Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is built in the non-default MIT Kerberos configuration. With this advisory the Samba Team clarify that the MIT Kerberos build of the Samba AD DC is considered experimental. Therefore the Samba Team will not issue security patches for this configuration. Additionally, Samba 4.7.12, 4.8.7 and 4.9.3 have been issued as security releases to prevent building of the AD DC with MIT Kerberos unless --with-experimental-mit-ad-dc is specified to the configure command.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Nov 28, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 28, 2018 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Nov 28, 2018 |
| Freebsd | — | Upgrade samba49Upgrade samba47Upgrade samba46Upgrade samba48 | Nov 28, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Nov 28, 2018 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Nov 28, 2018 |
| Samba | — | Upgrade to Samba version 4.8.7Upgrade to Samba version 4.7.12Upgrade to Samba version 4.9.3 | Dec 4, 2018 | Nov 28, 2018 |
| Suse | — | Upgrade libwbclient0Upgrade libtevent-util0Upgrade samba-libsUpgrade samba-libs-python3Upgrade libtevent-util0-32bitUpgrade libndr1Upgrade libdcerpc-samr0Upgrade samba-libs-32bitUpgrade libnetapi-develUpgrade libndr0Upgrade samba-winbindUpgrade libsmbconf0-32bitUpgrade libsmbldap-develUpgrade samba-cephUpgrade samba-pythonUpgrade libsamba-hostconfig0Upgrade samba-winbind-32bitUpgrade libsmbclient-develUpgrade libndr-nbt0Upgrade samba-docUpgrade libndr-krb5pac0-32bitUpgrade libsamba-util0-32bitUpgrade libsamba-hostconfig-develUpgrade libsamba-passdb0-32bitUpgrade libdcerpc-binding0Upgrade libsamba-policy0Upgrade libsmbconf-develUpgrade libsamba-hostconfig0-32bitUpgrade libndr0-32bitUpgrade libsamba-errors-develUpgrade libdcerpc-develUpgrade samba-dsdb-modulesUpgrade libsamdb0Upgrade ctdbUpgrade libnetapi0Upgrade sambaUpgrade libndr-standard0-32bitUpgrade libsamba-util-develUpgrade samba-core-develUpgrade libtevent-util-develUpgrade libsmbconf0Upgrade libsamba-errors0Upgrade libsmbldap2-32bitUpgrade libwbclient-develUpgrade libsamba-policy0-python3Upgrade samba-client-32bitUpgrade libndr-krb5pac-develUpgrade libndr-standard-develUpgrade libsmbclient0Upgrade libndr-develUpgrade samba-python3Upgrade libsamba-policy-python3-develUpgrade libsamba-credentials0-32bitUpgrade libsamba-credentials0Upgrade libsamba-credentials-develUpgrade libnetapi0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libndr-nbt-develUpgrade libdcerpc0-32bitUpgrade samba-libs-python3-32bitUpgrade libndr-nbt0-32bitUpgrade libndr1-32bitUpgrade libsamdb-develUpgrade libsmbclient0-32bitUpgrade libsamba-util0Upgrade samba-clientUpgrade libdcerpc-samr-develUpgrade libndr-standard0Upgrade libsamba-policy-develUpgrade libsmbldap2Upgrade libndr-krb5pac0Upgrade libsamba-errors0-32bitUpgrade libsamba-passdb-develUpgrade libsamdb0-32bitUpgrade libsamba-passdb0Upgrade libdcerpc0Upgrade libwbclient0-32bit | Dec 19, 2019 | Aug 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub