libsredhat-upgrade-samba-commonredhat-upgrade-samba-common-libsredhat-upgrade-samba-common-toolsredhat-upgrade-samba-dcredhat-upgrade-samba-dc-libsredhat-upgrade-samba-debuginforedhat-upgrade-samba-develredhat-upgrade-samba-krb5-printingredhat-upgrade-samba-libsredhat-upgrade-samba-pidlredhat-upgrade-samba-pythonredhat-upgrade-samba-testredhat-upgrade-samba-test-libsredhat-upgrade-samba-vfs-glusterfsredhat-upgrade-samba-winbindredhat-upgrade-samba-winbind-clientsredhat-upgrade-samba-winbind-krb5-locatorredhat-upgrade-samba-winbind-modules | Oct 4, 2017 | Sep 21, 2017 |
| Samba | samba-upgrade-4_4_16samba-upgrade-4_5_14samba-upgrade-4_6_8 | Sep 29, 2017 | Sep 29, 2017 | |
| Suse | — | suse-upgrade-ctdbsuse-upgrade-libdcerpc-atsvc0suse-upgrade-libdcerpc-binding0suse-upgrade-libdcerpc-binding0-32bitsuse-upgrade-libdcerpc-develsuse-upgrade-libdcerpc-samr-develsuse-upgrade-libdcerpc-samr0suse-upgrade-libdcerpc0suse-upgrade-libdcerpc0-32bitsuse-upgrade-libgensec0suse-upgrade-libgensec0-32bitsuse-upgrade-libndr-develsuse-upgrade-libndr-krb5pac-develsuse-upgrade-libndr-krb5pac0suse-upgrade-libndr-krb5pac0-32bitsuse-upgrade-libndr-nbt-develsuse-upgrade-libndr-nbt0suse-upgrade-libndr-nbt0-32bitsuse-upgrade-libndr-standard-develsuse-upgrade-libndr-standard0suse-upgrade-libndr-standard0-32bitsuse-upgrade-libndr0suse-upgrade-libndr0-32bitsuse-upgrade-libndr1suse-upgrade-libndr1-32bitsuse-upgrade-libnetapi-develsuse-upgrade-libnetapi0suse-upgrade-libnetapi0-32bitsuse-upgrade-libregistry0suse-upgrade-libsamba-credentials-develsuse-upgrade-libsamba-credentials0suse-upgrade-libsamba-credentials0-32bitsuse-upgrade-libsamba-errors-develsuse-upgrade-libsamba-errors0suse-upgrade-libsamba-errors0-32bitsuse-upgrade-libsamba-hostconfig-develsuse-upgrade-libsamba-hostconfig0suse-upgrade-libsamba-hostconfig0-32bitsuse-upgrade-libsamba-passdb-develsuse-upgrade-libsamba-passdb0suse-upgrade-libsamba-passdb0-32bitsuse-upgrade-libsamba-policy-develsuse-upgrade-libsamba-policy-python3-develsuse-upgrade-libsamba-policy0suse-upgrade-libsamba-policy0-python3suse-upgrade-libsamba-util-develsuse-upgrade-libsamba-util0suse-upgrade-libsamba-util0-32bitsuse-upgrade-libsamdb-develsuse-upgrade-libsamdb0suse-upgrade-libsamdb0-32bitsuse-upgrade-libsmbclient-develsuse-upgrade-libsmbclient-raw0suse-upgrade-libsmbclient-raw0-32bitsuse-upgrade-libsmbclient0suse-upgrade-libsmbclient0-32bitsuse-upgrade-libsmbconf-develsuse-upgrade-libsmbconf0suse-upgrade-libsmbconf0-32bitsuse-upgrade-libsmbldap-develsuse-upgrade-libsmbldap0suse-upgrade-libsmbldap0-32bitsuse-upgrade-libsmbldap2suse-upgrade-libsmbldap2-32bitsuse-upgrade-libtevent-util-develsuse-upgrade-libtevent-util0suse-upgrade-libtevent-util0-32bitsuse-upgrade-libwbclient-develsuse-upgrade-libwbclient0suse-upgrade-libwbclient0-32bitsuse-upgrade-sambasuse-upgrade-samba-32bitsuse-upgrade-samba-cephsuse-upgrade-samba-clientsuse-upgrade-samba-client-32bitsuse-upgrade-samba-core-develsuse-upgrade-samba-docsuse-upgrade-samba-dsdb-modulessuse-upgrade-samba-kdcsuse-upgrade-samba-libssuse-upgrade-samba-libs-32bitsuse-upgrade-samba-libs-python3suse-upgrade-samba-libs-python3-32bitsuse-upgrade-samba-pythonsuse-upgrade-samba-python3suse-upgrade-samba-test-develsuse-upgrade-samba-winbindsuse-upgrade-samba-winbind-32bit | Oct 5, 2017 | Sep 21, 2017 |
| Ubuntu | ubuntu-upgrade-samba | Sep 25, 2017 | Sep 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub