On a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly validates permissions to modify passwords over LDAP allowing authenticated users to change any other users' passwords, including administrative users and privileged service accounts (eg Domain Controllers).
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 22, 2018 | Mar 13, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 13, 2018 |
| Debian | — | Upgrade sambaUpgrade Debian to resolve this vulnerability. | Mar 15, 2018 | Mar 13, 2018 |
| Freebsd | — | Upgrade samba46Upgrade samba47Upgrade samba44Upgrade samba45 | Mar 15, 2018 | Mar 13, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | May 23, 2018 | Mar 13, 2018 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.7.6-0.175.3.32.0.4.0 on Solaris 11.3Upgrade service/network/samba to version 4.7.6-0.175.3.32.0.4.0 on Solaris 11.3 | May 16, 2018 | Mar 13, 2018 |
| Samba | — | Upgrade to Samba version 4.6.14Upgrade to Samba version 4.5.16Upgrade to Samba version 4.7.6 | Mar 13, 2018 | Mar 13, 2018 |
| Suse | — | Upgrade samba-dsdb-modulesUpgrade samba-libsUpgrade samba-libs-32bitUpgrade libdcerpc-develUpgrade libsamba-util0-32bitUpgrade libsmbldap2-32bitUpgrade libsamba-passdb-develUpgrade libsamba-policy0-python3Upgrade samba-python3Upgrade libsamba-credentials0Upgrade libdcerpc-samr0Upgrade libsamba-policy0Upgrade libndr-krb5pac0Upgrade libndr-standard-develUpgrade libsamba-passdb0Upgrade samba-cephUpgrade libsamba-util-develUpgrade libsmbldap0-32bitUpgrade libsmbclient-develUpgrade libndr-standard0-32bitUpgrade libsmbldap-develUpgrade libtevent-util-develUpgrade samba-client-32bitUpgrade libsamba-hostconfig0Upgrade libdcerpc0Upgrade libndr-krb5pac-develUpgrade libdcerpc-binding0-32bitUpgrade libsamba-passdb0-32bitUpgrade libtevent-util0-32bitUpgrade libwbclient0Upgrade libdcerpc-samr-develUpgrade libnetapi0Upgrade libwbclient-develUpgrade libsamba-errors0Upgrade libndr-develUpgrade samba-kdcUpgrade libdcerpc-binding0Upgrade libsamdb-develUpgrade libndr-krb5pac0-32bitUpgrade libsamba-errors-develUpgrade libsamdb0-32bitUpgrade samba-core-develUpgrade libndr-nbt0Upgrade ctdbUpgrade libdcerpc0-32bitUpgrade libsamba-errors0-32bitUpgrade libndr1Upgrade samba-clientUpgrade libsmbclient0-32bitUpgrade libsamba-util0Upgrade libndr0-32bitUpgrade libndr-standard0Upgrade libsmbconf-develUpgrade libsamba-hostconfig-develUpgrade libsamba-credentials0-32bitUpgrade libsamdb0Upgrade libtevent-util0Upgrade libsmbldap2Upgrade samba-docUpgrade libnetapi0-32bitUpgrade samba-libs-python3-32bitUpgrade libsamba-policy-python3-develUpgrade libndr1-32bitUpgrade libsamba-policy-develUpgrade libndr0Upgrade libsamba-credentials-develUpgrade libsmbconf0Upgrade libnetapi-develUpgrade libwbclient0-32bitUpgrade libsmbconf0-32bitUpgrade samba-libs-python3Upgrade libsmbclient0Upgrade libsamba-hostconfig0-32bitUpgrade libndr-nbt-develUpgrade sambaUpgrade libndr-nbt0-32bitUpgrade samba-winbind-32bitUpgrade samba-pythonUpgrade samba-winbindUpgrade libsmbldap0 | May 19, 2018 | Mar 13, 2018 |
| Ubuntu | — | Upgrade sambaUpgrade samba-dsdb-modules | Apr 25, 2018 | Mar 13, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub