Name: CVE-2017-12150: Channel Accessible by Non-Endpoint
Creator: Rapid7
Published: 2018-07-26T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2017-12150, CWE-300, CVSS 7.4, EPSS 0.18684

It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text.

CVSS Details

CVSS 3.1 Base Score: 7.4
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	—	Upgrade samba	Jul 26, 2018	Jul 26, 2018
Amazon_linux	—	Upgrade samba	Oct 13, 2017	Sep 21, 2017
Centos_linux	—	Upgrade samba4-libsUpgrade libwbclientUpgrade samba4-winbind-krb5-locatorUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade libwbclient-develUpgrade samba4-testUpgrade samba4-develUpgrade samba-clientUpgrade samba-testUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade samba-glusterfsUpgrade libsmbclientUpgrade samba4-commonUpgrade samba4-pidlUpgrade samba-domainjoin-guiUpgrade sambaUpgrade samba4-clientUpgrade samba4-debuginfoUpgrade samba4-pythonUpgrade samba4-dc-libsUpgrade samba-dc-libsUpgrade samba-pythonUpgrade samba-debuginfoUpgrade samba-winbind-clientsUpgrade samba-krb5-printingUpgrade samba4-dcUpgrade samba-develUpgrade samba4-winbind-clientsUpgrade samba-commonUpgrade samba-pidlUpgrade samba-libsUpgrade samba-test-libsUpgrade samba-common-libsUpgrade libsmbclient-develUpgrade samba-winbind-develUpgrade samba-dcUpgrade samba4Upgrade samba4-winbindUpgrade samba-vfs-glusterfsUpgrade samba-winbindUpgrade samba-swatUpgrade samba-doc	Sep 25, 2017	Sep 21, 2017
Debian	—	Upgrade samba	Sep 25, 2017	Sep 21, 2017
Hpux	—	Update CIFS-Server to the latest version	Jun 5, 2018	May 31, 2018
Huawei Euleros 2_0_sp1	—	Upgrade libwbclientUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-winbindUpgrade sambaUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-commonUpgrade libsmbclient	Nov 30, 2017	Sep 20, 2017
Huawei Euleros 2_0_sp2	—	Upgrade libsmbclientUpgrade samba-pythonUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade sambaUpgrade samba-commonUpgrade libwbclientUpgrade samba-libsUpgrade samba-client-libs	Nov 30, 2017	Sep 20, 2017
Oracle Solaris	—	Upgrade service/network/samba to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3	Nov 30, 2017	Nov 30, 2017
Oracle_linux	—	Upgrade samba-domainjoin-guiUpgrade sambaUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-docUpgrade samba-libsUpgrade libsmbclientUpgrade samba4-winbindUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba4-testUpgrade samba-clientUpgrade samba4-libsUpgrade libsmbclient-develUpgrade samba4-develUpgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade ctdb-testsUpgrade samba-common-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade samba4-winbind-clientsUpgrade samba-commonUpgrade samba-swatUpgrade samba4-winbind-krb5-locatorUpgrade samba-develUpgrade libwbclient-develUpgrade samba-dcUpgrade samba4-clientUpgrade samba4-pidlUpgrade samba4-commonUpgrade samba4Upgrade samba-pidlUpgrade libwbclientUpgrade samba-test-libsUpgrade samba-testUpgrade samba-krb5-printingUpgrade samba-vfs-glusterfsUpgrade samba4-dcUpgrade samba-winbind-develUpgrade samba4-pythonUpgrade samba-glusterfsUpgrade samba4-dc-libsUpgrade ctdb	Sep 27, 2017	Sep 20, 2017
Redhat_linux	—	Upgrade samba4-pythonUpgrade samba-debuginfoUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba4-debuginfoUpgrade samba4-winbind-krb5-locatorUpgrade samba-libsUpgrade samba-winbind-krb5-locatorUpgrade samba4-winbind-clientsUpgrade samba-clientUpgrade samba-domainjoin-guiUpgrade samba-client-libsUpgrade samba-winbind-develUpgrade samba-dc-libsUpgrade libsmbclient-develUpgrade samba4-libsUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba4-develUpgrade samba4-dcUpgrade samba-develUpgrade samba-swatUpgrade samba4-clientUpgrade samba-winbind-modulesUpgrade samba-krb5-printingUpgrade samba4-winbindUpgrade samba-commonUpgrade samba4-testUpgrade sambaUpgrade samba-winbindUpgrade samba-docUpgrade samba-common-libsUpgrade libwbclientUpgrade samba-testUpgrade samba-dcUpgrade samba4-commonUpgrade samba4-dc-libsUpgrade samba-pidlUpgrade samba-vfs-glusterfsUpgrade samba-glusterfsNo solution existsUpgrade samba4-pidlUpgrade libwbclient-develUpgrade samba4Upgrade samba-test-libs	Oct 4, 2017	Sep 21, 2017
Samba	—	Upgrade to Samba version 4.5.14Upgrade to Samba version 4.6.8Upgrade to Samba version 4.4.16	Sep 29, 2017	Sep 29, 2017
Suse	—	Upgrade libsmbconf0Upgrade libtevent-util0-32bitUpgrade libsamba-credentials0Upgrade libsmbldap0-32bitUpgrade libsmbclient0-x86Upgrade samba-dsdb-modulesUpgrade libndr1Upgrade libtevent0Upgrade libndr1-32bitUpgrade samba-python3Upgrade samba-develUpgrade libndr-standard-develUpgrade libnetapi0Upgrade libgensec0-32bitUpgrade libsmbsharemodes-develUpgrade libtevent-develUpgrade libsamba-util0-32bitUpgrade libndr-krb5pac0Upgrade libdcerpc-binding0-32bitUpgrade libsamba-hostconfig-develUpgrade samba-client-32bitUpgrade samba-cephUpgrade libsmbclient-develUpgrade samba-32bitUpgrade libdcerpc-develUpgrade libsamba-policy0-python3Upgrade libsamba-passdb0-32bitUpgrade libndr-krb5pac-develUpgrade libsmbldap-develUpgrade libsamba-passdb-develUpgrade libndr-nbt0-32bitUpgrade libwbclient0Upgrade libtevent0-32bitUpgrade samba-test-develUpgrade samba-winbind-x86Upgrade libsamba-hostconfig0Upgrade libtalloc-develUpgrade libtevent0-x86Upgrade libsmbldap2-32bitUpgrade libtalloc2Upgrade libldb1Upgrade libndr0Upgrade libndr-standard0-32bitUpgrade libsmbconf0-32bitUpgrade libsmbclient-raw0Upgrade libtalloc2-x86Upgrade libtdb1-x86Upgrade samba-libsUpgrade samba-testUpgrade libwbclient0-x86Upgrade libdcerpc-samr0Upgrade libtevent-util-develUpgrade libsamba-policy0Upgrade libndr0-32bitUpgrade libtdb1-32bitUpgrade libwbclient0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsamba-errors0-32bitUpgrade libtdb-develUpgrade libndr-nbt0Upgrade libdcerpc-samr-develUpgrade libsmbldap2Upgrade libdcerpc-atsvc0Upgrade libsmbclient0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libsmbclient0Upgrade libsamba-util0Upgrade libdcerpc-binding0Upgrade libsamba-policy-develUpgrade sambaUpgrade samba-kdcUpgrade libdcerpc0-32bitUpgrade libnetapi-develUpgrade libtalloc2-32bitUpgrade samba-docUpgrade samba-clientUpgrade libsamba-credentials-develUpgrade libsamba-util-develUpgrade libsamba-policy-python3-develUpgrade libsamba-errors-develUpgrade libndr-develUpgrade libsmbconf-develUpgrade samba-pythonUpgrade libsmbldap0Upgrade libtdb1Upgrade libndr-nbt-develUpgrade libtevent-util0Upgrade samba-x86Upgrade libndr-standard0Upgrade libsamdb-develUpgrade libwbclient-develUpgrade samba-winbind-32bitUpgrade samba-libs-python3-32bitUpgrade libldb-develUpgrade libsamba-passdb0Upgrade libgensec0Upgrade samba-libs-python3Upgrade libsamba-errors0Upgrade libnetapi0-32bitUpgrade libsamba-credentials0-32bitUpgrade libsmbsharemodes0Upgrade ctdbUpgrade libdcerpc0Upgrade libsamdb0Upgrade samba-krb-printingUpgrade samba-client-x86Upgrade samba-winbindUpgrade samba-libs-32bitUpgrade libregistry0Upgrade libsamdb0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade samba-core-develUpgrade ldapsmb	Oct 5, 2017	Sep 21, 2017
Ubuntu	—	Upgrade samba	Sep 25, 2017	Sep 21, 2017

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence