VDB
ALPINE-CVE-2017-12151
ALPINE-CVE-2017-12151
PUBLISHED
CVSS 7.400000095367432 HIGH
A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects, allowing an attacker to read or alter the contents of the connection via a man-in-the-middle attack.
Risk Scores
CVSS 3.0
7.400000095367432
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.24 | samba | 0, 4.5.0 |
| Alpine:v3.18 | samba | 4.6.6-r1, 4.6.6-r0, 4.6.5-r0 |
| Alpine:v3.12 | samba | 4.2.1-r2, 0, 4.6.6-r1 |
| Alpine:v3.7 | samba | 4.2.1-r1, 4.2.1-r0, 4.2.0-r1 |
| Alpine:v3.17 | samba | 4.6.1-r1, 0, 3.2.10-r0 |
| Alpine:v3.6 | samba | 3.5.6-r1, 3.5.6-r2, 3.5.6-r3 |
| Alpine:v3.15 | samba | 3.6.1-r2, 3.6.1-r0, 3.5.9-r1 |
| Alpine:v3.8 | samba | 4.4.2-r0, 4.5.0, 0 |
| Alpine:v3.21 | samba | 4.2.1-r2, 4.2.1-r1, 4.2.1-r0 |
| Alpine:v3.16 | samba | 3.5.6-r0, 4.1.0-r2, 3.6.9-r0 |
| Alpine:v3.14 | samba | 3.5.6-r0, 0, 3.2.10-r0 |
| Alpine:v3.5 | samba | 3.2.10-r0, 3.2.11-r0, 3.2.8-r0 |
| Alpine:v3.22 | samba | 3.6.3-r0, 3.6.4-r0, 3.6.4-r1 |
| Alpine:v3.23 | samba | 4.2.9-r1, 3.2.8-r0, 3.2.8-r1 |
| Alpine:v3.11 | samba | 3.5.2-r0, 3.5.3-r0, 3.5.4-r0 |
| Alpine:v3.9 | samba | 3.2.10-r0, 4.4.3-r0, 0 |
| Alpine:v3.13 | samba | 4.5.0, 0, 3.2.10-r0 |
| Alpine:v3.10 | samba | 0, 3.5.3-r0, 3.5.4-r0 |
| Alpine:v3.4 | samba | 4.4.2-r1, 4.4.5-r0, 4.4.5-r1 |
| Alpine:v3.20 | samba | 4.5.3-r0, 3.2.8-r1, 3.3.5-r1 |
…and 1 more
Timeline
- Jul 27, 2018 CVE Published
- Apr 30, 2026 Distribution Patch
- Jul 8, 2026 CVE Updated