All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the S4U (MS-SFU) Kerberos delegation model includes a feature allowing for a subset of clients to be opted out of constrained delegation in any way, either S4U2Self or regular Kerberos authentication, by forcing all tickets for these clients to be non-forwardable. In AD this is implemented by a user attribute delegation_not_allowed (aka not-delegated), which translates to disallow-forwardable. However the Samba AD DC does not do that for S4U2Self and does set the forwardable flag even if the impersonated client has the not-delegated flag set.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade heimdalUpgrade samba | Mar 26, 2024 | Dec 10, 2019 |
| Debian | — | Upgrade sambaUpgrade heimdal | May 31, 2021 | Dec 10, 2019 |
| Freebsd | — | Upgrade samba48Upgrade samba411Upgrade FreeBSDUpgrade samba410 | Aug 31, 2023 | Dec 12, 2019 |
| Gentoo Linux | — | Upgrade net-fs/samba.Upgrade app-crypt/heimdal. | Mar 27, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-client-libsUpgrade samba-pythonUpgrade sambaUpgrade samba-libsUpgrade samba-winbindUpgrade libwbclientUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-common-libs | Nov 3, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade libwbclientUpgrade samba-client-libsUpgrade sambaUpgrade samba-winbindUpgrade samba-clientUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-pythonUpgrade samba-common | Sep 28, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade sambaUpgrade samba-libsUpgrade libwbclientUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-common-tools | Feb 24, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-winbind-clientsUpgrade python3-samba-testUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade samba-testUpgrade ctdb-testsUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade python2-samba-testUpgrade libsmbclientUpgrade ctdbUpgrade samba-winbindUpgrade samba-pidlUpgrade samba-test-libsUpgrade sambaUpgrade samba-common-libsUpgrade libwbclientUpgrade samba-libsUpgrade samba-krb5-printingUpgrade python3-sambaUpgrade samba-commonUpgrade samba-dc-libsUpgrade python2-samba | Jan 3, 2020 | Dec 10, 2019 |
| Samba | — | Upgrade to Samba 4.10.11 or later.Upgrade to Samba 4.9.17 or later.Upgrade to Samba 4.11.3 or later. | Dec 16, 2019 | Dec 10, 2019 |
| Suse | — | Upgrade libtevent-util0-32bitUpgrade libsamba-passdb0-32bitUpgrade libsamba-policy-python3-develUpgrade libsamba-passdb-develUpgrade libsmbclient0-32bitUpgrade libdcerpc0-32bitUpgrade libsmbclient-develUpgrade libsamba-credentials0Upgrade libsamba-policy0-32bitUpgrade samba-ad-dc-32bitUpgrade libsamba-credentials-develUpgrade libtevent-util0Upgrade libsamdb-develUpgrade samba-python3Upgrade samba-libs-python3-32bitUpgrade samba-core-develUpgrade libndr-krb5pac-develUpgrade libsamdb0-32bitUpgrade libsamba-passdb0Upgrade libwbclient-develUpgrade libdcerpc-samr-develUpgrade libwbclient0-32bitUpgrade libndr-krb5pac0Upgrade libdcerpc-binding0-32bitUpgrade libndr-nbt-develUpgrade libnetapi0-32bitUpgrade libsamba-util-develUpgrade samba-libsUpgrade samba-clientUpgrade libndr-standard0-32bitUpgrade libdcerpc0Upgrade ctdb-testsUpgrade libwbclient0Upgrade libndr-nbt0Upgrade libsamba-policy0-python3Upgrade samba-docUpgrade libsamba-policy0Upgrade ldb-toolsUpgrade libsamba-policy-develUpgrade samba-dsdb-modulesUpgrade libsamba-policy-python-develUpgrade libsamba-errors-develUpgrade libndr0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade python-ldb-develUpgrade libsmbconf0Upgrade libndr-nbt0-32bitUpgrade libndr-standard0Upgrade libsamba-hostconfig-develUpgrade libnetapi-develUpgrade samba-libs-pythonUpgrade libsmbconf0-32bitUpgrade libsamba-util0-32bitUpgrade sambaUpgrade samba-cephUpgrade libsamba-errors0Upgrade samba-winbind-32bitUpgrade samba-pythonUpgrade samba-client-32bitUpgrade samba-pidlUpgrade samba-libs-python3Upgrade libndr-krb5pac0-32bitUpgrade python-ldbUpgrade samba-libs-32bitUpgrade ctdbUpgrade libsmbclient0Upgrade libdcerpc-binding0Upgrade libsmbldap2Upgrade samba-testUpgrade ctdb-pcp-pmdaUpgrade libldb-develUpgrade samba-ad-dcUpgrade samba-libs-python-32bitUpgrade libsamba-util0Upgrade libndr-standard-develUpgrade libndr1-32bitUpgrade libdcerpc-develUpgrade libnetapi0Upgrade samba-winbindUpgrade libdcerpc-samr0-32bitUpgrade libdcerpc-samr0Upgrade libtevent-util-develUpgrade libsmbldap-develUpgrade libsamba-errors0-32bitUpgrade libsamba-policy0-python3-32bitUpgrade libndr0Upgrade libsamba-credentials0-32bitUpgrade libldb1Upgrade libndr-develUpgrade libsamba-hostconfig0Upgrade libsmbconf-develUpgrade libsmbldap2-32bitUpgrade libsamdb0Upgrade libndr1Upgrade libldb1-32bit | Dec 24, 2019 | Dec 10, 2019 |
| Ubuntu | — | Upgrade libsmbclient (Ubuntu Pro)Upgrade samba (Ubuntu Pro)Upgrade libsmbclientUpgrade samba | Dec 12, 2019 | Dec 10, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub