On a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly validates permissions to modify passwords over LDAP allowing authenticated users to change any other users' passwords, including administrative users and privileged service accounts (eg Domain Controllers).
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 22, 2018 | Mar 13, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 13, 2018 |
| Debian | — | Upgrade Debian to resolve this vulnerability.Upgrade samba | Mar 15, 2018 | Mar 13, 2018 |
| Freebsd | — | Upgrade samba45Upgrade samba44Upgrade samba47Upgrade samba46 | Mar 15, 2018 | Mar 13, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | May 23, 2018 | Mar 13, 2018 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.7.6-0.175.3.32.0.4.0 on Solaris 11.3Upgrade service/network/samba to version 4.7.6-0.175.3.32.0.4.0 on Solaris 11.3 | May 16, 2018 | Mar 13, 2018 |
| Samba | — | Upgrade to Samba version 4.5.16Upgrade to Samba version 4.6.14Upgrade to Samba version 4.7.6 | Mar 13, 2018 | Mar 13, 2018 |
| Suse | — | Upgrade libdcerpc-samr-develUpgrade libsamba-credentials-develUpgrade sambaUpgrade libsamba-policy-python3-develUpgrade libndr1-32bitUpgrade libnetapi-develUpgrade libnetapi0-32bitUpgrade samba-winbindUpgrade samba-pythonUpgrade libndr-nbt0-32bitUpgrade libsmbldap0Upgrade samba-winbind-32bitUpgrade libnetapi0Upgrade libndr1Upgrade libsamdb0-32bitUpgrade libsamba-errors-develUpgrade libndr-krb5pac0-32bitUpgrade ctdbUpgrade samba-kdcUpgrade samba-clientUpgrade libdcerpc-binding0Upgrade libndr-develUpgrade libndr-nbt0Upgrade libwbclient0-32bitUpgrade samba-libs-python3Upgrade libsamba-hostconfig-develUpgrade libsamba-errors0-32bitUpgrade libsmbconf-develUpgrade libsamdb0Upgrade samba-docUpgrade libsamdb-develUpgrade libsmbconf0-32bitUpgrade libsmbclient0Upgrade libsamba-hostconfig0-32bitUpgrade libsmbconf0Upgrade libndr0Upgrade libtevent-util0Upgrade libdcerpc0-32bitUpgrade libndr-standard0Upgrade libsmbldap2Upgrade libsamba-errors0Upgrade libsamba-util0Upgrade libndr0-32bitUpgrade libsmbclient0-32bitUpgrade libsamba-credentials0-32bitUpgrade samba-core-develUpgrade samba-libs-python3-32bitUpgrade libndr-nbt-develUpgrade libsamba-policy-develUpgrade libwbclient-develUpgrade samba-python3Upgrade libsmbldap2-32bitUpgrade libdcerpc0Upgrade libsamba-hostconfig0Upgrade libndr-krb5pac-develUpgrade samba-dsdb-modulesUpgrade samba-libs-32bitUpgrade samba-libsUpgrade libdcerpc-develUpgrade samba-cephUpgrade samba-client-32bitUpgrade libtevent-util-develUpgrade libsamba-util0-32bitUpgrade libsmbldap-develUpgrade libwbclient0Upgrade libdcerpc-samr0Upgrade libndr-standard0-32bitUpgrade libsamba-policy0Upgrade libndr-standard-develUpgrade libsmbldap0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libtevent-util0-32bitUpgrade libndr-krb5pac0Upgrade libsamba-util-develUpgrade libsmbclient-develUpgrade libsamba-passdb0Upgrade libsamba-credentials0Upgrade libsamba-passdb-develUpgrade libsamba-passdb0-32bitUpgrade libsamba-policy0-python3 | May 19, 2018 | Mar 13, 2018 |
| Ubuntu | — | Upgrade sambaUpgrade samba-dsdb-modules | Apr 25, 2018 | Mar 13, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub