All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the S4U (MS-SFU) Kerberos delegation model includes a feature allowing for a subset of clients to be opted out of constrained delegation in any way, either S4U2Self or regular Kerberos authentication, by forcing all tickets for these clients to be non-forwardable. In AD this is implemented by a user attribute delegation_not_allowed (aka not-delegated), which translates to disallow-forwardable. However the Samba AD DC does not do that for S4U2Self and does set the forwardable flag even if the impersonated client has the not-delegated flag set.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade heimdalUpgrade samba | Mar 26, 2024 | Dec 10, 2019 |
| Debian | — | Upgrade sambaUpgrade heimdal | May 31, 2021 | Dec 10, 2019 |
| Freebsd | — | Upgrade FreeBSDUpgrade samba410Upgrade samba411Upgrade samba48 | Aug 31, 2023 | Dec 12, 2019 |
| Gentoo Linux | — | Upgrade net-fs/samba.Upgrade app-crypt/heimdal. | Mar 27, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-clientUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-common-toolsUpgrade libsmbclientUpgrade libwbclientUpgrade samba-winbindUpgrade sambaUpgrade samba-client-libsUpgrade samba-pythonUpgrade samba-libs | Nov 3, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-common-toolsUpgrade samba-libsUpgrade libwbclientUpgrade sambaUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-commonUpgrade samba-pythonUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-winbind-clients | Sep 28, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sambaUpgrade samba-pythonUpgrade libwbclientUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-winbindUpgrade samba-commonUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-common-libs | Feb 24, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-commonUpgrade ctdbUpgrade samba-pidlUpgrade samba-common-libsUpgrade python2-sambaUpgrade samba-test-libsUpgrade samba-krb5-printingUpgrade samba-libsUpgrade libwbclientUpgrade python3-sambaUpgrade sambaUpgrade samba-winbindUpgrade samba-dc-libsUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-testUpgrade samba-winbind-krb5-locatorUpgrade python2-samba-testUpgrade samba-common-toolsUpgrade libsmbclientUpgrade python3-samba-testUpgrade samba-winbind-clientsUpgrade ctdb-tests | Jan 3, 2020 | Dec 10, 2019 |
| Samba | — | Upgrade to Samba 4.11.3 or later.Upgrade to Samba 4.10.11 or later.Upgrade to Samba 4.9.17 or later. | Dec 16, 2019 | Dec 10, 2019 |
| Suse | — | Upgrade libsmbconf-develUpgrade libndr1Upgrade libndr0-32bitUpgrade libndr0Upgrade libndr-standard0Upgrade libnetapi-develUpgrade libsamba-errors0Upgrade samba-cephUpgrade python-ldbUpgrade libsamba-errors0-32bitUpgrade libsamba-util0Upgrade samba-ad-dcUpgrade libdcerpc-binding0Upgrade samba-libs-pythonUpgrade libsamdb0Upgrade samba-pidlUpgrade libldb1Upgrade libsamba-errors-develUpgrade libsamba-policy0-python3-32bitUpgrade libsmbconf0Upgrade libsamba-util0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libldb1-32bitUpgrade samba-pythonUpgrade libsamba-credentials0-32bitUpgrade samba-winbind-32bitUpgrade samba-client-32bitUpgrade libsmbconf0-32bitUpgrade sambaUpgrade libsmbldap-develUpgrade samba-libs-32bitUpgrade libtevent-util-develUpgrade libldb-develUpgrade libsmbldap2-32bitUpgrade ctdbUpgrade libsamba-hostconfig-develUpgrade python-ldb-develUpgrade libsamba-hostconfig0-32bitUpgrade libndr-nbt0-32bitUpgrade libsmbclient0Upgrade libsamba-hostconfig0Upgrade ctdb-pcp-pmdaUpgrade libsamba-policy-python-develUpgrade libndr1-32bitUpgrade libsmbldap2Upgrade libndr-standard-develUpgrade samba-testUpgrade samba-libs-python-32bitUpgrade libndr-develUpgrade libdcerpc-samr0Upgrade samba-libs-python3Upgrade samba-winbindUpgrade libdcerpc-samr0-32bitUpgrade libdcerpc-develUpgrade libnetapi0Upgrade libdcerpc0Upgrade ctdb-testsUpgrade libwbclient0-32bitUpgrade samba-dsdb-modulesUpgrade libndr-nbt-develUpgrade libsamba-policy-python3-develUpgrade libndr-nbt0Upgrade libtevent-util0Upgrade samba-core-develUpgrade libnetapi0-32bitUpgrade ldb-toolsUpgrade libsamdb0-32bitUpgrade samba-docUpgrade libsamba-passdb0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libsamba-credentials-develUpgrade libsamdb-develUpgrade samba-clientUpgrade libtevent-util0-32bitUpgrade samba-libsUpgrade libwbclient0Upgrade libsamba-policy-develUpgrade libsamba-policy0-python3Upgrade libwbclient-develUpgrade libdcerpc0-32bitUpgrade libndr-krb5pac0Upgrade libsamba-util-develUpgrade samba-ad-dc-32bitUpgrade libsmbclient0-32bitUpgrade samba-libs-python3-32bitUpgrade libsamba-credentials0Upgrade libndr-standard0-32bitUpgrade libsamba-policy0-32bitUpgrade libsamba-passdb0Upgrade samba-python3Upgrade libndr-krb5pac-develUpgrade libdcerpc-samr-develUpgrade libsamba-policy0Upgrade libsmbclient-develUpgrade libsamba-passdb-devel | Dec 24, 2019 | Dec 10, 2019 |
| Ubuntu | — | Upgrade libsmbclientUpgrade sambaUpgrade samba (Ubuntu Pro)Upgrade libsmbclient (Ubuntu Pro) | Dec 12, 2019 | Dec 10, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub