A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result could include total domain compromise.
CVSS Details
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind-dyndb-ldapUpgrade ipa-python-compatUpgrade ipa-serverUpgrade ipa-client-sambaUpgrade opendnssecUpgrade ipa-healthcheckUpgrade softhsmUpgrade python3-jwcryptoUpgrade ipa-clientUpgrade python3-ipaserverUpgrade custodiaUpgrade python3-yubicoUpgrade python3-ipaclientUpgrade python3-ipatestsUpgrade ipa-commonUpgrade ipa-server-commonUpgrade python3-qrcode-coreUpgrade python3-custodiaUpgrade ipa-selinuxUpgrade softhsm-develUpgrade ipa-client-epnUpgrade ipa-client-commonUpgrade ipa-server-dnsUpgrade python3-ipalibUpgrade ipa-server-trust-adUpgrade slapi-nisUpgrade ipa-healthcheck-coreUpgrade python3-qrcodeUpgrade python3-kdcproxyUpgrade python3-pyusb | May 4, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade ipa-commonUpgrade ipa-debuginfoUpgrade ipa-clientUpgrade ipa-client-commonUpgrade python2-ipalibUpgrade ipa-server-trust-adUpgrade python2-ipaclientUpgrade ipa-server-dnsUpgrade python2-ipaserverUpgrade ipa-server-commonUpgrade ipa-python-compatUpgrade ipa-server | Jul 21, 2023 | Feb 18, 2022 |
| Centos_linux | — | Upgrade custodiaUpgrade ipa-client-sambaUpgrade python3-pyusbUpgrade ipa-client-commonUpgrade python2-ipaserverUpgrade python3-ipalibUpgrade ipa-healthcheckUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-server-trust-adUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-server-commonUpgrade ipa-server-trust-ad-debuginfoUpgrade opendnssec-debugsourceUpgrade softhsm-debugsourceUpgrade slapi-nis-debuginfoUpgrade python3-jwcryptoUpgrade softhsm-debuginfoUpgrade python3-ipaserverUpgrade python3-qrcodeUpgrade ipa-client-debuginfoUpgrade python3-ipaclientUpgrade ipa-healthcheck-coreUpgrade python3-ipatestsUpgrade ipa-selinuxUpgrade bind-dyndb-ldapUpgrade slapi-nisUpgrade ipa-debuginfoUpgrade ipa-server-dnsUpgrade softhsm-develUpgrade ipa-clientUpgrade ipa-serverUpgrade ipa-debugsourceUpgrade slapi-nis-debugsourceUpgrade ipa-server-debuginfoUpgrade python3-kdcproxyUpgrade python3-custodiaUpgrade opendnssecUpgrade ipa-python-compatUpgrade ipa-client-epnUpgrade python3-qrcode-coreUpgrade ipa-commonUpgrade softhsmUpgrade python2-ipalibUpgrade python2-ipaclientUpgrade opendnssec-debuginfoUpgrade python3-yubico | Dec 16, 2021 | Dec 15, 2021 |
| Debian | — | Upgrade samba | Nov 4, 2022 | Feb 18, 2022 |
| Freebsd | — | Upgrade samba414Upgrade samba413Upgrade samba415 | Nov 4, 2022 | Nov 10, 2021 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Feb 18, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libwbclientUpgrade samba-libsUpgrade samba-clientUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-common | Feb 28, 2022 | Feb 18, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsmbclientUpgrade samba-clientUpgrade samba-winbindUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade sambaUpgrade libwbclientUpgrade samba-winbind-modules | Mar 3, 2022 | Feb 18, 2022 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.13.14-11.4.42.0.1.113.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.13.8-11.4.42.0.1.113.0 on Solaris 11.4 | Feb 17, 2022 | Feb 17, 2022 |
| Oracle_linux | — | Upgrade ipa-server-dnsUpgrade python3-qrcode-coreUpgrade python2-ipalibUpgrade python2-ipaclientUpgrade ipa-server-commonUpgrade bind-dyndb-ldapUpgrade softhsm-develUpgrade custodiaUpgrade python3-qrcodeUpgrade ipa-server-trust-adUpgrade softhsmUpgrade python3-pyusbUpgrade python3-ipalibUpgrade ipa-client-commonUpgrade ipa-healthcheck-coreUpgrade opendnssecUpgrade python3-custodiaUpgrade python3-kdcproxyUpgrade ipa-python-compatUpgrade ipa-commonUpgrade slapi-nisUpgrade python3-jwcryptoUpgrade python3-yubicoUpgrade python2-ipaserverUpgrade ipa-healthcheckUpgrade ipa-client-sambaUpgrade ipa-client-epnUpgrade ipa-serverUpgrade ipa-selinuxUpgrade ipa-clientUpgrade python3-ipaserverUpgrade python3-ipaclientUpgrade python3-ipatests | Dec 17, 2021 | Nov 9, 2021 |
| Redhat_linux | — | Upgrade slapi-nis-debugsourceUpgrade opendnssec-debuginfoUpgrade python2-ipaclientUpgrade python3-pyusbUpgrade ipa-debugsourceUpgrade ipa-clientUpgrade softhsmUpgrade slapi-nis-debuginfoUpgrade softhsm-develUpgrade ipa-healthcheckUpgrade python3-custodiaUpgrade ipa-client-commonUpgrade ipa-server-debuginfoUpgrade python3-qrcode-coreUpgrade python3-ipalibUpgrade ipa-server-trust-adUpgrade ipa-serverUpgrade ipa-debuginfoUpgrade slapi-nisUpgrade ipa-python-compatUpgrade python3-kdcproxyUpgrade softhsm-debugsourceUpgrade opendnssec-debugsourceUpgrade python3-yubicoUpgrade ipa-commonUpgrade opendnssecUpgrade python2-ipalibUpgrade ipa-healthcheck-coreUpgrade python3-ipatestsUpgrade python2-ipaserverUpgrade ipa-idoverride-memberof-pluginUpgrade custodiaUpgrade ipa-server-trust-ad-debuginfoUpgrade bind-dyndb-ldapUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-selinuxUpgrade ipa-client-sambaUpgrade ipa-client-epnUpgrade python3-ipaserverUpgrade softhsm-debuginfoUpgrade ipa-server-commonUpgrade ipa-client-debuginfoUpgrade ipa-server-dnsUpgrade python3-jwcryptoUpgrade python3-ipaclientUpgrade bind-dyndb-ldap-debugsourceUpgrade python3-qrcode | Dec 16, 2021 | Dec 15, 2021 |
| Rocky_linux | — | Upgrade slapi-nis-debugsourceUpgrade slapi-nisUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-client-epnUpgrade softhsm-debuginfoUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-client-sambaUpgrade bind-dyndb-ldap-debugsourceUpgrade slapi-nis-debuginfoUpgrade ipa-client-debuginfoUpgrade softhsmUpgrade ipa-serverUpgrade opendnssecUpgrade ipa-debugsourceUpgrade ipa-server-debuginfoUpgrade softhsm-develUpgrade ipa-debuginfoUpgrade softhsm-debugsourceUpgrade ipa-server-trust-adUpgrade bind-dyndb-ldapUpgrade opendnssec-debugsourceUpgrade ipa-clientUpgrade opendnssec-debuginfo | Mar 12, 2024 | Feb 18, 2022 |
| Samba | — | Upgrade to Samba 4.14.10 or later.Upgrade to Samba 4.13.14 or later.Upgrade to Samba 4.15.2 or later. | Mar 10, 2022 | Feb 18, 2022 |
| Suse | — | Upgrade libnetapi-devel-32bitUpgrade libsamba-hostconfig0-64bitUpgrade libdcerpc-samr-develUpgrade python3-ldbUpgrade samba-gpupdateUpgrade samba-libs-python3Upgrade samba-libs-python3-32bitUpgrade libldb-develUpgrade libdcerpc-binding0Upgrade libndr1-32bitUpgrade libsamba-credentials0-64bitUpgrade libsamdb0-64bitUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc0Upgrade libsamba-hostconfig0-32bitUpgrade libndr-standard0-32bitUpgrade libndr-nbt0-32bitUpgrade samba-python3Upgrade libsamba-credentials-develUpgrade samba-docUpgrade libsamba-passdb0-64bitUpgrade python3-ldb-develUpgrade samba-core-develUpgrade libnetapi-devel-64bitUpgrade samba-winbind-32bitUpgrade libsamdb0Upgrade libldb2-32bitUpgrade libsmbldap-develUpgrade libsamba-errors0-64bitUpgrade samba-ldb-ldapUpgrade samba-libs-python3-64bitUpgrade libndr-krb5pac-develUpgrade libsamba-policy-develUpgrade libndr-krb5pac0Upgrade libndr1-64bitUpgrade ctdb-testsUpgrade libnetapi0-32bitUpgrade libsamba-hostconfig-develUpgrade libndr-develUpgrade samba-dsdb-modulesUpgrade samba-winbindUpgrade samba-ad-dcUpgrade ctdb-pcp-pmdaUpgrade libtevent-util0-32bitUpgrade libwbclient0-32bitUpgrade libsamba-errors0Upgrade libsamba-passdb0Upgrade samba-libs-64bitUpgrade libsamba-passdb0-32bitUpgrade libsmbclient0-64bitUpgrade libwbclient-develUpgrade libndr-nbt-develUpgrade libtevent-util-develUpgrade samba-libsUpgrade libsamba-policy0-python3Upgrade samba-cephUpgrade samba-ad-dc-64bitUpgrade samba-testUpgrade libtevent-util0Upgrade libnetapi-develUpgrade ctdbUpgrade libldb2Upgrade libsamba-util0Upgrade samba-client-64bitUpgrade ldb-toolsUpgrade libndr-krb5pac0-32bitUpgrade libsamba-credentials0Upgrade libnetapi0-64bitUpgrade libdcerpc-samr0-32bitUpgrade libsmbldap2-32bitUpgrade libsmbclient0Upgrade libndr-nbt0Upgrade libtevent-util0-64bitUpgrade libdcerpc-samr0-64bitUpgrade libsamba-policy-python3-develUpgrade libsmbconf0-32bitUpgrade libsamba-hostconfig0Upgrade libnetapi0Upgrade libsamdb-develUpgrade libsamba-passdb-develUpgrade libdcerpc0-32bitUpgrade libdcerpc0-64bitUpgrade libsmbconf0Upgrade samba-libs-32bitUpgrade samba-ad-dc-32bitUpgrade libwbclient0Upgrade libsamba-policy0-python3-32bitUpgrade libsmbclient0-32bitUpgrade libsamba-util-develUpgrade python3-ldb-32bitUpgrade libdcerpc-samr0Upgrade libdcerpc-develUpgrade libdcerpc-binding0-64bitUpgrade libndr-standard-develUpgrade libsamba-credentials0-32bitUpgrade libndr-nbt0-64bitUpgrade libsamba-errors-develUpgrade libndr-standard0Upgrade libsmbldap2-64bitUpgrade libsmbldap2Upgrade libndr1Upgrade libndr-krb5pac0-64bitUpgrade libwbclient0-64bitUpgrade libsamba-util0-64bitUpgrade libsamba-errors0-32bitUpgrade libsmbconf0-64bitUpgrade samba-winbind-64bitUpgrade libsmbclient-develUpgrade libsamba-util0-32bitUpgrade libsmbconf-develUpgrade libsamdb0-32bitUpgrade samba-clientUpgrade samba-client-32bitUpgrade sambaUpgrade libsamba-policy0-python3-64bitUpgrade libndr-standard0-64bit | Nov 11, 2021 | Nov 10, 2021 |
| Ubuntu | — | Upgrade samba | Nov 12, 2021 | Nov 10, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub