It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Jul 26, 2018 | Jul 26, 2018 |
| Amazon_linux | — | Upgrade samba | Oct 13, 2017 | Sep 21, 2017 |
| Centos_linux | — | Upgrade samba-winbind-develUpgrade samba-common-libsUpgrade libsmbclient-develUpgrade samba-vfs-glusterfsUpgrade samba-pidlUpgrade samba-docUpgrade samba-commonUpgrade samba4-debuginfoUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-test-libsUpgrade samba4-winbind-clientsUpgrade samba-domainjoin-guiUpgrade samba-develUpgrade samba-swatUpgrade samba-libsUpgrade samba4-clientUpgrade samba4-dcUpgrade samba4-pythonUpgrade samba-debuginfoUpgrade samba-dc-libsUpgrade samba4-dc-libsUpgrade samba4-winbindUpgrade samba-krb5-printingUpgrade samba-dcUpgrade samba-pythonUpgrade sambaUpgrade samba4Upgrade samba4-winbind-krb5-locatorUpgrade samba-glusterfsUpgrade samba4-commonUpgrade samba4-pidlUpgrade libwbclient-develUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-clientUpgrade libwbclientUpgrade libsmbclientUpgrade samba4-libsUpgrade samba-testUpgrade samba4-testUpgrade samba-winbind-krb5-locatorUpgrade samba4-develUpgrade samba-winbind-modules | Sep 25, 2017 | Sep 21, 2017 |
| Debian | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
| Hpux | — | Update CIFS-Server to the latest version | Jun 5, 2018 | May 31, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libwbclientUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-winbindUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-libsUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade samba-pythonUpgrade samba-common-libs | Nov 30, 2017 | Sep 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-libsUpgrade samba-clientUpgrade samba-common-toolsUpgrade sambaUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-libsUpgrade samba-common | Nov 30, 2017 | Sep 20, 2017 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3 | Nov 30, 2017 | Nov 30, 2017 |
| Oracle_linux | — | Upgrade samba4-develUpgrade samba-develUpgrade samba-swatUpgrade samba-clientUpgrade samba4-libsUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade samba4-winbind-clientsUpgrade samba-commonUpgrade samba-dc-libsUpgrade samba4-winbind-krb5-locatorUpgrade samba4-winbindUpgrade libwbclient-develUpgrade ctdb-testsUpgrade samba-docUpgrade samba-client-libsUpgrade samba4-testUpgrade libsmbclient-develUpgrade samba-winbind-clientsUpgrade samba-domainjoin-guiUpgrade samba-winbindUpgrade libsmbclientUpgrade sambaUpgrade samba4-pidlUpgrade samba4-pythonUpgrade samba4-dcUpgrade samba4-clientUpgrade ctdbUpgrade samba4-dc-libsUpgrade samba-winbind-develUpgrade samba-test-libsUpgrade libwbclientUpgrade samba-dcUpgrade samba-testUpgrade samba4-commonUpgrade samba-pidlUpgrade samba4Upgrade samba-glusterfsUpgrade samba-krb5-printingUpgrade samba-vfs-glusterfs | Sep 27, 2017 | Sep 20, 2017 |
| Redhat_linux | — | Upgrade samba-docUpgrade samba-krb5-printingUpgrade samba-winbind-krb5-locatorUpgrade libwbclientUpgrade samba-pythonUpgrade samba4-develUpgrade samba4-clientUpgrade samba4-winbind-krb5-locatorUpgrade samba4-winbind-clientsUpgrade samba-libsUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba4-libsUpgrade samba-winbindUpgrade samba-domainjoin-guiUpgrade samba4-winbindUpgrade samba-swatUpgrade libsmbclient-develUpgrade samba-common-toolsUpgrade samba-develUpgrade samba-dc-libsUpgrade samba4-testUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade samba-winbind-develUpgrade samba4-dcUpgrade samba-debuginfoUpgrade samba4-pythonUpgrade samba-commonUpgrade sambaUpgrade samba-clientUpgrade samba4-debuginfoUpgrade samba-winbind-clientsUpgrade samba-glusterfsUpgrade samba4-pidlUpgrade samba4-dc-libsUpgrade samba4Upgrade samba-dcUpgrade samba-vfs-glusterfsUpgrade samba-pidlNo solution existsUpgrade libwbclient-develUpgrade samba-test-libsUpgrade samba-testUpgrade samba4-common | Oct 4, 2017 | Sep 21, 2017 |
| Samba | — | Upgrade to Samba version 4.5.14Upgrade to Samba version 4.6.8Upgrade to Samba version 4.4.16 | Sep 29, 2017 | Sep 29, 2017 |
| Suse | — | Upgrade ctdbUpgrade libwbclient0-32bitUpgrade libsmbconf-develUpgrade libsmbclient0-32bitUpgrade libsmbclient-raw0-32bitUpgrade samba-libs-32bitUpgrade libsmbclient0Upgrade libsamba-util0Upgrade libsamba-hostconfig0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libndr-krb5pac-develUpgrade libsmbclient-develUpgrade libndr-nbt0-32bitUpgrade libsamba-policy0-python3Upgrade libsamba-hostconfig-develUpgrade samba-32bitUpgrade samba-cephUpgrade libsamba-credentials0Upgrade libsmbconf0Upgrade libndr1-32bitUpgrade samba-develUpgrade libndr-standard0-32bitUpgrade libsmbclient-raw0Upgrade libndr0Upgrade libndr-krb5pac0Upgrade libwbclient0Upgrade libtalloc2Upgrade samba-testUpgrade samba-test-develUpgrade libdcerpc-samr0Upgrade libwbclient0-x86Upgrade libsamba-policy0Upgrade libtevent-util-develUpgrade samba-libsUpgrade samba-client-32bitUpgrade libsamba-passdb0-32bitUpgrade libgensec0-32bitUpgrade libndr-develUpgrade libtdb1Upgrade libdcerpc0-32bitUpgrade libsamba-policy-develUpgrade libsamba-util0-32bitUpgrade libsmbconf0-32bitUpgrade samba-winbind-x86Upgrade libsamba-passdb-develUpgrade libndr-standard-develUpgrade libtevent0-x86Upgrade libtevent-develUpgrade samba-python3Upgrade libtevent-util0-32bitUpgrade libsamba-hostconfig0Upgrade libndr1Upgrade libsmbldap-develUpgrade libdcerpc-binding0-32bitUpgrade libsmbldap2-32bitUpgrade libsmbldap0-32bitUpgrade libnetapi0Upgrade libtdb1-x86Upgrade libsmbclient0-x86Upgrade libtevent0-32bitUpgrade samba-dsdb-modulesUpgrade libdcerpc-develUpgrade libtalloc2-x86Upgrade libtalloc-develUpgrade libldb1Upgrade libsmbsharemodes-develUpgrade libtevent0Upgrade samba-pythonUpgrade libsamba-policy-python3-develUpgrade libnetapi-develUpgrade libldb-develUpgrade libsmbsharemodes0Upgrade libwbclient-develUpgrade samba-client-x86 | Oct 5, 2017 | Sep 21, 2017 |
| Ubuntu | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub