A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result could include total domain compromise.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ipa-server-dnsUpgrade ipa-server-trust-adUpgrade python3-kdcproxyUpgrade python3-ipalibUpgrade python3-pyusbUpgrade ipa-healthcheck-coreUpgrade python3-qrcodeUpgrade ipa-client-commonUpgrade slapi-nisUpgrade python3-jwcryptoUpgrade ipa-commonUpgrade python3-qrcode-coreUpgrade opendnssecUpgrade ipa-clientUpgrade ipa-client-sambaUpgrade python3-ipaserverUpgrade softhsm-develUpgrade custodiaUpgrade bind-dyndb-ldapUpgrade ipa-serverUpgrade ipa-server-commonUpgrade ipa-selinuxUpgrade python3-ipaclientUpgrade python3-yubicoUpgrade ipa-healthcheckUpgrade ipa-python-compatUpgrade ipa-client-epnUpgrade softhsmUpgrade python3-custodiaUpgrade python3-ipatests | May 4, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade ipa-serverUpgrade python2-ipaclientUpgrade ipa-clientUpgrade ipa-commonUpgrade ipa-python-compatUpgrade ipa-debuginfoUpgrade ipa-server-trust-adUpgrade python2-ipalibUpgrade ipa-client-commonUpgrade ipa-server-commonUpgrade python2-ipaserverUpgrade ipa-server-dns | Jul 21, 2023 | Feb 18, 2022 |
| Centos_linux | — | Upgrade slapi-nisUpgrade ipa-debugsourceUpgrade ipa-server-debuginfoUpgrade opendnssecUpgrade ipa-python-compatUpgrade slapi-nis-debugsourceUpgrade ipa-server-dnsUpgrade python3-qrcode-coreUpgrade softhsm-develUpgrade python3-kdcproxyUpgrade ipa-client-epnUpgrade ipa-serverUpgrade python3-custodiaUpgrade ipa-commonUpgrade python3-yubicoUpgrade opendnssec-debuginfoUpgrade python2-ipaclientUpgrade ipa-debuginfoUpgrade python2-ipalibUpgrade softhsmUpgrade ipa-clientUpgrade custodiaUpgrade ipa-selinuxUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-ipatestsUpgrade python3-ipalibUpgrade python3-ipaclientUpgrade python2-ipaserverUpgrade ipa-client-debuginfoUpgrade ipa-client-commonUpgrade opendnssec-debugsourceUpgrade python3-ipaserverUpgrade softhsm-debuginfoUpgrade python3-qrcodeUpgrade bind-dyndb-ldapUpgrade ipa-healthcheckUpgrade softhsm-debugsourceUpgrade python3-pyusbUpgrade ipa-server-trust-adUpgrade ipa-healthcheck-coreUpgrade python3-jwcryptoUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-server-commonUpgrade bind-dyndb-ldap-debugsourceUpgrade slapi-nis-debuginfoUpgrade ipa-client-samba | Dec 16, 2021 | Dec 15, 2021 |
| Debian | — | Upgrade samba | Nov 4, 2022 | Feb 18, 2022 |
| Freebsd | — | Upgrade samba413Upgrade samba414Upgrade samba415 | Nov 4, 2022 | Nov 10, 2021 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Feb 18, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade samba-commonUpgrade sambaUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-libs | Feb 28, 2022 | Feb 18, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-clientUpgrade sambaUpgrade samba-commonUpgrade samba-winbindUpgrade libwbclientUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade libsmbclient | Mar 3, 2022 | Feb 18, 2022 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.13.14-11.4.42.0.1.113.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.13.8-11.4.42.0.1.113.0 on Solaris 11.4 | Feb 17, 2022 | Feb 17, 2022 |
| Oracle_linux | — | Upgrade python3-kdcproxyUpgrade python2-ipaclientUpgrade python3-pyusbUpgrade ipa-client-commonUpgrade custodiaUpgrade softhsmUpgrade bind-dyndb-ldapUpgrade python3-ipalibUpgrade python3-custodiaUpgrade opendnssecUpgrade ipa-healthcheck-coreUpgrade ipa-python-compatUpgrade python3-qrcodeUpgrade python2-ipalibUpgrade ipa-server-commonUpgrade python3-qrcode-coreUpgrade ipa-server-dnsUpgrade softhsm-develUpgrade ipa-server-trust-adUpgrade python3-ipatestsUpgrade ipa-commonUpgrade slapi-nisUpgrade python3-ipaclientUpgrade python3-yubicoUpgrade python2-ipaserverUpgrade python3-jwcryptoUpgrade ipa-client-epnUpgrade python3-ipaserverUpgrade ipa-clientUpgrade ipa-selinuxUpgrade ipa-serverUpgrade ipa-client-sambaUpgrade ipa-healthcheck | Dec 17, 2021 | Nov 9, 2021 |
| Redhat_linux | — | Upgrade bind-dyndb-ldap-debuginfoUpgrade python3-qrcodeUpgrade ipa-server-trust-ad-debuginfoUpgrade python3-ipaserverUpgrade ipa-server-dnsUpgrade ipa-server-commonUpgrade custodiaUpgrade python3-ipaclientUpgrade ipa-client-epnUpgrade python3-jwcryptoUpgrade ipa-client-debuginfoUpgrade softhsm-debuginfoUpgrade ipa-client-sambaUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-selinuxUpgrade bind-dyndb-ldapUpgrade softhsmUpgrade python2-ipaclientUpgrade ipa-python-compatUpgrade ipa-commonUpgrade opendnssecUpgrade ipa-debugsourceUpgrade python3-custodiaUpgrade ipa-server-trust-adUpgrade ipa-clientUpgrade slapi-nis-debugsourceUpgrade ipa-client-commonUpgrade python3-ipalibUpgrade python3-ipatestsUpgrade python2-ipalibUpgrade ipa-serverUpgrade softhsm-develUpgrade ipa-debuginfoUpgrade ipa-healthcheck-coreUpgrade python3-yubicoUpgrade ipa-server-debuginfoUpgrade softhsm-debugsourceUpgrade python3-kdcproxyUpgrade opendnssec-debuginfoUpgrade ipa-idoverride-memberof-pluginUpgrade python3-qrcode-coreUpgrade ipa-healthcheckUpgrade slapi-nisUpgrade python3-pyusbUpgrade python2-ipaserverUpgrade slapi-nis-debuginfoUpgrade opendnssec-debugsource | Dec 16, 2021 | Dec 15, 2021 |
| Rocky_linux | — | Upgrade ipa-debugsourceUpgrade ipa-clientUpgrade ipa-client-debuginfoUpgrade opendnssecUpgrade opendnssec-debuginfoUpgrade ipa-server-debuginfoUpgrade softhsm-develUpgrade ipa-debuginfoUpgrade softhsm-debugsourceUpgrade ipa-serverUpgrade bind-dyndb-ldapUpgrade opendnssec-debugsourceUpgrade softhsmUpgrade ipa-server-trust-adUpgrade ipa-client-epnUpgrade bind-dyndb-ldap-debuginfoUpgrade slapi-nis-debugsourceUpgrade slapi-nisUpgrade ipa-client-sambaUpgrade bind-dyndb-ldap-debugsourceUpgrade slapi-nis-debuginfoUpgrade softhsm-debuginfoUpgrade ipa-server-trust-ad-debuginfo | Mar 12, 2024 | Feb 18, 2022 |
| Samba | — | Upgrade to Samba 4.15.2 or later.Upgrade to Samba 4.13.14 or later.Upgrade to Samba 4.14.10 or later. | Mar 10, 2022 | Feb 18, 2022 |
| Suse | — | Upgrade libdcerpc0-32bitUpgrade libsamba-hostconfig0Upgrade libndr-krb5pac0-32bitUpgrade libsamba-passdb-develUpgrade libsamba-policy0-python3-64bitUpgrade sambaUpgrade libnetapi0-64bitUpgrade libsmbldap2-32bitUpgrade libdcerpc-samr0-32bitUpgrade libdcerpc-samr0-64bitUpgrade samba-client-32bitUpgrade samba-client-64bitUpgrade python3-ldb-32bitUpgrade libsmbclient0-32bitUpgrade libdcerpc0-64bitUpgrade libsamba-util-develUpgrade samba-ad-dc-64bitUpgrade libwbclient0-64bitUpgrade samba-cephUpgrade libsamba-util0-32bitUpgrade libndr-krb5pac0-64bitUpgrade libndr1Upgrade libsamba-util0-64bitUpgrade libsamdb0-32bitUpgrade libdcerpc-samr0Upgrade libdcerpc-binding0-64bitUpgrade libldb2Upgrade libtevent-util0Upgrade libsamba-policy0-python3Upgrade libsmbclient0Upgrade libsamba-errors0-32bitUpgrade libsmbconf0-32bitUpgrade libtevent-util0-64bitUpgrade libsmbclient-develUpgrade libndr-nbt0Upgrade samba-winbind-64bitUpgrade libsamba-credentials0-32bitUpgrade libsmbconf0-64bitUpgrade libsamba-policy0-python3-32bitUpgrade libnetapi0Upgrade libsamba-policy-python3-develUpgrade samba-clientUpgrade libnetapi-develUpgrade ldb-toolsUpgrade libndr-nbt0-64bitUpgrade libsamdb-develUpgrade libsmbconf-develUpgrade libdcerpc-develUpgrade ctdbUpgrade libndr-standard0-64bitUpgrade libsmbldap2Upgrade libndr-standard0Upgrade libsamba-credentials0Upgrade libsamba-errors-develUpgrade samba-ad-dc-32bitUpgrade samba-libs-32bitUpgrade libsmbldap2-64bitUpgrade samba-libsUpgrade libsamba-util0Upgrade samba-testUpgrade libsmbconf0Upgrade libtevent-util-develUpgrade libwbclient0Upgrade libndr-standard-develUpgrade samba-ad-dcUpgrade libndr-develUpgrade samba-libs-64bitUpgrade samba-dsdb-modulesUpgrade samba-libs-python3-64bitUpgrade libndr-nbt-develUpgrade libwbclient-develUpgrade libdcerpc-binding0-32bitUpgrade libsmbldap-develUpgrade libldb2-32bitUpgrade samba-docUpgrade samba-python3Upgrade libsamdb0-64bitUpgrade libdcerpc-binding0Upgrade samba-gpupdateUpgrade libwbclient0-32bitUpgrade ctdb-pcp-pmdaUpgrade libnetapi0-32bitUpgrade libndr1-64bitUpgrade libtevent-util0-32bitUpgrade ctdb-testsUpgrade samba-ldb-ldapUpgrade libsamba-errors0Upgrade libsamba-hostconfig-develUpgrade samba-winbind-32bitUpgrade libndr1-32bitUpgrade libndr-krb5pac0Upgrade python3-ldb-develUpgrade libsamba-errors0-64bitUpgrade samba-core-develUpgrade libsamba-passdb0Upgrade libsmbclient0-64bitUpgrade libsamba-passdb0-32bitUpgrade samba-winbindUpgrade libsamba-hostconfig0-32bitUpgrade libdcerpc0Upgrade samba-libs-python3Upgrade python3-ldbUpgrade libnetapi-devel-32bitUpgrade libldb-develUpgrade libsamba-hostconfig0-64bitUpgrade libsamba-passdb0-64bitUpgrade libnetapi-devel-64bitUpgrade libsamba-credentials-develUpgrade libndr-krb5pac-develUpgrade libsamdb0Upgrade libndr-nbt0-32bitUpgrade libsamba-credentials0-64bitUpgrade libdcerpc-samr-develUpgrade samba-libs-python3-32bitUpgrade libndr-standard0-32bitUpgrade libsamba-policy-devel | Nov 11, 2021 | Nov 10, 2021 |
| Ubuntu | — | Upgrade samba | Nov 12, 2021 | Nov 10, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub