On a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly validates permissions to modify passwords over LDAP allowing authenticated users to change any other users' passwords, including administrative users and privileged service accounts (eg Domain Controllers).
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 22, 2018 | Mar 13, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 13, 2018 |
| Debian | — | Upgrade sambaUpgrade Debian to resolve this vulnerability. | Mar 15, 2018 | Mar 13, 2018 |
| Freebsd | — | Upgrade samba45Upgrade samba44Upgrade samba46Upgrade samba47 | Mar 15, 2018 | Mar 13, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | May 23, 2018 | Mar 13, 2018 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.7.6-0.175.3.32.0.4.0 on Solaris 11.3Upgrade service/network/samba to version 4.7.6-0.175.3.32.0.4.0 on Solaris 11.3 | May 16, 2018 | Mar 13, 2018 |
| Samba | — | Upgrade to Samba version 4.6.14Upgrade to Samba version 4.7.6Upgrade to Samba version 4.5.16 | Mar 13, 2018 | Mar 13, 2018 |
| Suse | — | Upgrade libsamba-util0-32bitUpgrade libsamba-credentials0Upgrade libsmbldap0-32bitUpgrade libndr-standard-develUpgrade libsamba-passdb0-32bitUpgrade samba-libsUpgrade libdcerpc-develUpgrade libsamba-util-develUpgrade samba-dsdb-modulesUpgrade libtevent-util-develUpgrade libtevent-util0-32bitUpgrade libsmbldap2-32bitUpgrade libndr-standard0-32bitUpgrade libdcerpc-binding0-32bitUpgrade samba-libs-32bitUpgrade samba-cephUpgrade libsamba-policy0Upgrade libsmbldap-develUpgrade libdcerpc-samr0Upgrade libsamba-passdb-develUpgrade libsamba-passdb0Upgrade libwbclient0Upgrade libsamba-policy0-python3Upgrade samba-client-32bitUpgrade libdcerpc0Upgrade libndr-krb5pac-develUpgrade samba-python3Upgrade libsamba-hostconfig0Upgrade libndr-krb5pac0Upgrade libsmbclient-develUpgrade libndr1Upgrade libdcerpc0-32bitUpgrade libnetapi0Upgrade libsamdb-develUpgrade samba-core-develUpgrade libsamba-errors0-32bitUpgrade libsamba-errors-develUpgrade libndr-krb5pac0-32bitUpgrade samba-libs-python3-32bitUpgrade libsamba-policy-develUpgrade libndr0Upgrade libsamba-credentials-develUpgrade ctdbUpgrade libnetapi0-32bitUpgrade samba-clientUpgrade samba-winbind-32bitUpgrade libdcerpc-binding0Upgrade samba-pythonUpgrade libsamba-policy-python3-develUpgrade libndr-develUpgrade libsamba-util0Upgrade libnetapi-develUpgrade sambaUpgrade libsmbconf0-32bitUpgrade libsmbclient0Upgrade libsamba-hostconfig0-32bitUpgrade samba-libs-python3Upgrade libdcerpc-samr-develUpgrade libwbclient0-32bitUpgrade libsmbclient0-32bitUpgrade libndr0-32bitUpgrade libndr-standard0Upgrade samba-winbindUpgrade libndr1-32bitUpgrade libndr-nbt0-32bitUpgrade libndr-nbt0Upgrade libsamba-credentials0-32bitUpgrade libsmbconf-develUpgrade samba-kdcUpgrade libtevent-util0Upgrade libsmbldap2Upgrade libsamba-hostconfig-develUpgrade samba-docUpgrade libsmbconf0Upgrade libsamdb0Upgrade libsmbldap0Upgrade libsamdb0-32bitUpgrade libndr-nbt-develUpgrade libwbclient-develUpgrade libsamba-errors0 | May 19, 2018 | Mar 13, 2018 |
| Ubuntu | — | Upgrade samba-dsdb-modulesUpgrade samba | Apr 25, 2018 | Mar 13, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub