A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result could include total domain compromise.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ipa-server-trust-adUpgrade ipa-healthcheck-coreUpgrade python3-kdcproxyUpgrade python3-pyusbUpgrade slapi-nisUpgrade ipa-client-commonUpgrade python3-ipalibUpgrade ipa-server-dnsUpgrade python3-qrcodeUpgrade ipa-clientUpgrade python3-ipaclientUpgrade softhsm-develUpgrade ipa-python-compatUpgrade ipa-selinuxUpgrade softhsmUpgrade python3-ipatestsUpgrade bind-dyndb-ldapUpgrade python3-jwcryptoUpgrade python3-custodiaUpgrade ipa-client-sambaUpgrade ipa-healthcheckUpgrade ipa-serverUpgrade ipa-client-epnUpgrade opendnssecUpgrade python3-ipaserverUpgrade python3-qrcode-coreUpgrade ipa-commonUpgrade python3-yubicoUpgrade ipa-server-commonUpgrade custodia | May 4, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python2-ipaserverUpgrade ipa-server-commonUpgrade ipa-server-dnsUpgrade ipa-serverUpgrade ipa-python-compatUpgrade ipa-client-commonUpgrade ipa-clientUpgrade ipa-debuginfoUpgrade python2-ipalibUpgrade ipa-commonUpgrade ipa-server-trust-adUpgrade python2-ipaclient | Jul 21, 2023 | Feb 18, 2022 |
| Centos_linux | — | Upgrade ipa-client-epnUpgrade ipa-python-compatUpgrade slapi-nisUpgrade ipa-commonUpgrade ipa-serverUpgrade softhsm-develUpgrade python3-kdcproxyUpgrade python3-qrcode-coreUpgrade ipa-debugsourceUpgrade ipa-server-dnsUpgrade ipa-clientUpgrade opendnssecUpgrade slapi-nis-debugsourceUpgrade ipa-server-debuginfoUpgrade python3-yubicoUpgrade opendnssec-debuginfoUpgrade python2-ipaclientUpgrade ipa-debuginfoUpgrade python2-ipalibUpgrade softhsmUpgrade python3-custodiaUpgrade ipa-server-trust-adUpgrade ipa-healthcheck-coreUpgrade bind-dyndb-ldap-debugsourceUpgrade bind-dyndb-ldapUpgrade ipa-selinuxUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-ipaclientUpgrade python2-ipaserverUpgrade opendnssec-debugsourceUpgrade ipa-client-commonUpgrade ipa-healthcheckUpgrade ipa-client-sambaUpgrade custodiaUpgrade python3-pyusbUpgrade python3-jwcryptoUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-server-commonUpgrade python3-ipatestsUpgrade python3-qrcodeUpgrade python3-ipalibUpgrade softhsm-debuginfoUpgrade python3-ipaserverUpgrade slapi-nis-debuginfoUpgrade softhsm-debugsourceUpgrade ipa-client-debuginfo | Dec 16, 2021 | Dec 15, 2021 |
| Debian | — | Upgrade samba | Nov 4, 2022 | Feb 18, 2022 |
| Freebsd | — | Upgrade samba415Upgrade samba413Upgrade samba414 | Nov 4, 2022 | Nov 10, 2021 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Feb 18, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade samba-libsUpgrade libwbclientUpgrade samba-commonUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade libsmbclient | Feb 28, 2022 | Feb 18, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsmbclientUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade sambaUpgrade samba-clientUpgrade samba-winbindUpgrade samba-common-tools | Mar 3, 2022 | Feb 18, 2022 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.13.14-11.4.42.0.1.113.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.13.8-11.4.42.0.1.113.0 on Solaris 11.4 | Feb 17, 2022 | Feb 17, 2022 |
| Oracle_linux | — | Upgrade ipa-serverUpgrade slapi-nisUpgrade ipa-healthcheckUpgrade ipa-client-sambaUpgrade ipa-client-epnUpgrade ipa-selinuxUpgrade ipa-clientUpgrade python3-ipaserverUpgrade python2-ipaserverUpgrade python3-ipaclientUpgrade python3-jwcryptoUpgrade ipa-commonUpgrade python3-ipatestsUpgrade python3-yubicoUpgrade python3-qrcode-coreUpgrade ipa-server-dnsUpgrade python2-ipaclientUpgrade ipa-client-commonUpgrade custodiaUpgrade python3-kdcproxyUpgrade softhsm-develUpgrade ipa-server-commonUpgrade python3-pyusbUpgrade bind-dyndb-ldapUpgrade ipa-server-trust-adUpgrade softhsmUpgrade python3-qrcodeUpgrade python2-ipalibUpgrade ipa-healthcheck-coreUpgrade ipa-python-compatUpgrade opendnssecUpgrade python3-custodiaUpgrade python3-ipalib | Dec 17, 2021 | Nov 9, 2021 |
| Redhat_linux | — | Upgrade ipa-selinuxUpgrade python3-ipaserverUpgrade bind-dyndb-ldap-debugsourceUpgrade custodiaUpgrade ipa-client-debuginfoUpgrade bind-dyndb-ldapUpgrade ipa-client-sambaUpgrade softhsm-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-server-commonUpgrade python3-jwcryptoUpgrade python3-qrcodeUpgrade ipa-client-epnUpgrade python3-ipaclientUpgrade ipa-server-dnsUpgrade python2-ipaserverUpgrade softhsm-develUpgrade python3-kdcproxyUpgrade ipa-debuginfoUpgrade python3-yubicoUpgrade slapi-nisUpgrade ipa-idoverride-memberof-pluginUpgrade softhsmUpgrade opendnssec-debuginfoUpgrade ipa-healthcheckUpgrade python3-custodiaUpgrade ipa-commonUpgrade ipa-client-commonUpgrade slapi-nis-debuginfoUpgrade opendnssecUpgrade ipa-clientUpgrade ipa-python-compatUpgrade opendnssec-debugsourceUpgrade ipa-server-debuginfoUpgrade python2-ipaclientUpgrade python3-ipalibUpgrade python3-ipatestsUpgrade python2-ipalibUpgrade ipa-debugsourceUpgrade ipa-serverUpgrade softhsm-debugsourceUpgrade python3-pyusbUpgrade ipa-healthcheck-coreUpgrade slapi-nis-debugsourceUpgrade python3-qrcode-coreUpgrade ipa-server-trust-ad | Dec 16, 2021 | Dec 15, 2021 |
| Rocky_linux | — | Upgrade ipa-client-epnUpgrade softhsm-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-client-sambaUpgrade slapi-nisUpgrade slapi-nis-debugsourceUpgrade ipa-server-trust-ad-debuginfoUpgrade slapi-nis-debuginfoUpgrade softhsm-develUpgrade bind-dyndb-ldap-debugsourceUpgrade opendnssec-debugsourceUpgrade opendnssecUpgrade opendnssec-debuginfoUpgrade softhsm-debugsourceUpgrade ipa-server-debuginfoUpgrade ipa-debuginfoUpgrade bind-dyndb-ldapUpgrade ipa-clientUpgrade softhsmUpgrade ipa-serverUpgrade ipa-client-debuginfoUpgrade ipa-debugsourceUpgrade ipa-server-trust-ad | Mar 12, 2024 | Feb 18, 2022 |
| Samba | — | Upgrade to Samba 4.13.14 or later.Upgrade to Samba 4.15.2 or later.Upgrade to Samba 4.14.10 or later. | Mar 10, 2022 | Feb 18, 2022 |
| Suse | — | Upgrade libsamdb-develUpgrade libndr-standard0-64bitUpgrade libdcerpc-samr0-32bitUpgrade libsamba-policy0-python3-64bitUpgrade samba-testUpgrade libdcerpc-samr0-64bitUpgrade libnetapi0-64bitUpgrade libsamba-credentials0Upgrade libsmbldap2-32bitUpgrade sambaUpgrade libsamba-util0-64bitUpgrade samba-ad-dc-32bitUpgrade libndr1Upgrade samba-libs-32bitUpgrade samba-client-32bitUpgrade samba-libsUpgrade libsmbconf0-64bitUpgrade libsamdb0-32bitUpgrade samba-client-64bitUpgrade libsamba-util0Upgrade python3-ldb-32bitUpgrade samba-clientUpgrade samba-ad-dc-64bitUpgrade libsamba-errors-develUpgrade libnetapi0Upgrade libndr-nbt0-64bitUpgrade libsmbldap2Upgrade libndr-standard0Upgrade libndr-krb5pac0-32bitUpgrade libsmbclient0-32bitUpgrade libsmbconf0Upgrade libsmbconf-develUpgrade libsamba-passdb-develUpgrade libwbclient0-64bitUpgrade libndr-krb5pac0-64bitUpgrade libsamba-util0-32bitUpgrade libsamba-util-develUpgrade samba-cephUpgrade libwbclient0Upgrade libdcerpc0-32bitUpgrade libtevent-util-develUpgrade libsamba-credentials0-32bitUpgrade libndr-standard-develUpgrade libdcerpc0-64bitUpgrade libsamba-policy0-python3Upgrade libsmbldap2-64bitUpgrade libsamba-errors0-32bitUpgrade libsamba-policy-python3-develUpgrade libsmbconf0-32bitUpgrade libdcerpc-binding0-64bitUpgrade libsmbclient0Upgrade libnetapi-develUpgrade libsmbclient-develUpgrade libsamba-hostconfig0Upgrade libdcerpc-develUpgrade libndr-nbt0Upgrade libtevent-util0-64bitUpgrade libdcerpc-samr0Upgrade libldb2Upgrade libtevent-util0Upgrade ctdbUpgrade samba-winbind-64bitUpgrade libsamba-policy0-python3-32bitUpgrade ldb-toolsUpgrade libndr-krb5pac-develUpgrade samba-ad-dcUpgrade libnetapi0-32bitUpgrade libwbclient0-32bitUpgrade libtevent-util0-32bitUpgrade libndr1-64bitUpgrade libsamba-hostconfig-develUpgrade libndr-develUpgrade libsmbldap-develUpgrade libndr1-32bitUpgrade libsamba-errors0-64bitUpgrade python3-ldb-develUpgrade libdcerpc-binding0Upgrade libsamba-credentials0-64bitUpgrade libdcerpc-binding0-32bitUpgrade samba-winbindUpgrade libsamba-passdb0-32bitUpgrade libsmbclient0-64bitUpgrade libsamba-passdb0Upgrade libsamdb0-64bitUpgrade libnetapi-devel-64bitUpgrade libnetapi-devel-32bitUpgrade libsamba-hostconfig0-64bitUpgrade samba-dsdb-modulesUpgrade ctdb-pcp-pmdaUpgrade ctdb-testsUpgrade libsamba-errors0Upgrade samba-libs-64bitUpgrade samba-ldb-ldapUpgrade libwbclient-develUpgrade libsamba-hostconfig0-32bitUpgrade libdcerpc0Upgrade samba-winbind-32bitUpgrade samba-libs-python3-64bitUpgrade libndr-nbt-develUpgrade samba-libs-python3Upgrade libldb-develUpgrade python3-ldbUpgrade samba-docUpgrade libsamba-credentials-develUpgrade libsamdb0Upgrade libldb2-32bitUpgrade libndr-krb5pac0Upgrade samba-core-develUpgrade libsamba-passdb0-64bitUpgrade samba-python3Upgrade libsamba-policy-develUpgrade libdcerpc-samr-develUpgrade libndr-nbt0-32bitUpgrade samba-libs-python3-32bitUpgrade samba-gpupdateUpgrade libndr-standard0-32bit | Nov 11, 2021 | Nov 10, 2021 |
| Ubuntu | — | Upgrade samba | Nov 12, 2021 | Nov 10, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub