It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Jul 26, 2018 | Jul 26, 2018 |
| Amazon_linux | — | Upgrade samba | Oct 13, 2017 | Sep 21, 2017 |
| Centos_linux | — | Upgrade samba-test-libsUpgrade samba-vfs-glusterfsUpgrade samba-commonUpgrade samba-pythonUpgrade samba-domainjoin-guiUpgrade samba-dc-libsUpgrade sambaUpgrade samba-krb5-printingUpgrade samba4-dc-libsUpgrade samba4-clientUpgrade samba-pidlUpgrade samba4-pythonUpgrade samba-winbind-clientsUpgrade samba-debuginfoUpgrade samba-dcUpgrade libsmbclient-develUpgrade samba-docUpgrade samba4-winbindUpgrade samba4Upgrade samba4-winbind-clientsUpgrade samba-winbind-develUpgrade samba-develUpgrade samba4-dcUpgrade samba-libsUpgrade samba4-debuginfoUpgrade samba-common-libsUpgrade samba-swatUpgrade samba-winbindUpgrade samba4-testUpgrade samba-glusterfsUpgrade samba-common-toolsUpgrade samba4-winbind-krb5-locatorUpgrade samba-client-libsUpgrade samba-clientUpgrade libwbclientUpgrade samba-testUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade libwbclient-develUpgrade samba4-pidlUpgrade samba4-develUpgrade samba4-libsUpgrade samba-winbind-krb5-locatorUpgrade samba4-common | Sep 25, 2017 | Sep 21, 2017 |
| Debian | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
| Hpux | — | Update CIFS-Server to the latest version | Jun 5, 2018 | May 31, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libwbclientUpgrade samba-common-libsUpgrade libsmbclientUpgrade sambaUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-pythonUpgrade samba-clientUpgrade samba-common | Nov 30, 2017 | Sep 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade sambaUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-pythonUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade libwbclientUpgrade samba-commonUpgrade samba-client-libsUpgrade samba-libs | Nov 30, 2017 | Sep 20, 2017 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3 | Nov 30, 2017 | Nov 30, 2017 |
| Oracle_linux | — | Upgrade samba4-winbindUpgrade libwbclient-develUpgrade samba-commonUpgrade samba-winbindUpgrade samba-swatUpgrade samba-libsUpgrade samba-pythonUpgrade samba-docUpgrade samba-client-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-dc-libsUpgrade samba4-winbind-krb5-locatorUpgrade samba4-winbind-clientsUpgrade sambaUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba4-libsUpgrade libsmbclient-develUpgrade samba-common-libsUpgrade samba4-testUpgrade samba-develUpgrade ctdb-testsUpgrade samba-winbind-clientsUpgrade samba4-develUpgrade samba-clientUpgrade samba-domainjoin-guiUpgrade samba-winbind-develUpgrade samba4-dcUpgrade samba4-dc-libsUpgrade samba-vfs-glusterfsUpgrade samba-dcUpgrade ctdbUpgrade samba-glusterfsUpgrade libwbclientUpgrade samba4-commonUpgrade samba-test-libsUpgrade samba-testUpgrade samba4-pidlUpgrade samba4Upgrade samba4-clientUpgrade samba-krb5-printingUpgrade samba-pidlUpgrade samba4-python | Sep 27, 2017 | Sep 20, 2017 |
| Redhat_linux | — | Upgrade samba-krb5-printingUpgrade samba4-testUpgrade samba-domainjoin-guiUpgrade samba4-winbind-krb5-locatorUpgrade samba4-clientUpgrade samba-winbind-modulesUpgrade samba-dc-libsUpgrade samba-commonUpgrade libsmbclientUpgrade samba4-pythonUpgrade libwbclientUpgrade samba-winbindUpgrade samba-common-toolsUpgrade sambaUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-debuginfoUpgrade samba-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-pythonUpgrade samba-client-libsUpgrade libsmbclient-develUpgrade samba4-debuginfoUpgrade samba-develUpgrade samba4-libsUpgrade samba-winbind-clientsUpgrade samba4-develUpgrade samba-swatUpgrade samba-docUpgrade samba4-winbindUpgrade samba-winbind-develUpgrade samba4-dcUpgrade samba4-winbind-clientsUpgrade samba4-pidlUpgrade samba-dcUpgrade samba4Upgrade samba-glusterfsUpgrade samba-testUpgrade samba-vfs-glusterfsNo solution existsUpgrade samba-pidlUpgrade samba4-dc-libsUpgrade samba4-commonUpgrade samba-test-libsUpgrade libwbclient-devel | Oct 4, 2017 | Sep 21, 2017 |
| Samba | — | Upgrade to Samba version 4.6.8Upgrade to Samba version 4.5.14Upgrade to Samba version 4.4.16 | Sep 29, 2017 | Sep 29, 2017 |
| Suse | — | Upgrade samba-kdcUpgrade libsamdb0Upgrade samba-core-develUpgrade libsamba-util0Upgrade samba-libs-32bitUpgrade libsmbclient-raw0-32bitUpgrade libsmbclient0Upgrade samba-winbindUpgrade samba-krb-printingUpgrade libsmbldap0Upgrade libdcerpc0Upgrade samba-winbind-32bitUpgrade samba-client-x86Upgrade ctdbUpgrade libwbclient0-32bitUpgrade samba-pythonUpgrade libndr0-32bitUpgrade libtalloc2-32bitUpgrade libnetapi-develUpgrade libndr-develUpgrade libndr-nbt-develUpgrade ldapsmbUpgrade libsamba-errors-develUpgrade libsmbldap2Upgrade libldb-develUpgrade libsamba-errors0Upgrade libdcerpc-binding0Upgrade libsamba-credentials-develUpgrade libndr-nbt0Upgrade libnetapi0-32bitUpgrade samba-libs-python3-32bitUpgrade libsamba-passdb0Upgrade libgensec0Upgrade samba-libs-python3Upgrade libsmbconf-develUpgrade libsamba-policy-python3-develUpgrade libtdb1Upgrade libsamba-util-develUpgrade libtevent-util0Upgrade libsamba-credentials0-32bitUpgrade libsamdb0-32bitUpgrade libsamdb-develUpgrade libsamba-policy-develUpgrade libdcerpc-atsvc0Upgrade libsamba-errors0-32bitUpgrade samba-clientUpgrade libsmbclient0-32bitUpgrade libdcerpc-samr-develUpgrade samba-docUpgrade libndr-krb5pac0-32bitUpgrade libndr-standard0Upgrade libsmbsharemodes0Upgrade libwbclient-develUpgrade libdcerpc0-32bitUpgrade libtdb-develUpgrade libsamba-hostconfig0-32bitUpgrade sambaUpgrade libtdb1-32bitUpgrade libregistry0Upgrade samba-x86Upgrade samba-cephUpgrade samba-libsUpgrade libdcerpc-samr0Upgrade samba-client-32bitUpgrade libsmbldap-develUpgrade libsamba-passdb0-32bitUpgrade libdcerpc-develUpgrade libndr-krb5pac-develUpgrade samba-winbind-x86Upgrade libsmbclient-develUpgrade samba-develUpgrade libsmbclient0-x86Upgrade libsmbldap2-32bitUpgrade libdcerpc-binding0-32bitUpgrade libtalloc-develUpgrade libldb1Upgrade libwbclient0-x86Upgrade libtevent-util0-32bitUpgrade libndr-standard-develUpgrade libsamba-credentials0Upgrade libtevent0Upgrade samba-dsdb-modulesUpgrade libsamba-passdb-develUpgrade libsamba-hostconfig0Upgrade libndr1Upgrade libtdb1-x86Upgrade libndr-nbt0-32bitUpgrade libtevent0-x86Upgrade libtevent-develUpgrade libsamba-hostconfig-develUpgrade libndr-krb5pac0Upgrade libsmbclient-raw0Upgrade samba-testUpgrade libndr0Upgrade samba-test-develUpgrade libwbclient0Upgrade libndr-standard0-32bitUpgrade libtevent-util-develUpgrade libsamba-policy0-python3Upgrade libtalloc2Upgrade libsamba-policy0Upgrade libnetapi0Upgrade samba-32bitUpgrade samba-python3Upgrade libndr1-32bitUpgrade libsmbconf0Upgrade libtalloc2-x86Upgrade libsmbsharemodes-develUpgrade libtevent0-32bitUpgrade libsmbldap0-32bitUpgrade libsmbconf0-32bitUpgrade libsamba-util0-32bitUpgrade libgensec0-32bit | Oct 5, 2017 | Sep 21, 2017 |
| Ubuntu | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub