A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result could include total domain compromise.
CVSS Details
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-ipaclientUpgrade ipa-commonUpgrade python3-ipaserverUpgrade bind-dyndb-ldapUpgrade python3-custodiaUpgrade ipa-client-sambaUpgrade ipa-selinuxUpgrade custodiaUpgrade ipa-clientUpgrade python3-yubicoUpgrade python3-ipatestsUpgrade python3-jwcryptoUpgrade ipa-server-commonUpgrade ipa-client-epnUpgrade ipa-serverUpgrade ipa-healthcheckUpgrade opendnssecUpgrade softhsm-develUpgrade ipa-python-compatUpgrade python3-qrcode-coreUpgrade softhsmUpgrade python3-ipalibUpgrade ipa-server-trust-adUpgrade python3-pyusbUpgrade slapi-nisUpgrade ipa-client-commonUpgrade ipa-healthcheck-coreUpgrade ipa-server-dnsUpgrade python3-qrcodeUpgrade python3-kdcproxy | May 4, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python2-ipaclientUpgrade python2-ipalibUpgrade ipa-client-commonUpgrade ipa-python-compatUpgrade ipa-commonUpgrade ipa-server-trust-adUpgrade ipa-serverUpgrade ipa-debuginfoUpgrade ipa-clientUpgrade ipa-server-commonUpgrade python2-ipaserverUpgrade ipa-server-dns | Jul 21, 2023 | Feb 18, 2022 |
| Centos_linux | — | Upgrade python3-jwcryptoUpgrade bind-dyndb-ldapUpgrade ipa-selinuxUpgrade ipa-client-sambaUpgrade ipa-server-trust-ad-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-healthcheck-coreUpgrade ipa-server-trust-adUpgrade slapi-nis-debuginfoUpgrade python3-ipaserverUpgrade python3-qrcodeUpgrade softhsm-debuginfoUpgrade ipa-server-commonUpgrade python3-ipaclientUpgrade python3-ipalibUpgrade python2-ipaserverUpgrade python3-ipatestsUpgrade ipa-client-commonUpgrade ipa-client-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade custodiaUpgrade opendnssec-debugsourceUpgrade ipa-healthcheckUpgrade softhsm-debugsourceUpgrade python3-pyusbUpgrade ipa-serverUpgrade ipa-commonUpgrade softhsm-develUpgrade ipa-server-dnsUpgrade ipa-debuginfoUpgrade softhsmUpgrade python2-ipalibUpgrade python2-ipaclientUpgrade python3-yubicoUpgrade opendnssec-debuginfoUpgrade python3-custodiaUpgrade ipa-clientUpgrade ipa-debugsourceUpgrade slapi-nis-debugsourceUpgrade ipa-server-debuginfoUpgrade python3-kdcproxyUpgrade opendnssecUpgrade ipa-python-compatUpgrade ipa-client-epnUpgrade slapi-nisUpgrade python3-qrcode-core | Dec 16, 2021 | Dec 15, 2021 |
| Debian | — | Upgrade samba | Nov 4, 2022 | Feb 18, 2022 |
| Freebsd | — | Upgrade samba413Upgrade samba414Upgrade samba415 | Nov 4, 2022 | Nov 10, 2021 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Feb 18, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libwbclientUpgrade samba-libsUpgrade libsmbclientUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-common | Feb 28, 2022 | Feb 18, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsmbclientUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade libwbclientUpgrade sambaUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-winbind | Mar 3, 2022 | Feb 18, 2022 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.13.8-11.4.42.0.1.113.0 on Solaris 11.4Upgrade service/network/samba to version 4.13.14-11.4.42.0.1.113.0 on Solaris 11.4 | Feb 17, 2022 | Feb 17, 2022 |
| Oracle_linux | — | Upgrade ipa-client-commonUpgrade python3-kdcproxyUpgrade softhsm-develUpgrade ipa-server-dnsUpgrade python2-ipaclientUpgrade python3-qrcode-coreUpgrade python3-pyusbUpgrade ipa-server-trust-adUpgrade softhsmUpgrade custodiaUpgrade bind-dyndb-ldapUpgrade python3-qrcodeUpgrade ipa-server-commonUpgrade python2-ipalibUpgrade opendnssecUpgrade python3-custodiaUpgrade ipa-healthcheck-coreUpgrade python3-ipalibUpgrade ipa-python-compatUpgrade python3-ipaclientUpgrade ipa-serverUpgrade python3-ipaserverUpgrade ipa-selinuxUpgrade ipa-clientUpgrade ipa-commonUpgrade python3-ipatestsUpgrade ipa-healthcheckUpgrade python3-yubicoUpgrade python3-jwcryptoUpgrade ipa-client-epnUpgrade slapi-nisUpgrade ipa-client-sambaUpgrade python2-ipaserver | Dec 17, 2021 | Nov 9, 2021 |
| Redhat_linux | — | Upgrade ipa-client-commonUpgrade slapi-nis-debuginfoUpgrade python3-ipatestsUpgrade ipa-python-compatUpgrade ipa-commonUpgrade ipa-debuginfoUpgrade ipa-server-trust-adUpgrade softhsm-develUpgrade slapi-nis-debugsourceUpgrade python3-kdcproxyUpgrade ipa-serverUpgrade python3-ipalibUpgrade softhsm-debugsourceUpgrade ipa-idoverride-memberof-pluginUpgrade python3-custodiaUpgrade python3-pyusbUpgrade python2-ipaclientUpgrade python3-yubicoUpgrade ipa-healthcheck-coreUpgrade ipa-server-debuginfoUpgrade slapi-nisUpgrade ipa-debugsourceUpgrade opendnssec-debuginfoUpgrade opendnssec-debugsourceUpgrade ipa-healthcheckUpgrade python2-ipaserverUpgrade softhsmUpgrade opendnssecUpgrade ipa-clientUpgrade python2-ipalibUpgrade python3-qrcode-coreUpgrade bind-dyndb-ldapUpgrade softhsm-debuginfoUpgrade ipa-client-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-client-sambaUpgrade python3-ipaserverUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-server-dnsUpgrade python3-ipaclientUpgrade ipa-selinuxUpgrade ipa-server-trust-ad-debuginfoUpgrade custodiaUpgrade python3-jwcryptoUpgrade python3-qrcodeUpgrade ipa-client-epnUpgrade ipa-server-common | Dec 16, 2021 | Dec 15, 2021 |
| Rocky_linux | — | Upgrade ipa-debugsourceUpgrade softhsm-develUpgrade ipa-client-debuginfoUpgrade opendnssec-debugsourceUpgrade bind-dyndb-ldapUpgrade ipa-clientUpgrade ipa-server-trust-adUpgrade softhsm-debugsourceUpgrade opendnssecUpgrade opendnssec-debuginfoUpgrade ipa-server-debuginfoUpgrade ipa-serverUpgrade softhsmUpgrade ipa-debuginfoUpgrade ipa-client-sambaUpgrade slapi-nis-debugsourceUpgrade slapi-nis-debuginfoUpgrade slapi-nisUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-client-epnUpgrade bind-dyndb-ldap-debugsourceUpgrade softhsm-debuginfo | Mar 12, 2024 | Feb 18, 2022 |
| Samba | — | Upgrade to Samba 4.15.2 or later.Upgrade to Samba 4.13.14 or later.Upgrade to Samba 4.14.10 or later. | Mar 10, 2022 | Feb 18, 2022 |
| Suse | — | Upgrade libndr-standard-develUpgrade libsmbconf0-64bitUpgrade libndr-standard0-64bitUpgrade libsamba-credentials0-32bitUpgrade samba-client-32bitUpgrade libnetapi0-64bitUpgrade libsamba-policy0-python3-64bitUpgrade samba-libs-32bitUpgrade libsamba-policy0-python3-32bitUpgrade libdcerpc-samr0-32bitUpgrade libdcerpc-samr0-64bitUpgrade samba-clientUpgrade sambaUpgrade samba-libsUpgrade libsmbldap2-32bitUpgrade libsmbldap2-64bitUpgrade libsmbldap2Upgrade libndr-standard0Upgrade libsamba-errors-develUpgrade libdcerpc-binding0-64bitUpgrade libndr1Upgrade libsamba-util-develUpgrade libndr-krb5pac0-64bitUpgrade libtevent-util0Upgrade libdcerpc-develUpgrade samba-client-64bitUpgrade libsmbconf-develUpgrade libsamba-passdb-develUpgrade libsamba-util0Upgrade libsamba-hostconfig0Upgrade libdcerpc-samr0Upgrade libdcerpc0-32bitUpgrade ldb-toolsUpgrade libndr-nbt0-64bitUpgrade samba-ad-dc-32bitUpgrade libwbclient0Upgrade libsmbclient0-32bitUpgrade libdcerpc0-64bitUpgrade libldb2Upgrade samba-testUpgrade python3-ldb-32bitUpgrade libnetapi-develUpgrade libsamba-util0-32bitUpgrade samba-ad-dc-64bitUpgrade libwbclient0-64bitUpgrade libsamdb0-32bitUpgrade libsmbconf0-32bitUpgrade samba-winbind-64bitUpgrade samba-cephUpgrade ctdbUpgrade libsamba-errors0-32bitUpgrade libtevent-util0-64bitUpgrade libndr-nbt0Upgrade libsamba-policy0-python3Upgrade libsmbconf0Upgrade libsamba-policy-python3-develUpgrade libsmbclient-develUpgrade libsmbclient0Upgrade libtevent-util-develUpgrade libsamba-util0-64bitUpgrade libnetapi0Upgrade libndr-krb5pac0-32bitUpgrade libsamdb-develUpgrade libsamba-credentials0Upgrade libsamba-policy-develUpgrade libnetapi-devel-64bitUpgrade libsmbldap-develUpgrade libsamdb0Upgrade samba-python3Upgrade libsamdb0-64bitUpgrade samba-docUpgrade libdcerpc-binding0Upgrade samba-gpupdateUpgrade libndr-standard0-32bitUpgrade libdcerpc-samr-develUpgrade samba-libs-python3-32bitUpgrade libndr-nbt0-32bitUpgrade libndr-nbt-develUpgrade samba-core-develUpgrade samba-winbind-32bitUpgrade libwbclient-develUpgrade libdcerpc0Upgrade libdcerpc-binding0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-passdb0-64bitUpgrade samba-libs-python3-64bitUpgrade libndr-krb5pac0Upgrade libldb-develUpgrade libndr1-64bitUpgrade libnetapi0-32bitUpgrade ctdb-pcp-pmdaUpgrade libsamba-hostconfig0-64bitUpgrade samba-libs-64bitUpgrade libnetapi-devel-32bitUpgrade python3-ldbUpgrade samba-libs-python3Upgrade ctdb-testsUpgrade libsamba-hostconfig-develUpgrade libtevent-util0-32bitUpgrade libwbclient0-32bitUpgrade samba-ad-dcUpgrade libsamba-errors0Upgrade samba-ldb-ldapUpgrade samba-dsdb-modulesUpgrade libndr-develUpgrade libsmbclient0-64bitUpgrade libndr-krb5pac-develUpgrade libndr1-32bitUpgrade libsamba-passdb0-32bitUpgrade samba-winbindUpgrade libsamba-passdb0Upgrade libsamba-errors0-64bitUpgrade python3-ldb-develUpgrade libsamba-credentials0-64bitUpgrade libsamba-credentials-develUpgrade libldb2-32bit | Nov 11, 2021 | Nov 10, 2021 |
| Ubuntu | — | Upgrade samba | Nov 12, 2021 | Nov 10, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub