CVE-2023-3347
Fixed in a distro release EPSS <1%CVSS 5.9
A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin configured "server signing = required" or for SMB2 connections to Domain Controllers where SMB2 packet signing is mandatory. This flaw allows an attacker to perform attacks, such as a man-in-the-middle attack, by intercepting the network traffic and modifying the SMB2 messages between client and server, affecting the integrity of the data.
Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Storage 3
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | ctdb | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | libnetapi | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | libnetapi-devel | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | libsmbclient | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | libsmbclient-devel | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | libwbclient | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | libwbclient-devel | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | python3-samba | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | python3-samba-dc | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | python3-samba-devel | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | python3-samba-test | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | samba | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | samba-client | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | samba-client-libs | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | samba-common | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | samba-common-libs | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | samba-common-tools | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | samba-dc-libs | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | samba-dcerpc | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | samba-devel | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | samba-krb5-printing | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | samba-ldb-ldap-modules | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | samba-libs | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | samba-pidl | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | samba-test | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | samba-test-libs | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | samba-tools | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | samba-usershares | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | samba-vfs-iouring | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | samba-winbind | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | samba-winbind-clients | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | samba-winbind-krb5-locator | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | samba-winbind-modules | 4.17.5-3.el8_8.alma |
| AlmaLinux 8 | samba-winexe | 4.17.5-3.el8_8.alma |
| AlmaLinux 9 | ctdb | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | libnetapi | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | libnetapi-devel | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | libsmbclient | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | libsmbclient-devel | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | libwbclient | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | libwbclient-devel | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | python3-samba | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | python3-samba-dc | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | python3-samba-devel | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | python3-samba-test | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | samba | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | samba-client | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | samba-client-libs | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | samba-common | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | samba-common-libs | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | samba-common-tools | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | samba-dc-libs | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | samba-dcerpc | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | samba-devel | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | samba-krb5-printing | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | samba-ldb-ldap-modules | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | samba-libs | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | samba-pidl | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | samba-test | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | samba-test-libs | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | samba-tools | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | samba-usershares | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | samba-vfs-iouring | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | samba-winbind | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | samba-winbind-clients | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | samba-winbind-krb5-locator | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | samba-winbind-modules | 4.17.5-103.el9_2.alma |
| AlmaLinux 9 | samba-winexe | 4.17.5-103.el9_2.alma |
| Debian 12 | samba | 2:4.17.10+dfsg-0+deb12u1 |
| Debian 13 | samba | 2:4.18.5+dfsg-1 |
| Debian 14 | samba | 2:4.18.5+dfsg-1 |
| Red Hat Enterprise Linux 8 | ctdb | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | ctdb-debuginfo | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | libnetapi | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | libnetapi-debuginfo | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | libnetapi-devel | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | libsmbclient | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | libsmbclient-debuginfo | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | libsmbclient-devel | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | libwbclient | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | libwbclient-debuginfo | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | libwbclient-devel | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | python3-samba | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | python3-samba-dc | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | python3-samba-dc-debuginfo | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | python3-samba-debuginfo | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | python3-samba-devel | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | python3-samba-test | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-client | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-client-debuginfo | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-client-libs | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-client-libs-debuginfo | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-common | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-common-libs | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-common-libs-debuginfo | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-common-tools | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-common-tools-debuginfo | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-dc-libs | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-dc-libs-debuginfo | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-dcerpc | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-dcerpc-debuginfo | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-debuginfo | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-debugsource | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-devel | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-krb5-printing | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-krb5-printing-debuginfo | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-ldb-ldap-modules | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-ldb-ldap-modules-debuginfo | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-libs | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-libs-debuginfo | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-pidl | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-test | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-test-debuginfo | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-test-libs | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-test-libs-debuginfo | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-tools | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-usershares | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-vfs-iouring | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-vfs-iouring-debuginfo | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-winbind | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-winbind-clients | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-winbind-clients-debuginfo | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-winbind-debuginfo | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-winbind-krb5-locator | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-winbind-krb5-locator-debuginfo | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-winbind-modules | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-winbind-modules-debuginfo | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-winexe | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 8 | samba-winexe-debuginfo | 0:4.17.5-3.el8_8 |
| Red Hat Enterprise Linux 9 | ctdb | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | ctdb-debuginfo | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | libnetapi | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | libnetapi-debuginfo | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | libnetapi-devel | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | libsmbclient | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | libsmbclient-debuginfo | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | libsmbclient-devel | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | libwbclient | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | libwbclient-debuginfo | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | libwbclient-devel | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | python3-samba | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | python3-samba-dc | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | python3-samba-dc-debuginfo | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | python3-samba-debuginfo | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | python3-samba-devel | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | python3-samba-test | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-client | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-client-debuginfo | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-client-libs | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-client-libs-debuginfo | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-common | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-common-libs | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-common-libs-debuginfo | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-common-tools | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-common-tools-debuginfo | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-dc-libs | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-dc-libs-debuginfo | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-dcerpc | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-dcerpc-debuginfo | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-debuginfo | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-debugsource | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-devel | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-krb5-printing | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-krb5-printing-debuginfo | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-ldb-ldap-modules | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-ldb-ldap-modules-debuginfo | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-libs | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-libs-debuginfo | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-pidl | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-test | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-test-debuginfo | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-test-libs | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-test-libs-debuginfo | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-tools | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-usershares | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-vfs-iouring | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-vfs-iouring-debuginfo | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-winbind | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-winbind-clients | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-winbind-clients-debuginfo | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-winbind-debuginfo | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-winbind-krb5-locator | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-winbind-krb5-locator-debuginfo | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-winbind-modules | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-winbind-modules-debuginfo | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-winexe | 0:4.17.5-103.el9_2 |
| Red Hat Enterprise Linux 9 | samba-winexe-debuginfo | 0:4.17.5-103.el9_2 |
| SUSE Linux Enterprise High Availability Extension 15 SP5 | samba | 4.17.9+git.367.dae41ffdd1f-150500.3.5.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | samba | 4.17.9+git.367.dae41ffdd1f-150500.3.5.1 |
| Ubuntu 20.04 LTS | samba | 2:4.15.13+dfsg-0ubuntu0.20.04.2 |
| Ubuntu 20.04 LTS | samba | 2:4.15.13+dfsg-0ubuntu0.20.04.3 |
| Ubuntu 22.04 LTS | samba | 2:4.15.13+dfsg-0ubuntu1.2 |
| Ubuntu 22.04 LTS | samba | 2:4.15.13+dfsg-0ubuntu1.1 |
| openSUSE Leap 15.5 | samba | 4.17.9+git.367.dae41ffdd1f-150500.3.5.1 |
| openSUSE Tumbleweed | samba | 4.18.5+git.313.c8e274c7852-1.1 |