Description
A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects, allowing an attacker to read or alter the contents of the connection via a man-in-the-middle attack.
References (9)
Core 9
Core References
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20170921-0001/
Third Party Advisory vendor-advisory
x_refsource_redhat
https://access.redhat.com/errata/RHSA-2017:2790
Issue Tracking, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12151
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/100917
Third Party Advisory x_refsource_confirm
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03817en_us
Third Party Advisory vendor-advisory
x_refsource_debian
https://www.debian.org/security/2017/dsa-3983
Third Party Advisory vendor-advisory
x_refsource_redhat
https://access.redhat.com/errata/RHSA-2017:2858
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1039401
Mitigation, Vendor Advisory x_refsource_confirm
https://www.samba.org/samba/security/CVE-2017-12151.html
Scores
CVSS v3
7.4
EPSS
0.0415
EPSS Percentile
88.8%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Details
CWE
CWE-310
CWE-300
Status
published
Products (10)
debian/debian_linux
8.0
debian/debian_linux
9.0
hp/cifs_server
b.04.05.11.00
redhat/enterprise_linux
7.0
redhat/enterprise_linux_desktop
7.0
redhat/enterprise_linux_server_aus
7.4
redhat/enterprise_linux_server_eus
7.4
redhat/enterprise_linux_server_eus
7.5
redhat/enterprise_linux_workstation
7.0
samba/samba
< 4.4.16
Published
Jul 27, 2018
Tracked Since
Feb 18, 2026