Synced 02 Nov 2026 13:39 UTC Account

Is Samba 3.6.25 patched?

Samba · cycle 3.6 · end of life
3.6.250/100Critical · exploited

Current stable (4.25.1): 97/100

Minimum safe version4.21.0

3.6.25 has 17 open critical-or-high vulnerabilities. Run 4.21.0 or later to clear them. See what 4.21.0 fixes →

Upgrade impact: Major upgrade. Crossing a major version usually means breaking changes. Review the vendor’s upgrade / migration guide and test before you roll it out.

2 of the vulnerabilities affecting 3.6.25 are linked to ransomware campaigns (CISA KEV) — prioritise patching.
Health score0/100
Open issues49
Exploited now2
Cycle 3.6 EOL2015-03-04
Latest release4.25.1

Summary iPlain-English security status for Samba 3.6.25, built from its CVEs, active-exploitation data, end-of-life date and latest release.

Samba 3.6.25 is part of the 3.6 release line. 2 actively-exploited vulnerabilities affect it (CISA KEV). 2 are linked to ransomware campaigns (CISA KEV). The minimum safe version is 4.21.0 — upgrade to it or later to clear the open critical/high issues. The 3.6 line reached end-of-life on 2015-03-04, so it no longer receives security patches. The latest supported Samba release is 4.25.1.

Known issues affecting 3.6.25

Exploited first, then by exploitation probability.

CVE-2017-7494 CRITICAL exploited ransomware EPSS 99% → fixed in 4.6.4 CVE-2020-1472 MEDIUM exploited ransomware EPSS 99% → fixed in 4.12.7 CVE-2021-44142 HIGH EPSS 74% → fixed in 4.15.5 CVE-2023-34966 HIGH EPSS 62% → fixed in 4.18.5 CVE-2023-34967 MEDIUM EPSS 61% → fixed in 4.18.5 CVE-2016-2118 HIGH EPSS 37% → fixed in 4.4.1 CVE-2017-15275 HIGH EPSS 21% → fixed in 4.7.3 CVE-2015-5370 MEDIUM EPSS 19% → see advisory CVE-2015-5299 MEDIUM EPSS 14% → fixed in 4.3.3 CVE-2015-5252 HIGH EPSS 13% → fixed in 4.3.3 CVE-2017-12150 HIGH EPSS 13% → fixed in 4.6.8 CVE-2015-7560 MEDIUM EPSS 13% → fixed in 4.3.6 CVE-2017-2619 HIGH EPSS 11% → fixed in 4.6.1 CVE-2016-2115 MEDIUM EPSS 10% → see advisory CVE-2016-2112 MEDIUM EPSS 9% → see advisory CVE-2016-2125 MEDIUM EPSS 9% → fixed in 4.5.3 CVE-2016-2110 MEDIUM EPSS 8% → see advisory CVE-2017-12163 MEDIUM EPSS 8% → fixed in 4.6.8 CVE-2015-5296 MEDIUM EPSS 7% → fixed in 4.3.3 CVE-2022-42898 HIGH EPSS 7% → fixed in 4.17.3

Other Samba versions

Check another release line of Samba.

Samba 4.25.1Samba 4.24.8Samba 4.23.13Samba 4.22.11Samba 4.21.10Samba 4.20.8Samba 4.19.9Samba 4.18.11Samba 4.17.12Samba 4.16.11Samba 4.15.13Samba 4.14.14Samba 4.13.17Samba 4.12.15Samba 4.11.17Samba 4.10.18Samba 4.9.18Samba 4.8.12Samba 4.7.12Samba 4.6.16Samba 4.5.16Samba 4.4.16Samba 4.3.13Samba 4.2.14Samba 4.1.23Samba 4.0.26Samba 3.5.22Samba 3.4.17Samba 3.3.16Samba 3.2.15Samba 3.0.37

Frequently asked

Is Samba 3.6.25 patched?

No — 2 actively-exploited vulnerabilities affect Samba 3.6.25. Upgrade to at least 4.21.0.

What version should I upgrade Samba 3.6.25 to?

Upgrade Samba 3.6.25 to at least 4.21.0 to clear its 17 open critical-or-high vulnerabilities.

When does Samba 3.6 reach end-of-life?

Samba 3.6 reached end-of-life on 2015-03-04 and no longer receives security patches.

What is the latest version of Samba?

The latest supported Samba release is 4.25.1.

Is Samba 3.6.25 still receiving security updates?

No — Samba 3.6.25 is on the 3.6 line, which reached end-of-life on 2015-03-04 and no longer receives security updates. Upgrade to 4.25.1 or later to stay supported.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Samba's official advisory before you patch or upgrade.