On a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly validates permissions to modify passwords over LDAP allowing authenticated users to change any other users' passwords, including administrative users and privileged service accounts (eg Domain Controllers).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 22, 2018 | Mar 13, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 13, 2018 |
| Debian | — | Upgrade sambaUpgrade Debian to resolve this vulnerability. | Mar 15, 2018 | Mar 13, 2018 |
| Freebsd | — | Upgrade samba45Upgrade samba44Upgrade samba47Upgrade samba46 | Mar 15, 2018 | Mar 13, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | May 23, 2018 | Mar 13, 2018 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.7.6-0.175.3.32.0.4.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.7.6-0.175.3.32.0.4.0 on Solaris 11.3 | May 16, 2018 | Mar 13, 2018 |
| Samba | — | Upgrade to Samba version 4.5.16Upgrade to Samba version 4.7.6Upgrade to Samba version 4.6.14 | Mar 13, 2018 | Mar 13, 2018 |
| Suse | — | Upgrade samba-cephUpgrade libsamba-util-develUpgrade libsamba-policy0Upgrade libtevent-util-develUpgrade samba-dsdb-modulesUpgrade samba-libs-32bitUpgrade libdcerpc-binding0-32bitUpgrade samba-client-32bitUpgrade libsmbclient-develUpgrade samba-libsUpgrade libtevent-util0-32bitUpgrade libndr-standard0-32bitUpgrade libdcerpc-develUpgrade libsmbldap-develUpgrade libsmbldap0-32bitUpgrade libsamba-util0-32bitUpgrade libndr-standard-develUpgrade libsamba-passdb0-32bitUpgrade libndr-krb5pac-develUpgrade libsamba-hostconfig0Upgrade libdcerpc0Upgrade samba-python3Upgrade libsamba-policy0-python3Upgrade libsamba-credentials0Upgrade libsamba-passdb-develUpgrade libsmbldap2-32bitUpgrade libndr-krb5pac0Upgrade libwbclient0Upgrade libsamba-passdb0Upgrade libdcerpc-samr0Upgrade ctdbUpgrade samba-clientUpgrade libsmbconf-develUpgrade samba-winbind-32bitUpgrade libndr-nbt0Upgrade samba-pythonUpgrade libsamba-util0Upgrade samba-winbindUpgrade libndr-nbt0-32bitUpgrade libndr-standard0Upgrade libsmbclient0-32bitUpgrade libndr0-32bitUpgrade samba-core-develUpgrade libsamba-errors0-32bitUpgrade libsamba-errors-develUpgrade libsamdb0Upgrade libsmbconf0Upgrade libsamba-hostconfig-develUpgrade libtevent-util0Upgrade samba-docUpgrade libnetapi0Upgrade libndr1Upgrade libdcerpc-binding0Upgrade libndr-krb5pac0-32bitUpgrade libsamdb-develUpgrade libsmbldap2Upgrade samba-kdcUpgrade libsmbldap0Upgrade libsamba-errors0Upgrade libsamdb0-32bitUpgrade libdcerpc0-32bitUpgrade libwbclient-develUpgrade libsamba-credentials0-32bitUpgrade libndr-nbt-develUpgrade libndr-develUpgrade libsamba-policy-develUpgrade samba-libs-python3-32bitUpgrade libnetapi0-32bitUpgrade libndr0Upgrade libnetapi-develUpgrade sambaUpgrade libsamba-policy-python3-develUpgrade libndr1-32bitUpgrade libsamba-credentials-develUpgrade libwbclient0-32bitUpgrade libsmbconf0-32bitUpgrade samba-libs-python3Upgrade libdcerpc-samr-develUpgrade libsamba-hostconfig0-32bitUpgrade libsmbclient0 | May 19, 2018 | Mar 13, 2018 |
| Ubuntu | — | Upgrade sambaUpgrade samba-dsdb-modules | Apr 25, 2018 | Mar 13, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub