All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the S4U (MS-SFU) Kerberos delegation model includes a feature allowing for a subset of clients to be opted out of constrained delegation in any way, either S4U2Self or regular Kerberos authentication, by forcing all tickets for these clients to be non-forwardable. In AD this is implemented by a user attribute delegation_not_allowed (aka not-delegated), which translates to disallow-forwardable. However the Samba AD DC does not do that for S4U2Self and does set the forwardable flag even if the impersonated client has the not-delegated flag set.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade heimdalUpgrade samba | Mar 26, 2024 | Dec 10, 2019 |
| Debian | — | Upgrade heimdalUpgrade samba | May 31, 2021 | Dec 10, 2019 |
| Freebsd | — | Upgrade samba411Upgrade samba48Upgrade samba410Upgrade FreeBSD | Aug 31, 2023 | Dec 12, 2019 |
| Gentoo Linux | — | Upgrade net-fs/samba.Upgrade app-crypt/heimdal. | Mar 27, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-winbindUpgrade libwbclientUpgrade samba-client-libsUpgrade libsmbclientUpgrade sambaUpgrade samba-pythonUpgrade samba-libs | Nov 3, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-client-libsUpgrade samba-commonUpgrade samba-winbindUpgrade samba-libsUpgrade samba-pythonUpgrade samba-common-toolsUpgrade sambaUpgrade samba-clientUpgrade libwbclientUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-winbind-modules | Sep 28, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libwbclientUpgrade sambaUpgrade samba-pythonUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade libsmbclientUpgrade samba-winbind-clients | Feb 24, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libsmbclientUpgrade samba-winbindUpgrade sambaUpgrade python2-sambaUpgrade ctdbUpgrade samba-commonUpgrade samba-krb5-printingUpgrade samba-libsUpgrade libwbclientUpgrade samba-dc-libsUpgrade python3-sambaUpgrade samba-test-libsUpgrade samba-common-libsUpgrade samba-pidlUpgrade ctdb-testsUpgrade python2-samba-testUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-testUpgrade samba-client-libsUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade python3-samba-testUpgrade samba-winbind-krb5-locator | Jan 3, 2020 | Dec 10, 2019 |
| Samba | — | Upgrade to Samba 4.9.17 or later.Upgrade to Samba 4.10.11 or later.Upgrade to Samba 4.11.3 or later. | Dec 16, 2019 | Dec 10, 2019 |
| Suse | — | Upgrade libsmbldap2-32bitUpgrade samba-libs-pythonUpgrade libsamdb0Upgrade libldb1-32bitUpgrade libndr1Upgrade libndr0Upgrade libsamba-errors0Upgrade libdcerpc-binding0Upgrade libsmbconf-develUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-hostconfig-develUpgrade libndr-nbt0-32bitUpgrade samba-pidlUpgrade python-ldb-develUpgrade libsamba-errors-develUpgrade libsmbldap-develUpgrade samba-ad-dcUpgrade samba-libs-32bitUpgrade libldb-develUpgrade libtevent-util-develUpgrade ctdbUpgrade libsmbconf0Upgrade libdcerpc-develUpgrade libndr-standard0Upgrade samba-client-32bitUpgrade libsamba-credentials0-32bitUpgrade libsamba-util0-32bitUpgrade samba-pythonUpgrade libndr-krb5pac0-32bitUpgrade sambaUpgrade samba-winbind-32bitUpgrade libsmbconf0-32bitUpgrade libndr-standard-develUpgrade libsamba-policy-python-develUpgrade samba-libs-python-32bitUpgrade libndr1-32bitUpgrade samba-testUpgrade libsmbldap2Upgrade ctdb-pcp-pmdaUpgrade libsamba-util0Upgrade samba-winbindUpgrade libdcerpc-samr0Upgrade libnetapi0Upgrade libdcerpc-samr0-32bitUpgrade samba-libs-python3Upgrade libsamba-hostconfig0Upgrade libsmbclient0Upgrade libldb1Upgrade libndr-develUpgrade python-ldbUpgrade libndr0-32bitUpgrade libsamba-policy0-python3-32bitUpgrade libsamba-errors0-32bitUpgrade samba-cephUpgrade libnetapi-develUpgrade libsamba-policy-python3-develUpgrade libsamba-policy0Upgrade samba-libsUpgrade samba-docUpgrade libndr-standard0-32bitUpgrade libsamba-policy0-32bitUpgrade libwbclient-develUpgrade samba-libs-python3-32bitUpgrade samba-python3Upgrade libwbclient0-32bitUpgrade libdcerpc0Upgrade libsamba-policy0-python3Upgrade libsmbclient-develUpgrade libsamba-passdb0-32bitUpgrade libndr-nbt0Upgrade libndr-krb5pac0Upgrade libndr-nbt-develUpgrade libdcerpc-binding0-32bitUpgrade samba-dsdb-modulesUpgrade libsamba-policy-develUpgrade libsamba-credentials0Upgrade libdcerpc0-32bitUpgrade libtevent-util0-32bitUpgrade libwbclient0Upgrade libsamdb-develUpgrade libnetapi0-32bitUpgrade ldb-toolsUpgrade libsamba-credentials-develUpgrade samba-ad-dc-32bitUpgrade libsamdb0-32bitUpgrade libndr-krb5pac-develUpgrade libsamba-util-develUpgrade libsamba-passdb0Upgrade samba-core-develUpgrade libdcerpc-samr-develUpgrade ctdb-testsUpgrade libsmbclient0-32bitUpgrade libsamba-passdb-develUpgrade libtevent-util0Upgrade samba-client | Dec 24, 2019 | Dec 10, 2019 |
| Ubuntu | — | Upgrade libsmbclient (Ubuntu Pro)Upgrade samba (Ubuntu Pro)Upgrade sambaUpgrade libsmbclient | Dec 12, 2019 | Dec 10, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub