The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC mode. A man in the middle attacker could use this flaw to intercept the request to the KDC and replace the user name (principal) in the request with any desired user name (principal) that exists in the KDC effectively obtaining a ticket for that principal.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sambaUpgrade heimdal | Jul 31, 2019 | Jul 31, 2019 |
| Apple Osx Heimdal | — | Apply Apple macOS Security Update 2019-004 High Sierra | Jul 23, 2019 | Jul 22, 2019 |
| Debian | — | Upgrade sambaUpgrade heimdal | May 15, 2019 | May 15, 2019 |
| Freebsd | — | Upgrade samba47Upgrade samba410Upgrade samba48Upgrade samba46Upgrade samba49 | May 18, 2019 | May 14, 2019 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-client-libsUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade libwbclientUpgrade samba-clientUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-pythonUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba | Nov 3, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libwbclientUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-commonUpgrade sambaUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade samba-common-libsUpgrade samba-clientUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-winbind-modules | Sep 28, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-pythonUpgrade samba-common-libsUpgrade sambaUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-commonUpgrade libwbclientUpgrade samba-client-libs | Jun 3, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-krb5-printingUpgrade python2-sambaUpgrade ctdb-testsUpgrade samba-testUpgrade samba-winbindUpgrade python2-samba-testUpgrade sambaUpgrade samba-client-libsUpgrade python3-sambaUpgrade samba-pidlUpgrade samba-libsUpgrade libwbclientUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade ctdbUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-test-libsUpgrade samba-clientUpgrade python3-samba-testUpgrade samba-dc-libsUpgrade samba-common | Jan 3, 2020 | Jul 31, 2019 |
| Samba | — | Upgrade to Samba version 4.10.3Upgrade to Samba version 4.9.8Upgrade to Samba version 4.8.12 | May 24, 2019 | May 24, 2019 |
| Suse | — | Upgrade libsamba-passdb-develUpgrade libsamdb-develUpgrade libsmbldap-develUpgrade libnetapi0-32bitUpgrade libsamba-errors-develUpgrade libwbclient-develUpgrade samba-dsdb-modulesUpgrade libsamba-credentials0Upgrade samba-core-develUpgrade libdcerpc-binding0-32bitUpgrade samba-client-32bitUpgrade libdcerpc0Upgrade libsamba-errors0Upgrade samba-libs-python3-32bitUpgrade libsamba-util0Upgrade libsamba-passdb0Upgrade libdcerpc-samr0Upgrade samba-ldb-ldapUpgrade libsamba-policy-python3-develUpgrade samba-winbind-libsUpgrade libndr-krb5pac0Upgrade libndr-standard-develUpgrade samba-winbind-libs-32bitUpgrade libwbclient0-32bitUpgrade libndr-standard0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libndr1-32bitUpgrade libndr-krb5pac-develUpgrade libsmbconf-develUpgrade samba-client-libsUpgrade libsamba-hostconfig-develUpgrade samba-clientUpgrade samba-client-libs-32bitUpgrade libsamba-passdb0-32bitUpgrade libndr-nbt0-32bitUpgrade samba-python3Upgrade libndr-standard0Upgrade libnetapi-develUpgrade libsamdb0-32bitUpgrade libndr0-32bitUpgrade samba-gpupdateUpgrade libndr-develUpgrade libndr-krb5pac0-32bitUpgrade libnetapi0Upgrade libsamba-policy-develUpgrade libsamba-credentials0-32bitUpgrade libheimdal-develUpgrade libsamba-util-develUpgrade samba-winbindUpgrade samba-develUpgrade libsamdb0Upgrade libsamba-util0-32bitUpgrade samba-docUpgrade libsamba-policy0-python3Upgrade samba-libs-python3Upgrade samba-libsUpgrade libdcerpc-develUpgrade libsamba-hostconfig0Upgrade libheimdalUpgrade libndr-nbt0Upgrade libtevent-util0Upgrade libndr1Upgrade libsamba-errors0-32bitUpgrade libtevent-util0-32bitUpgrade libsmbconf0Upgrade libdcerpc0-32bitUpgrade sambaUpgrade samba-winbind-32bitUpgrade libsmbclient0Upgrade samba-libs-32bitUpgrade ctdbUpgrade libwbclient0Upgrade libdcerpc-samr-develUpgrade libsmbclient-develUpgrade libsmbconf0-32bitUpgrade libsmbldap2Upgrade libdcerpc-binding0Upgrade libndr-nbt-develUpgrade samba-cephUpgrade libsmbldap2-32bitUpgrade samba-ad-dc-libsUpgrade libndr0Upgrade libsamba-credentials-develUpgrade libtevent-util-develUpgrade libsmbclient0-32bit | Nov 28, 2022 | Jul 31, 2019 |
| Ubuntu | — | Upgrade heimdal-servers-x (Ubuntu Pro)Upgrade libkrb5-26-heimdal (Ubuntu Pro)Upgrade heimdal-clients (Ubuntu Pro)Upgrade libkdc2-heimdalUpgrade heimdal-kcmUpgrade samba (Ubuntu Pro)Upgrade libkrb5-26-heimdalUpgrade heimdal-clientsUpgrade heimdal-clients-x (Ubuntu Pro)Upgrade heimdal-serversUpgrade libkdc2-heimdal (Ubuntu Pro)Upgrade heimdal-kcm (Ubuntu Pro)Upgrade libgssapi3-heimdalUpgrade heimdal-kdcUpgrade libgssapi3-heimdal (Ubuntu Pro)Upgrade heimdal-servers (Ubuntu Pro)Upgrade heimdal-kdc (Ubuntu Pro)Upgrade samba | May 15, 2019 | May 14, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub