Samba from version 4.9.0 and before version 4.9.3 that have AD DC configurations watching for bad passwords (to restrict brute forcing of passwords) in a window of more than 3 minutes may not watch for bad passwords at all. The primary risk from this issue is with regards to domains that have been upgraded from Samba 4.8 and earlier. In these cases the manual testing done to confirm an organisation's password policies apply as expected may not have been re-done after the upgrade.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 28, 2018 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Nov 28, 2018 |
| Freebsd | — | Upgrade samba46Upgrade samba49Upgrade samba47Upgrade samba48 | Nov 28, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Nov 28, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-clientUpgrade ctdb-testsUpgrade python3-sambaUpgrade samba-winbind-krb5-locatorUpgrade python2-samba-testUpgrade samba-krb5-printingUpgrade samba-client-libsUpgrade libsmbclientUpgrade python3-samba-testUpgrade libwbclientUpgrade python2-sambaUpgrade samba-common-toolsUpgrade samba-libsUpgrade sambaUpgrade samba-commonUpgrade samba-dc-libsUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-pidlUpgrade ctdbUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-testUpgrade samba-test-libs | Nov 19, 2019 | Nov 28, 2018 |
| Samba | — | Upgrade to Samba version 4.9.3 | Dec 4, 2018 | Nov 28, 2018 |
| Suse | — | Upgrade libtevent-util0-32bitUpgrade libsamba-passdb0-32bitUpgrade libtevent-util-develUpgrade libsmbldap2-32bitUpgrade libsamba-util0-32bitUpgrade libdcerpc-samr0Upgrade libsmbldap-develUpgrade samba-libsUpgrade libndr-krb5pac-develUpgrade samba-dsdb-modulesUpgrade libsamba-util-develUpgrade samba-python3Upgrade libsmbclient-develUpgrade libsamba-passdb0Upgrade libtevent-util0Upgrade libdcerpc0Upgrade libwbclient0Upgrade libnetapi0-32bitUpgrade samba-libs-32bitUpgrade libsamba-hostconfig0Upgrade samba-client-32bitUpgrade libsamba-passdb-develUpgrade libndr-krb5pac0Upgrade libsamba-policy0-python3Upgrade libndr-standard-develUpgrade libndr-standard0-32bitUpgrade libdcerpc-develUpgrade libsamba-credentials0Upgrade libsmbconf0-32bitUpgrade libdcerpc0-32bitUpgrade libsamdb-develUpgrade libsmbconf-develUpgrade samba-clientUpgrade samba-docUpgrade samba-libs-python3-32bitUpgrade libdcerpc-binding0Upgrade libndr-nbt0-32bitUpgrade libnetapi0Upgrade libndr-krb5pac0-32bitUpgrade libsamba-errors-develUpgrade libsamba-policy-develUpgrade libwbclient-develUpgrade libwbclient0-32bitUpgrade samba-core-develUpgrade samba-libs-python3Upgrade libsamba-util0Upgrade libsmbclient0-32bitUpgrade samba-winbindUpgrade libsamba-errors0Upgrade libsamba-credentials-develUpgrade libnetapi-develUpgrade libsmbconf0Upgrade libsamdb0-32bitUpgrade libsamba-hostconfig-develUpgrade samba-cephUpgrade libsamba-credentials0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libndr0Upgrade libndr-develUpgrade sambaUpgrade libsamba-policy-python3-develUpgrade libndr1-32bitUpgrade ctdbUpgrade libndr1Upgrade libsmbclient0Upgrade libsamdb0Upgrade libndr0-32bitUpgrade samba-winbind-32bitUpgrade libdcerpc-samr-develUpgrade libndr-nbt0Upgrade libsamba-errors0-32bitUpgrade libndr-nbt-develUpgrade libsamba-hostconfig0-32bitUpgrade libndr-standard0Upgrade libsmbldap2 | Dec 19, 2019 | Aug 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub