Man-in-the-Middle attack in Samba - CVE-2017-12151

Vulnerability identifier: #VU8517

CSH Severity: Low

CVSS v4: 5.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-12151

CWE-ID: CWE-310

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a MitM attack.

The vulnerability exists due to absence of encryption across DFS redirects. A remote attacker can read and alter documents, transferred via a client connection.

Samba
Debian Linux
Amazon Linux AMI
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux EUS Compute Node
Slackware Linux
Ubuntu
Fedora
Red Hat Gluster Storage Server for On-premise
samba (Alpine package)
samba
RoboHelp

Update to version 4.6.8, 4.5.14 and 4.4.16or apply patches:
https://www.samba.org/samba/ftp/patches/security/samba-4.4.15-security-2017-09-20.patch
https://www.samba.org/samba/ftp/patches/security/samba-4.5.13-security-2017-09-20.patch
https://www.samba.org/samba/ftp/patches/security/samba-4.6.7-security-2017-09-20.patch

samba (Alpine package) - update to 4.4.16-r0
samba - addressed in versions 4.5.14-0.fc25, 4.6.8-0.fc26, 4.7.0-12.fc27

• https://www.samba.org/samba/security/CVE-2017-12151.html

• Multiple vulnerabilities in Samba
• Debian update for samba
• Ubuntu update for Samba
• Slackware Linux update for samba
• Amazon Linux AMI update for samba
• Red Hat update for samba
• Red Hat update for samba
• Man-in-the-Middle attack in samba (Alpine package)
• Fedora 25 update for samba
• Fedora 26 update for samba
• Fedora 27 update for samba