CVE-2017-12151

moderate-risk

Published 2018-07-27

A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects, allowing an attacker to read or alter the contents of the connection via a man-in-the-middle attack.

Do I need to act?

4.1% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.4/10 High

NETWORK / HIGH complexity

Affected Products (10)

Samba

Debian Linux

Enterprise Linux

Enterprise Linux Desktop

Enterprise Linux Server Aus

Enterprise Linux Server Eus

Enterprise Linux Workstation

Cifs Server

Affected Vendors

Hp Debian Redhat Samba

References (18)

Third Party Advisory http://www.securityfocus.com/bid/100917

Third Party Advisory http://www.securitytracker.com/id/1039401

Third Party Advisory https://access.redhat.com/errata/RHSA-2017:2790

Third Party Advisory https://access.redhat.com/errata/RHSA-2017:2858

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12151

Third Party Advisory https://security.netapp.com/advisory/ntap-20170921-0001/

Third Party Advisory https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpe...

Third Party Advisory https://www.debian.org/security/2017/dsa-3983

Mitigation https://www.samba.org/samba/security/CVE-2017-12151.html