Samba from version 4.9.0 and before version 4.9.3 that have AD DC configurations watching for bad passwords (to restrict brute forcing of passwords) in a window of more than 3 minutes may not watch for bad passwords at all. The primary risk from this issue is with regards to domains that have been upgraded from Samba 4.8 and earlier. In these cases the manual testing done to confirm an organisation's password policies apply as expected may not have been re-done after the upgrade.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 28, 2018 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Nov 28, 2018 |
| Freebsd | — | Upgrade samba46Upgrade samba47Upgrade samba49Upgrade samba48 | Nov 28, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Nov 28, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-common-libsUpgrade ctdbUpgrade samba-winbind-modulesUpgrade samba-testUpgrade samba-dc-libsUpgrade samba-winbindUpgrade sambaUpgrade samba-commonUpgrade samba-test-libsUpgrade samba-pidlUpgrade samba-winbind-clientsUpgrade python3-samba-testUpgrade samba-clientUpgrade libwbclientUpgrade samba-krb5-printingUpgrade libsmbclientUpgrade python2-samba-testUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade ctdb-testsUpgrade python2-sambaUpgrade samba-libsUpgrade python3-sambaUpgrade samba-winbind-krb5-locator | Nov 19, 2019 | Nov 28, 2018 |
| Samba | — | Upgrade to Samba version 4.9.3 | Dec 4, 2018 | Nov 28, 2018 |
| Suse | — | Upgrade ctdbUpgrade libndr-krb5pac0-32bitUpgrade libnetapi-develUpgrade libsmbldap2Upgrade samba-winbind-32bitUpgrade sambaUpgrade libdcerpc-samr-develUpgrade libndr1Upgrade libndr1-32bitUpgrade libdcerpc0-32bitUpgrade libndr-nbt0Upgrade libndr-develUpgrade libwbclient-develUpgrade libsamba-policy-python3-develUpgrade libsmbclient0Upgrade samba-cephUpgrade libndr-nbt-develUpgrade libsamba-policy-develUpgrade libndr0-32bitUpgrade libsamba-errors0-32bitUpgrade samba-clientUpgrade libnetapi0Upgrade libsamdb0-32bitUpgrade samba-libs-python3Upgrade libsamba-credentials0-32bitUpgrade libndr0Upgrade libsmbconf0Upgrade libdcerpc-binding0-32bitUpgrade libsamba-errors-develUpgrade libsmbconf0-32bitUpgrade samba-libs-python3-32bitUpgrade libndr-standard0Upgrade libsmbconf-develUpgrade libsamba-hostconfig0-32bitUpgrade samba-core-develUpgrade libsamba-hostconfig-develUpgrade libsamba-util0Upgrade samba-docUpgrade libndr-nbt0-32bitUpgrade libsmbclient0-32bitUpgrade libwbclient0-32bitUpgrade libsamba-credentials-develUpgrade libsamdb0Upgrade libsamdb-develUpgrade samba-winbindUpgrade libsamba-errors0Upgrade libdcerpc-binding0Upgrade libtevent-util0Upgrade libsmbldap-develUpgrade libsamba-util0-32bitUpgrade samba-dsdb-modulesUpgrade samba-python3Upgrade libsmbclient-develUpgrade libndr-krb5pac-develUpgrade libtevent-util-develUpgrade libsamba-policy0-python3Upgrade libsmbldap2-32bitUpgrade libsamba-credentials0Upgrade libsamba-passdb-develUpgrade samba-client-32bitUpgrade libsamba-hostconfig0Upgrade libndr-standard0-32bitUpgrade libdcerpc-develUpgrade libndr-standard-develUpgrade samba-libs-32bitUpgrade libtevent-util0-32bitUpgrade libsamba-passdb0-32bitUpgrade libnetapi0-32bitUpgrade libsamba-passdb0Upgrade libdcerpc0Upgrade libwbclient0Upgrade libsamba-util-develUpgrade libndr-krb5pac0Upgrade libdcerpc-samr0Upgrade samba-libs | Dec 19, 2019 | Aug 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub