Samba from version 4.9.0 and before version 4.9.3 that have AD DC configurations watching for bad passwords (to restrict brute forcing of passwords) in a window of more than 3 minutes may not watch for bad passwords at all. The primary risk from this issue is with regards to domains that have been upgraded from Samba 4.8 and earlier. In these cases the manual testing done to confirm an organisation's password policies apply as expected may not have been re-done after the upgrade.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 28, 2018 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Nov 28, 2018 |
| Freebsd | — | Upgrade samba46Upgrade samba47Upgrade samba49Upgrade samba48 | Nov 28, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Nov 28, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-dc-libsUpgrade samba-winbindUpgrade samba-pidlUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-testUpgrade samba-test-libsUpgrade samba-commonUpgrade samba-common-libsUpgrade ctdbUpgrade python3-sambaUpgrade samba-common-toolsUpgrade python3-samba-testUpgrade ctdb-testsUpgrade samba-client-libsUpgrade samba-winbind-krb5-locatorUpgrade python2-samba-testUpgrade samba-libsUpgrade python2-sambaUpgrade libwbclientUpgrade samba-clientUpgrade samba-krb5-printingUpgrade libsmbclient | Nov 19, 2019 | Nov 28, 2018 |
| Samba | — | Upgrade to Samba version 4.9.3 | Dec 4, 2018 | Nov 28, 2018 |
| Suse | — | Upgrade libdcerpc-samr-develUpgrade libsamdb-develUpgrade libsamba-hostconfig0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libndr1-32bitUpgrade samba-core-develUpgrade libdcerpc-binding0Upgrade libsamba-errors0-32bitUpgrade libwbclient-develUpgrade libsmbconf0-32bitUpgrade samba-clientUpgrade libsmbconf0Upgrade libdcerpc-binding0-32bitUpgrade libndr0Upgrade samba-libs-python3Upgrade libsamba-errors-develUpgrade libndr-nbt0-32bitUpgrade libndr-nbt0Upgrade libsamba-hostconfig-develUpgrade libsmbldap2Upgrade libndr0-32bitUpgrade libndr-standard0Upgrade libndr-nbt-develUpgrade libwbclient0-32bitUpgrade libsamdb0Upgrade samba-winbindUpgrade libsamba-util0Upgrade libsmbclient0-32bitUpgrade libsamba-credentials-develUpgrade libsamba-errors0Upgrade samba-winbind-32bitUpgrade libnetapi0Upgrade samba-cephUpgrade samba-libs-python3-32bitUpgrade libsamba-credentials0-32bitUpgrade libdcerpc0-32bitUpgrade libsamdb0-32bitUpgrade sambaUpgrade samba-docUpgrade libsmbconf-develUpgrade libsamba-policy-python3-develUpgrade libndr-develUpgrade libndr1Upgrade libsamba-policy-develUpgrade ctdbUpgrade libsmbclient0Upgrade libnetapi-develUpgrade samba-python3Upgrade libndr-standard-develUpgrade libndr-krb5pac-develUpgrade libsamba-policy0-python3Upgrade libsamba-util-develUpgrade libdcerpc-develUpgrade libsamba-hostconfig0Upgrade samba-dsdb-modulesUpgrade libdcerpc-samr0Upgrade libsamba-util0-32bitUpgrade libsmbldap-develUpgrade samba-libsUpgrade libdcerpc0Upgrade libwbclient0Upgrade libsmbclient-develUpgrade libsamba-credentials0Upgrade samba-client-32bitUpgrade libsamba-passdb-develUpgrade libtevent-util0Upgrade libndr-standard0-32bitUpgrade libndr-krb5pac0Upgrade libtevent-util0-32bitUpgrade libtevent-util-develUpgrade libsamba-passdb0-32bitUpgrade libsamba-passdb0Upgrade libsmbldap2-32bitUpgrade libnetapi0-32bitUpgrade samba-libs-32bit | Dec 19, 2019 | Aug 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub