Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is built in the non-default MIT Kerberos configuration. With this advisory the Samba Team clarify that the MIT Kerberos build of the Samba AD DC is considered experimental. Therefore the Samba Team will not issue security patches for this configuration. Additionally, Samba 4.7.12, 4.8.7 and 4.9.3 have been issued as security releases to prevent building of the AD DC with MIT Kerberos unless --with-experimental-mit-ad-dc is specified to the configure command.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Nov 28, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 28, 2018 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Nov 28, 2018 |
| Freebsd | — | Upgrade samba48Upgrade samba46Upgrade samba47Upgrade samba49 | Nov 28, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Nov 28, 2018 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Nov 28, 2018 |
| Samba | — | Upgrade to Samba version 4.7.12Upgrade to Samba version 4.8.7Upgrade to Samba version 4.9.3 | Dec 4, 2018 | Nov 28, 2018 |
| Suse | — | Upgrade samba-core-develUpgrade libwbclient-develUpgrade libsamba-util-develUpgrade libsamba-policy0-python3Upgrade samba-dsdb-modulesUpgrade libsamba-hostconfig-develUpgrade libsamba-policy0Upgrade libsmbclient-develUpgrade samba-pythonUpgrade libnetapi0Upgrade libndr1Upgrade libdcerpc-binding0Upgrade libnetapi-develUpgrade libsmbldap2-32bitUpgrade sambaUpgrade samba-winbind-32bitUpgrade libsamba-errors0Upgrade samba-libs-python3Upgrade libsamba-passdb0-32bitUpgrade libtevent-util0Upgrade libsmbconf-develUpgrade libsamba-hostconfig0-32bitUpgrade libdcerpc-develUpgrade libwbclient0Upgrade libtevent-util-develUpgrade samba-winbindUpgrade samba-libs-32bitUpgrade libsmbldap-develUpgrade samba-docUpgrade libndr-standard0-32bitUpgrade libsamba-hostconfig0Upgrade libtevent-util0-32bitUpgrade samba-libsUpgrade libsmbconf0-32bitUpgrade libsamdb0Upgrade ctdbUpgrade samba-cephUpgrade libdcerpc-samr0Upgrade libndr-krb5pac0-32bitUpgrade libsmbconf0Upgrade libsamba-util0-32bitUpgrade libsamba-errors-develUpgrade libndr-nbt0Upgrade libndr0Upgrade libndr0-32bitUpgrade samba-client-32bitUpgrade samba-libs-python3-32bitUpgrade libndr-nbt-develUpgrade libndr-nbt0-32bitUpgrade libsamdb-develUpgrade libdcerpc0Upgrade samba-clientUpgrade libdcerpc-samr-develUpgrade libndr-standard0Upgrade libsmbclient0-32bitUpgrade libsamba-policy-python3-develUpgrade libsamba-util0Upgrade libsamba-policy-develUpgrade libnetapi0-32bitUpgrade libsamdb0-32bitUpgrade libndr1-32bitUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc0-32bitUpgrade libsamba-credentials0-32bitUpgrade libndr-develUpgrade libsamba-errors0-32bitUpgrade libndr-standard-develUpgrade libsmbclient0Upgrade libndr-krb5pac-develUpgrade libsamba-passdb0Upgrade libwbclient0-32bitUpgrade libsamba-passdb-develUpgrade libndr-krb5pac0Upgrade samba-python3Upgrade libsmbldap2Upgrade libsamba-credentials-develUpgrade libsamba-credentials0 | Dec 19, 2019 | Aug 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub