A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result could include total domain compromise.
CVSS Details
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ipa-server-commonUpgrade ipa-python-compatUpgrade python3-jwcryptoUpgrade ipa-clientUpgrade ipa-healthcheckUpgrade python3-qrcode-coreUpgrade bind-dyndb-ldapUpgrade ipa-selinuxUpgrade softhsmUpgrade custodiaUpgrade python3-ipaserverUpgrade ipa-commonUpgrade python3-ipatestsUpgrade opendnssecUpgrade ipa-serverUpgrade ipa-client-epnUpgrade softhsm-develUpgrade ipa-client-sambaUpgrade python3-custodiaUpgrade python3-yubicoUpgrade python3-ipaclientUpgrade ipa-server-trust-adUpgrade python3-ipalibUpgrade python3-qrcodeUpgrade slapi-nisUpgrade ipa-healthcheck-coreUpgrade python3-pyusbUpgrade python3-kdcproxyUpgrade ipa-client-commonUpgrade ipa-server-dns | May 4, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade ipa-server-trust-adUpgrade ipa-clientUpgrade python2-ipaclientUpgrade ipa-python-compatUpgrade ipa-serverUpgrade python2-ipalibUpgrade ipa-debuginfoUpgrade ipa-client-commonUpgrade ipa-commonUpgrade ipa-server-dnsUpgrade ipa-server-commonUpgrade python2-ipaserver | Jul 21, 2023 | Feb 18, 2022 |
| Centos_linux | — | Upgrade softhsmUpgrade ipa-clientUpgrade slapi-nisUpgrade python3-custodiaUpgrade python2-ipaclientUpgrade ipa-client-epnUpgrade python2-ipalibUpgrade opendnssec-debuginfoUpgrade ipa-commonUpgrade python3-qrcode-coreUpgrade ipa-python-compatUpgrade opendnssecUpgrade python3-yubicoUpgrade ipa-server-dnsUpgrade softhsm-develUpgrade slapi-nis-debugsourceUpgrade ipa-debugsourceUpgrade python3-kdcproxyUpgrade ipa-debuginfoUpgrade ipa-server-debuginfoUpgrade ipa-serverUpgrade python3-ipatestsUpgrade python3-ipalibUpgrade python3-ipaclientUpgrade python2-ipaserverUpgrade opendnssec-debugsourceUpgrade ipa-client-commonUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-server-trust-adUpgrade ipa-healthcheck-coreUpgrade python3-jwcryptoUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-server-commonUpgrade slapi-nis-debuginfoUpgrade ipa-selinuxUpgrade bind-dyndb-ldapUpgrade ipa-healthcheckUpgrade softhsm-debugsourceUpgrade ipa-client-sambaUpgrade custodiaUpgrade python3-pyusbUpgrade softhsm-debuginfoUpgrade python3-qrcodeUpgrade python3-ipaserverUpgrade ipa-client-debuginfo | Dec 16, 2021 | Dec 15, 2021 |
| Debian | — | Upgrade samba | Nov 4, 2022 | Feb 18, 2022 |
| Freebsd | — | Upgrade samba415Upgrade samba414Upgrade samba413 | Nov 4, 2022 | Nov 10, 2021 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Feb 18, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade samba-libsUpgrade libwbclientUpgrade libsmbclientUpgrade sambaUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-clientUpgrade samba-winbind-clients | Feb 28, 2022 | Feb 18, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade sambaUpgrade samba-commonUpgrade libwbclientUpgrade samba-winbind | Mar 3, 2022 | Feb 18, 2022 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.13.8-11.4.42.0.1.113.0 on Solaris 11.4Upgrade service/network/samba to version 4.13.14-11.4.42.0.1.113.0 on Solaris 11.4 | Feb 17, 2022 | Feb 17, 2022 |
| Oracle_linux | — | Upgrade ipa-selinuxUpgrade ipa-clientUpgrade ipa-serverUpgrade ipa-commonUpgrade python3-yubicoUpgrade slapi-nisUpgrade ipa-client-epnUpgrade python3-ipaclientUpgrade python3-ipatestsUpgrade python2-ipaserverUpgrade ipa-healthcheckUpgrade ipa-client-sambaUpgrade python3-ipaserverUpgrade python3-jwcryptoUpgrade python3-qrcode-coreUpgrade ipa-client-commonUpgrade ipa-server-commonUpgrade python3-kdcproxyUpgrade ipa-server-dnsUpgrade ipa-python-compatUpgrade python2-ipalibUpgrade python3-pyusbUpgrade python3-custodiaUpgrade python3-ipalibUpgrade opendnssecUpgrade python3-qrcodeUpgrade ipa-healthcheck-coreUpgrade softhsmUpgrade python2-ipaclientUpgrade custodiaUpgrade bind-dyndb-ldapUpgrade ipa-server-trust-adUpgrade softhsm-devel | Dec 17, 2021 | Nov 9, 2021 |
| Redhat_linux | — | Upgrade python3-ipaserverUpgrade ipa-server-commonUpgrade ipa-client-epnUpgrade ipa-client-debuginfoUpgrade bind-dyndb-ldapUpgrade python3-ipaclientUpgrade bind-dyndb-ldap-debugsourceUpgrade custodiaUpgrade ipa-server-trust-ad-debuginfoUpgrade python3-qrcodeUpgrade bind-dyndb-ldap-debuginfoUpgrade softhsm-debuginfoUpgrade python3-jwcryptoUpgrade ipa-server-dnsUpgrade ipa-selinuxUpgrade ipa-client-sambaUpgrade ipa-debugsourceUpgrade slapi-nisUpgrade ipa-healthcheckUpgrade ipa-clientUpgrade python3-ipalibUpgrade python3-ipatestsUpgrade softhsm-debugsourceUpgrade python3-kdcproxyUpgrade ipa-healthcheck-coreUpgrade python3-yubicoUpgrade ipa-client-commonUpgrade ipa-python-compatUpgrade softhsmUpgrade ipa-server-debuginfoUpgrade opendnssec-debuginfoUpgrade python3-custodiaUpgrade softhsm-develUpgrade ipa-serverUpgrade ipa-debuginfoUpgrade python2-ipalibUpgrade opendnssecUpgrade opendnssec-debugsourceUpgrade ipa-commonUpgrade python3-pyusbUpgrade ipa-server-trust-adUpgrade python3-qrcode-coreUpgrade python2-ipaserverUpgrade slapi-nis-debugsourceUpgrade python2-ipaclientUpgrade ipa-idoverride-memberof-pluginUpgrade slapi-nis-debuginfo | Dec 16, 2021 | Dec 15, 2021 |
| Rocky_linux | — | Upgrade ipa-client-sambaUpgrade bind-dyndb-ldap-debugsourceUpgrade slapi-nis-debuginfoUpgrade softhsm-debuginfoUpgrade slapi-nis-debugsourceUpgrade slapi-nisUpgrade ipa-client-epnUpgrade ipa-server-trust-ad-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade softhsm-debugsourceUpgrade ipa-server-debuginfoUpgrade ipa-server-trust-adUpgrade softhsm-develUpgrade ipa-debuginfoUpgrade ipa-client-debuginfoUpgrade opendnssecUpgrade ipa-debugsourceUpgrade opendnssec-debuginfoUpgrade opendnssec-debugsourceUpgrade ipa-clientUpgrade bind-dyndb-ldapUpgrade softhsmUpgrade ipa-server | Mar 12, 2024 | Feb 18, 2022 |
| Samba | — | Upgrade to Samba 4.14.10 or later.Upgrade to Samba 4.13.14 or later.Upgrade to Samba 4.15.2 or later. | Mar 10, 2022 | Feb 18, 2022 |
| Suse | — | Upgrade libsmbconf-develUpgrade libsmbldap2Upgrade libsamba-errors-develUpgrade libsmbldap2-64bitUpgrade libndr-standard0Upgrade libldb2Upgrade ldb-toolsUpgrade libdcerpc-binding0-64bitUpgrade libndr-krb5pac0-64bitUpgrade libdcerpc-develUpgrade ctdbUpgrade libtevent-util0Upgrade libndr1Upgrade libndr-nbt0Upgrade libndr-standard0-64bitUpgrade samba-client-32bitUpgrade libdcerpc-samr0-64bitUpgrade libsamba-credentials0-32bitUpgrade libndr-nbt0-64bitUpgrade libsamba-policy0-python3-64bitUpgrade libsamba-hostconfig0Upgrade libndr-standard-develUpgrade samba-libsUpgrade libsmbconf0-64bitUpgrade libsamba-errors0-32bitUpgrade libsmbconf0-32bitUpgrade libsamba-util0Upgrade libnetapi0-64bitUpgrade python3-ldb-32bitUpgrade libdcerpc-samr0-32bitUpgrade libsamba-passdb-develUpgrade libsamdb-develUpgrade libdcerpc-samr0Upgrade samba-winbind-64bitUpgrade libsmbclient-develUpgrade libsamba-policy-python3-develUpgrade sambaUpgrade samba-client-64bitUpgrade libsamba-policy0-python3Upgrade libtevent-util0-64bitUpgrade samba-testUpgrade libsmbclient0Upgrade libtevent-util-develUpgrade libwbclient0-64bitUpgrade libnetapi-develUpgrade samba-ad-dc-64bitUpgrade libnetapi0Upgrade libsamba-credentials0Upgrade libdcerpc0-32bitUpgrade libsamdb0-32bitUpgrade libsamba-util0-64bitUpgrade libwbclient0Upgrade samba-cephUpgrade samba-libs-32bitUpgrade samba-ad-dc-32bitUpgrade libdcerpc0-64bitUpgrade libsamba-util0-32bitUpgrade libsamba-policy0-python3-32bitUpgrade libsamba-util-develUpgrade libsmbclient0-32bitUpgrade libsmbconf0Upgrade libsmbldap2-32bitUpgrade libndr-krb5pac0-32bitUpgrade samba-clientUpgrade samba-libs-python3-64bitUpgrade libdcerpc-binding0Upgrade libsamdb0Upgrade libtevent-util0-32bitUpgrade libldb2-32bitUpgrade libnetapi0-32bitUpgrade libsamba-policy-develUpgrade libwbclient0-32bitUpgrade samba-ldb-ldapUpgrade samba-docUpgrade samba-python3Upgrade samba-ad-dcUpgrade samba-libs-64bitUpgrade libdcerpc-samr-develUpgrade samba-libs-python3-32bitUpgrade libndr-standard0-32bitUpgrade samba-core-develUpgrade libdcerpc0Upgrade libsamba-credentials0-64bitUpgrade libsamba-errors0-64bitUpgrade libndr1-32bitUpgrade libndr-krb5pac0Upgrade libndr-nbt0-32bitUpgrade libndr-krb5pac-develUpgrade samba-winbindUpgrade libsmbclient0-64bitUpgrade libsamba-passdb0-32bitUpgrade libsamba-passdb0Upgrade libnetapi-devel-32bitUpgrade libsamba-hostconfig0-64bitUpgrade python3-ldbUpgrade libnetapi-devel-64bitUpgrade libsamdb0-64bitUpgrade samba-libs-python3Upgrade samba-winbind-32bitUpgrade libdcerpc-binding0-32bitUpgrade libldb-develUpgrade libsamba-hostconfig0-32bitUpgrade libndr-nbt-develUpgrade python3-ldb-develUpgrade samba-gpupdateUpgrade libwbclient-develUpgrade libndr1-64bitUpgrade ctdb-testsUpgrade libsamba-passdb0-64bitUpgrade libsmbldap-develUpgrade ctdb-pcp-pmdaUpgrade libsamba-errors0Upgrade libsamba-credentials-develUpgrade libndr-develUpgrade libsamba-hostconfig-develUpgrade samba-dsdb-modules | Nov 11, 2021 | Nov 10, 2021 |
| Ubuntu | — | Upgrade samba | Nov 12, 2021 | Nov 10, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub