CVE-2017-12151: debian debian_linux Channel Accessible by Non-Endpoint
Vulnerability summary
CVE-2017-12151 is a high (CVSS 7.4) Channel Accessible by Non-Endpoint vulnerability in debian debian_linux. EPSS estimates a 4.10% chance of exploitation in the next 30 days, higher than 90.6% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 12 · Related 8Timeline
- 27-07-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects, allowing an attacker to read or alter the contents of the connection via a man-in-the-middle attack.
CVSS metrics
6 scores · 5 sources · 2 versions- NVDNIST7.4HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- OSV · AlpineEcosystem advisory · calculated7.4HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- OSV · UbuntuEcosystem advisory · calculated7.4HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- OSV · DebianEcosystem advisory · calculated7.4HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS trend
Probability
4.10%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
-0.49 pp
From 4.59% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-300Channel Accessible by Non-EndpointThe product does not adequately verify the identity of actors at both ends of a communication channel, or does not adequately ensure the integrity of the channel, in a way that allows the channel to be accessed or influenced by an actor that is not an endpoint.
- CWE-310Cryptographic IssuesWeaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.
Affected systems
Redhat5 products
Debian2 products
- samba< 2:4.6.7+dfsg-2
- debian_linuxEOL8.0 | 9.0
Alpine1 product
- samba≥ 4.5.0, < 4.7.0-r0 | ≥ 4.5.0, < 4.4.16-r0 | ≥ 4.5.0, < 4.5.14-r0 | ≥ 4.5.0, < 4.6.8-r0
Hp1 product
- cifs_serverb.04.05.11.00
Samba1 product
- sambaEOL4.4.16 | 4.5.14 | 4.6.8 | < 4.4.16 | ≥ 4.5.0, < 4.5.14 | ≥ 4.6.0, < 4.6.8
Ubuntu1 product
- samba< 2:4.3.11+dfsg-0ubuntu0.14.04.12 | < 2:4.3.11+dfsg-0ubuntu0.16.04.11
6 vendors · 11 products
References
14 links- bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12151X Refsource CONFIRMIssue TrackingThird Party Advisory
- support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03817en_usX Refsource CONFIRMThird Party Advisory
