CVE-2017-12150

samba: Some code path don't enforce smb signing, when they should

Published Jul 26, 2018 CVSS 3.1 · 7.4 High EPSS 13.1% KEV · Not listed
Description
It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-1110-1 samba security update
Debian DSA Debian DSA DSA-3983-1 samba security update
Ubuntu USN Ubuntu USN USN-3426-1 Samba vulnerabilities
Ubuntu USN Ubuntu USN USN-3426-2 Samba vulnerabilities
History
Type Values Removed Values Added
Metrics epss

{'score': 0.2177}

epss

{'score': 0.17791}