CVE-2017-12151 A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and....
HighCVSS 7.4
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects, allowing an attacker to read or alter the contents of the connection via a man-in-the-middle attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/samba(Debian:12) | < 2:4.6.7+dfsg-2 | 2:4.6.7+dfsg-2 |
| debian/samba(Debian:13) | < 2:4.6.7+dfsg-2 | 2:4.6.7+dfsg-2 |
| debian/samba(Debian:14) | < 2:4.6.7+dfsg-2 | 2:4.6.7+dfsg-2 |
| samba | < 4.4.16 | 4.4.16 |
| samba | >= 4.5.0, < 4.5.14 | 4.5.14 |
| samba | >= 4.6.0, < 4.6.8 | 4.6.8 |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| redhat enterprise linux | = 7.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 7.4 | No fix listed |
| redhat enterprise linux server eus | = 7.4 | No fix listed |
| redhat enterprise linux server eus | = 7.5 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| HP Inc cifs server | = b.04.05.11.00 | No fix listed |
| alpine/samba(Alpine:v3.10) | >= 4.5.0, < 4.7.0-r0 | 4.7.0-r0 |
| alpine/samba(Alpine:v3.11) | >= 4.5.0, < 4.7.0-r0 | 4.7.0-r0 |
| alpine/samba(Alpine:v3.12) | >= 4.5.0, < 4.7.0-r0 | 4.7.0-r0 |
| alpine/samba(Alpine:v3.13) | >= 4.5.0, < 4.7.0-r0 | 4.7.0-r0 |
| alpine/samba(Alpine:v3.14) | >= 4.5.0, < 4.7.0-r0 | 4.7.0-r0 |
| alpine/samba(Alpine:v3.15) | >= 4.5.0, < 4.7.0-r0 | 4.7.0-r0 |
| alpine/samba(Alpine:v3.16) | >= 4.5.0, < 4.7.0-r0 | 4.7.0-r0 |
| alpine/samba(Alpine:v3.17) | >= 4.5.0, < 4.7.0-r0 | 4.7.0-r0 |
| alpine/samba(Alpine:v3.18) | >= 4.5.0, < 4.7.0-r0 | 4.7.0-r0 |
| alpine/samba(Alpine:v3.19) | >= 4.5.0, < 4.7.0-r0 | 4.7.0-r0 |
Show 14 more
| Product | Affected versions | Fixed in |
|---|---|---|
| alpine/samba(Alpine:v3.20) | >= 4.5.0, < 4.7.0-r0 | 4.7.0-r0 |
| alpine/samba(Alpine:v3.21) | >= 4.5.0, < 4.7.0-r0 | 4.7.0-r0 |
| alpine/samba(Alpine:v3.22) | >= 4.5.0, < 4.7.0-r0 | 4.7.0-r0 |
| alpine/samba(Alpine:v3.23) | >= 4.5.0, < 4.7.0-r0 | 4.7.0-r0 |
| alpine/samba(Alpine:v3.24) | >= 4.5.0, < 4.7.0-r0 | 4.7.0-r0 |
| alpine/samba(Alpine:v3.4) | >= 4.5.0, < 4.4.16-r0 | 4.4.16-r0 |
| alpine/samba(Alpine:v3.5) | >= 4.5.0, < 4.5.14-r0 | 4.5.14-r0 |
| alpine/samba(Alpine:v3.6) | >= 4.5.0, < 4.6.8-r0 | 4.6.8-r0 |
| alpine/samba(Alpine:v3.7) | >= 4.5.0, < 4.7.0-r0 | 4.7.0-r0 |
| alpine/samba(Alpine:v3.8) | >= 4.5.0, < 4.7.0-r0 | 4.7.0-r0 |
| alpine/samba(Alpine:v3.9) | >= 4.5.0, < 4.7.0-r0 | 4.7.0-r0 |
| samba | = 4.4.16 | No fix listed |
| samba | = 4.5.14 | No fix listed |
| samba | = 4.6.8 | No fix listed |
References
- Debian Security Tracker CVE-2017-12151 vendor-advisory
- 100917 third-party-advisory vdb-entry
- 1039401 third-party-advisory vdb-entry
- RHSA-2017:2790 third-party-advisory vendor-advisory
- RHSA-2017:2858 third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- security.netapp.com third-party-advisory
- support.hpe.com third-party-advisory
- DSA-3983 third-party-advisory vendor-advisory
- www.samba.org mitigation vendor-advisory
- security.alpinelinux.org vendor-advisory