It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
- CVSS 3.0 Base Score: 6.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Oct 31, 2018 | Oct 31, 2018 |
| Amazon_linux | — | Upgrade samba | May 31, 2017 | Dec 19, 2016 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 31, 2018 |
| Centos_linux | — | Upgrade samba-docUpgrade samba-clientUpgrade samba4-clientUpgrade samba-develUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba4-winbind-krb5-locatorUpgrade sambaUpgrade libsmbclientUpgrade samba4-debuginfoUpgrade samba4-winbindUpgrade samba-winbind-clientsUpgrade samba-test-libsUpgrade samba4-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-vfs-glusterfsUpgrade samba-swatUpgrade samba4-dcUpgrade samba4-testUpgrade samba-winbindUpgrade samba-dcUpgrade samba4-commonUpgrade samba-debuginfoUpgrade samba-libsUpgrade samba-client-libsUpgrade samba-pythonUpgrade samba4-pythonUpgrade samba4-pidlUpgrade libwbclientUpgrade samba4-libsUpgrade samba-krb5-printingUpgrade samba-pidlUpgrade samba-domainjoin-guiUpgrade samba4Upgrade samba-testUpgrade libwbclient-develUpgrade samba4-develUpgrade libsmbclient-develUpgrade samba-winbind-develUpgrade samba-dc-libsUpgrade samba-common-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-glusterfsUpgrade samba4-dc-libs | May 24, 2017 | Dec 19, 2016 |
| Debian | — | Upgrade samba | Dec 20, 2016 | Dec 19, 2016 |
| Freebsd | — | Upgrade samba45Upgrade samba4Upgrade samba44Upgrade samba42Upgrade samba43Upgrade samba36Upgrade samba41 | Dec 28, 2016 | Dec 26, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-libsUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-pythonUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-commonUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-client | Aug 28, 2019 | Oct 31, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-commonUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-clientUpgrade libwbclientUpgrade samba-pythonUpgrade samba-common-toolsUpgrade samba | Aug 28, 2019 | Oct 31, 2018 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.8-0.175.3.17.0.3.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.8-0.175.3.17.0.3.0 on Solaris 11.3 | May 29, 2017 | May 29, 2017 |
| Oracle_linux | — | Upgrade samba-krb5-printingUpgrade samba4-commonUpgrade samba4-dc-libsUpgrade samba-dcUpgrade samba4Upgrade samba4-pythonUpgrade samba4-clientUpgrade samba4-winbind-clientsUpgrade samba-glusterfsUpgrade samba-pidlUpgrade samba4-dcUpgrade samba-testUpgrade samba-test-libsUpgrade samba-client-libsUpgrade samba4-pidlUpgrade ctdbUpgrade samba-winbind-develUpgrade samba-vfs-glusterfsUpgrade libwbclientUpgrade samba4-winbindUpgrade samba-domainjoin-guiUpgrade samba-libsUpgrade libwbclient-develUpgrade samba-swatUpgrade samba-clientUpgrade samba4-testUpgrade samba-common-toolsUpgrade samba-pythonUpgrade sambaUpgrade libsmbclient-develUpgrade samba-develUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba4-libsUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade libsmbclientUpgrade samba-dc-libsUpgrade samba-winbind-krb5-locatorUpgrade samba4-winbind-krb5-locatorUpgrade ctdb-testsUpgrade samba-docUpgrade samba4-devel | Mar 28, 2017 | Dec 19, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 9.0R1Update Pulse Connect Secure to version 8.1R14Update Pulse Connect Secure to version 8.2R11Update Pulse Connect Secure to version 8.3R5 | Oct 28, 2020 | Oct 31, 2018 |
| Redhat_linux | — | Upgrade samba-client-libsUpgrade samba4-winbind-krb5-locatorUpgrade samba-winbind-krb5-locatorUpgrade samba4-commonUpgrade libwbclient-develUpgrade libsmbclientUpgrade samba4-develUpgrade samba-winbindUpgrade samba4-libsUpgrade samba4-testUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade ctdb-testsUpgrade samba-swatUpgrade samba-glusterfsUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba4-winbind-clientsUpgrade samba4-clientUpgrade samba-develUpgrade samba4-debuginfoUpgrade samba-pythonUpgrade samba-pidlUpgrade samba4-dc-libsUpgrade samba-test-libsUpgrade samba-libsUpgrade samba-docUpgrade samba4-dcUpgrade samba4-winbindUpgrade samba-testUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-krb5-printingUpgrade samba-domainjoin-guiUpgrade samba4-pythonUpgrade libsmbclient-develUpgrade samba-dcUpgrade samba-winbind-develUpgrade ctdbUpgrade samba4Upgrade samba-debuginfoNo solution existsUpgrade samba-dc-libsUpgrade samba-vfs-glusterfsUpgrade samba4-pidlUpgrade samba-clientUpgrade samba-common-libs | Mar 21, 2017 | Dec 19, 2016 |
| Samba | — | Upgrade to Samba version 4.3.13Upgrade to Samba version 4.4.8Upgrade to Samba version 4.5.3 | Dec 20, 2016 | Dec 20, 2016 |
| Suse | — | Upgrade libtdb1-x86Upgrade libsmbconf0-debuginfo-32bitUpgrade samba-client-32bitUpgrade libdcerpc-samr0-debuginfo-32bitUpgrade libsmbclient-raw0Upgrade samba-libs-debuginfoUpgrade libsamba-passdb0Upgrade ctdb-tests-debuginfoUpgrade libsmbldap-develUpgrade libgensec0-32bitUpgrade libdcerpc-samr0Upgrade libsamba-credentials0Upgrade libsamba-hostconfig0Upgrade libndr0Upgrade libsamba-policy0-debuginfoUpgrade libtevent0-32bitUpgrade libsmbldap0-debuginfoUpgrade samba-libsUpgrade libsamba-passdb0-32bitUpgrade libsamdb0-debuginfo-32bitUpgrade libsmbclient-develUpgrade samba-python-debuginfoUpgrade libregistry0-debuginfoUpgrade libndr0-debuginfoUpgrade libnetapi0-debuginfo-32bitUpgrade libdcerpc-binding0-32bitUpgrade libndr0-debuginfo-32bitUpgrade libdcerpc-atsvc0-debuginfoUpgrade libsmbclient-raw-develUpgrade libsamdb0-32bitUpgrade samba-pidlUpgrade libsmbclient0-debuginfoUpgrade libtevent-util-develUpgrade samba-client-x86Upgrade libtalloc2-x86Upgrade libtalloc-develUpgrade libgensec-develUpgrade samba-32bitUpgrade libdcerpc0-debuginfo-32bitUpgrade libsamba-credentials0-debuginfo-32bitUpgrade libsamba-hostconfig0-debuginfo-32bitUpgrade samba-test-debuginfoUpgrade libsamba-passdb-develUpgrade libsamba-policy0-32bitUpgrade samba-kdcUpgrade libsamba-util0-32bitUpgrade libtevent0Upgrade libsamba-hostconfig-develUpgrade libsmbclient0-x86Upgrade libndr-standard0-debuginfoUpgrade libnetapi0Upgrade libsmbldap0-debuginfo-32bitUpgrade libldb1Upgrade libwbclient0-x86Upgrade samba-client-debuginfo-32bitUpgrade libsmbclient0-debuginfo-32bitUpgrade libsamba-util0-debuginfo-32bitUpgrade samba-libs-debuginfo-32bitUpgrade libndr-standard0-32bitUpgrade libtalloc2Upgrade libtevent-util0-debuginfoUpgrade libsamba-passdb0-debuginfo-32bitUpgrade libsamba-errors0-debuginfo-32bitUpgrade samba-winbind-debuginfo-32bitUpgrade samba-dsdb-modulesUpgrade libsmbsharemodes-develUpgrade libsmbldap2-32bitUpgrade samba-testUpgrade libndr-standard-develUpgrade libtevent-util0-32bitUpgrade libnetapi0-debuginfoUpgrade samba-winbind-x86Upgrade libsmbclient-raw0-debuginfoUpgrade libndr-standard0-debuginfo-32bitUpgrade libndr-nbt0-debuginfoUpgrade samba-develUpgrade samba-debuginfoUpgrade libdcerpc-atsvc-develUpgrade libsmbconf0-32bitUpgrade libdcerpc-binding0-debuginfoUpgrade libsamdb-develUpgrade libtevent0-x86Upgrade samba-debuginfo-32bitUpgrade libsamba-policy0Upgrade libtevent-develUpgrade libsmbconf0Upgrade samba-test-develUpgrade libndr-nbt0-32bitUpgrade libregistry0-32bitUpgrade libwbclient0Upgrade ctdb-testsUpgrade libndr-nbt0-debuginfo-32bitUpgrade samba-debugsourceUpgrade libsamba-credentials-develUpgrade libwbclient0-debuginfoUpgrade libndr-krb5pac0Upgrade libsamdb0-debuginfoUpgrade libsamba-errors-develUpgrade samba-winbindUpgrade libsmbldap0-32bitUpgrade libsamba-passdb0-debuginfoUpgrade samba-libs-32bitUpgrade libdcerpc0-32bitUpgrade samba-libs-python3Upgrade libsmbconf0-debuginfoUpgrade ctdb-debuginfoUpgrade libgensec0-debuginfoUpgrade libndr-krb5pac-develUpgrade libdcerpc-atsvc0-32bitUpgrade libwbclient-develUpgrade libsmbldap2Upgrade libdcerpc-atsvc0-debuginfo-32bitUpgrade libndr-standard0Upgrade libgensec0-debuginfo-32bitUpgrade libtdb-develUpgrade libsamba-util0-debuginfoUpgrade libsmbclient0-32bitUpgrade ctdb-develUpgrade libsamba-hostconfig0-debuginfoUpgrade samba-x86Upgrade libtevent-util0Upgrade libsamba-policy-develUpgrade samba-docUpgrade libdcerpc0Upgrade libdcerpc-develUpgrade libgensec0Upgrade libsamba-util0Upgrade libsamba-credentials0-32bitUpgrade samba-winbind-32bitUpgrade libsamba-policy0-debuginfo-32bitUpgrade libndr-krb5pac0-debuginfoUpgrade ldapsmbUpgrade libregistry0Upgrade libdcerpc-samr-develUpgrade libregistry-develUpgrade libsamba-errors0Upgrade libwbclient0-debuginfo-32bitUpgrade libndr-develUpgrade libsmbconf-develUpgrade libdcerpc-binding0-debuginfo-32bitUpgrade libdcerpc-samr0-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-krb-printingUpgrade libsamdb0Upgrade sambaUpgrade libsamba-util-develUpgrade samba-client-debuginfoUpgrade libregistry0-debuginfo-32bitUpgrade libsmbclient-raw0-32bitUpgrade samba-clientUpgrade samba-core-develUpgrade libdcerpc-atsvc0Upgrade libtdb1Upgrade libtalloc2-32bitUpgrade libndr-krb5pac0-debuginfo-32bitUpgrade libtdb1-32bitUpgrade libsamba-credentials0-debuginfoUpgrade libsmbldap0Upgrade libdcerpc-binding0Upgrade libnetapi-develUpgrade libtevent-util0-debuginfo-32bitUpgrade samba-pythonUpgrade libsmbclient0Upgrade libndr0-32bitUpgrade libdcerpc-samr0-32bitUpgrade libldb-develUpgrade ctdbUpgrade libwbclient0-32bitUpgrade libndr-nbt0Upgrade libsamba-hostconfig0-32bitUpgrade libsamba-errors0-32bitUpgrade libsmbclient-raw0-debuginfo-32bitUpgrade libndr-krb5pac0-32bitUpgrade libndr-nbt-develUpgrade libsmbsharemodes0Upgrade libnetapi0-32bitUpgrade libsamba-errors0-debuginfoUpgrade libdcerpc0-debuginfoUpgrade samba-libs-python3-32bit | Dec 28, 2016 | Dec 19, 2016 |
| Ubuntu | — | Upgrade winbindUpgrade libsmbclientUpgrade samba | Dec 20, 2016 | Dec 19, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub