{"action":"Upgrade samba to 4.7.0-r0 or later.","affected":[{"fixed":"4.7.0-r0","introduced":"4.5.0"}],"component":"samba","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.20","exploited":false,"fixed_versions":["4.7.0-r0"],"id":"tcs_01M5N8Z6AH18WCDCRFDMGPWQF2","modified_at":"2026-07-08T04:31:09.428268780Z","published_at":"2018-07-27T12:29:00.223Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2017-12151","https://security.alpinelinux.org/vuln/CVE-2017-12151"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2017-12151#Alpine:v3.20/samba","url":"https://osv.dev/vulnerability/ALPINE-CVE-2017-12151"}],"summary":"A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and"}