All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the S4U (MS-SFU) Kerberos delegation model includes a feature allowing for a subset of clients to be opted out of constrained delegation in any way, either S4U2Self or regular Kerberos authentication, by forcing all tickets for these clients to be non-forwardable. In AD this is implemented by a user attribute delegation_not_allowed (aka not-delegated), which translates to disallow-forwardable. However the Samba AD DC does not do that for S4U2Self and does set the forwardable flag even if the impersonated client has the not-delegated flag set.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade heimdalUpgrade samba | Mar 26, 2024 | Dec 10, 2019 |
| Debian | — | Upgrade heimdalUpgrade samba | May 31, 2021 | Dec 10, 2019 |
| Freebsd | — | Upgrade FreeBSDUpgrade samba410Upgrade samba411Upgrade samba48 | Aug 31, 2023 | Dec 12, 2019 |
| Gentoo Linux | — | Upgrade net-fs/samba.Upgrade app-crypt/heimdal. | Mar 27, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-winbindUpgrade samba-client-libsUpgrade samba-libsUpgrade libsmbclientUpgrade sambaUpgrade samba-pythonUpgrade libwbclientUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-common-libs | Nov 3, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-clientUpgrade sambaUpgrade samba-libsUpgrade samba-commonUpgrade samba-client-libsUpgrade samba-python | Sep 28, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsmbclientUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-pythonUpgrade samba-common-toolsUpgrade sambaUpgrade libwbclientUpgrade samba-libsUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-winbind | Feb 24, 2020 | Dec 10, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade python3-samba-testUpgrade samba-common-toolsUpgrade python2-samba-testUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade ctdb-testsUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-testUpgrade samba-krb5-printingUpgrade sambaUpgrade samba-common-libsUpgrade samba-dc-libsUpgrade python3-sambaUpgrade samba-commonUpgrade libwbclientUpgrade samba-libsUpgrade samba-pidlUpgrade ctdbUpgrade python2-sambaUpgrade samba-winbindUpgrade samba-test-libs | Jan 3, 2020 | Dec 10, 2019 |
| Samba | — | Upgrade to Samba 4.10.11 or later.Upgrade to Samba 4.9.17 or later.Upgrade to Samba 4.11.3 or later. | Dec 16, 2019 | Dec 10, 2019 |
| Suse | — | Upgrade libsamba-policy0Upgrade libndr-standard0-32bitUpgrade libsmbclient0-32bitUpgrade libsamba-credentials0Upgrade libsamba-policy0-python3Upgrade libndr-krb5pac0Upgrade libsamba-util-develUpgrade samba-docUpgrade libndr-nbt0Upgrade libdcerpc-samr-develUpgrade libwbclient-develUpgrade libsamba-passdb0Upgrade samba-core-develUpgrade libndr-krb5pac-develUpgrade samba-libs-python3-32bitUpgrade samba-ad-dc-32bitUpgrade libsamba-credentials-develUpgrade libnetapi0-32bitUpgrade libndr-nbt-develUpgrade samba-python3Upgrade libdcerpc0Upgrade libsamdb-develUpgrade libtevent-util0-32bitUpgrade libsamba-policy-python3-develUpgrade libtevent-util0Upgrade samba-libsUpgrade libsamba-passdb0-32bitUpgrade samba-clientUpgrade libsamba-policy-develUpgrade libsamba-passdb-develUpgrade libsmbclient-develUpgrade libsamba-policy0-32bitUpgrade ctdb-testsUpgrade libwbclient0Upgrade samba-dsdb-modulesUpgrade libwbclient0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libsamdb0-32bitUpgrade ldb-toolsUpgrade libdcerpc0-32bitUpgrade libsamba-util0-32bitUpgrade libsamdb0Upgrade libndr-standard-develUpgrade libnetapi0Upgrade python-ldb-develUpgrade libsmbconf0Upgrade libndr0-32bitUpgrade samba-client-32bitUpgrade libsamba-errors0-32bitUpgrade libndr0Upgrade samba-cephUpgrade libnetapi-develUpgrade libsamba-errors0Upgrade ctdb-pcp-pmdaUpgrade libndr1-32bitUpgrade libsmbldap2Upgrade libsamba-util0Upgrade libsamba-policy-python-develUpgrade samba-testUpgrade libsmbconf0-32bitUpgrade samba-pythonUpgrade samba-winbind-32bitUpgrade libldb-develUpgrade ctdbUpgrade libsamba-credentials0-32bitUpgrade libtevent-util-develUpgrade libdcerpc-binding0Upgrade libndr-krb5pac0-32bitUpgrade samba-libs-32bitUpgrade samba-ad-dcUpgrade libldb1Upgrade libsmbclient0Upgrade samba-pidlUpgrade libsamba-hostconfig0Upgrade samba-libs-python3Upgrade libndr-develUpgrade python-ldbUpgrade libsamba-policy0-python3-32bitUpgrade samba-libs-python-32bitUpgrade samba-libs-pythonUpgrade libldb1-32bitUpgrade libsmbldap-develUpgrade libsmbldap2-32bitUpgrade libsmbconf-develUpgrade samba-winbindUpgrade libdcerpc-samr0Upgrade libdcerpc-develUpgrade libdcerpc-samr0-32bitUpgrade libndr-nbt0-32bitUpgrade libndr1Upgrade libsamba-errors-develUpgrade sambaUpgrade libndr-standard0Upgrade libsamba-hostconfig-develUpgrade libsamba-hostconfig0-32bit | Dec 24, 2019 | Dec 10, 2019 |
| Ubuntu | — | Upgrade libsmbclientUpgrade sambaUpgrade libsmbclient (Ubuntu Pro)Upgrade samba (Ubuntu Pro) | Dec 12, 2019 | Dec 10, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub