A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libwbclient-develUpgrade samba-develUpgrade libsmbclient-devel | May 4, 2022 | May 5, 2021 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | May 5, 2021 |
| Amazon Linux Ami 2 | — | Upgrade ctdb-testsUpgrade samba-pythonUpgrade samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade samba-krb5-printingUpgrade samba-develUpgrade libsmbclient-develUpgrade samba-libsUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-commonUpgrade samba-test-libsUpgrade sambaUpgrade ctdbUpgrade samba-winbind-clientsUpgrade samba-vfs-glusterfsUpgrade samba-dcUpgrade samba-pidlUpgrade samba-python-testUpgrade samba-dc-libsUpgrade samba-clientUpgrade samba-common-libsUpgrade libwbclient-develUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-debuginfo | Jul 2, 2021 | May 5, 2021 |
| Amazon_linux | — | Upgrade samba | Feb 19, 2022 | Apr 29, 2021 |
| Centos_linux | — | Upgrade samba-client-libs-debuginfoUpgrade samba-commonUpgrade samba-winbind-modules-debuginfoUpgrade libsmbclient-develUpgrade libsmbclientUpgrade sambaUpgrade samba-test-libs-debuginfoUpgrade samba-common-toolsUpgrade samba-test-debuginfoUpgrade samba-develUpgrade samba-client-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade libwbclientUpgrade samba-krb5-printingUpgrade python3-sambaUpgrade samba-winbind-krb5-locatorUpgrade samba-winbindUpgrade samba-libs-debuginfoUpgrade samba-common-libsUpgrade samba-winbind-clients-debuginfoUpgrade samba-debuginfoUpgrade samba-winexeUpgrade samba-winbind-modulesUpgrade libsmbclient-debuginfoUpgrade samba-dc-libsUpgrade ctdbUpgrade ctdb-debuginfoUpgrade samba-vfs-glusterfsUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade python3-samba-testUpgrade samba-common-tools-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-debugsourceUpgrade samba-pidlUpgrade libwbclient-develUpgrade samba-python-testUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-winexe-debuginfoUpgrade samba-clientUpgrade samba-test-libsUpgrade samba-dcUpgrade python3-samba-debuginfoUpgrade ctdb-testsUpgrade samba-common-libs-debuginfoUpgrade samba-testUpgrade samba-client-libsUpgrade ctdb-tests-debuginfo | Jun 9, 2021 | May 5, 2021 |
| Debian | — | Upgrade samba | May 31, 2021 | May 5, 2021 |
| Freebsd | — | Upgrade samba413Upgrade samba412Upgrade samba414 | Nov 4, 2022 | May 1, 2021 |
| Gentoo Linux | — | Upgrade net-fs/samba. | May 28, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-toolsUpgrade samba-clientUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-client-libsUpgrade sambaUpgrade libwbclient | Sep 16, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade samba-clientUpgrade samba-pythonUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade samba-commonUpgrade samba | Oct 26, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-libsUpgrade samba-commonUpgrade libwbclientUpgrade samba-winbindUpgrade samba-common-toolsUpgrade samba-pythonUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade samba-clientUpgrade libsmbclient | Sep 7, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-winbind-krb5-locatorUpgrade libwbclientUpgrade samba-winbindUpgrade samba-test-libsUpgrade samba-libsUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-commonUpgrade python2-sambaUpgrade samba-krb5-printingUpgrade python3-sambaUpgrade ctdbUpgrade sambaUpgrade samba-testUpgrade python3-samba-testUpgrade samba-pidlUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-dc-libsUpgrade samba-common-libsUpgrade libsmbclientUpgrade python2-samba-testUpgrade ctdb-tests | Aug 10, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsmbclientUpgrade samba-winbindUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade libwbclientUpgrade samba-commonUpgrade samba | Aug 10, 2021 | May 5, 2021 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.13.8-11.4.39.0.1.107.0 on Solaris 11.4Upgrade service/network/samba to version 4.13.8-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | May 5, 2021 |
| Oracle_linux | — | Upgrade samba-winexeUpgrade python3-sambaUpgrade samba-libsUpgrade python3-samba-testUpgrade samba-common-libsUpgrade libsmbclient-develUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-test-libsUpgrade samba-dc-libsUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba-develUpgrade samba-pythonUpgrade sambaUpgrade libwbclientUpgrade samba-testUpgrade samba-pidlUpgrade libwbclient-develUpgrade libsmbclientUpgrade samba-commonUpgrade samba-vfs-glusterfsUpgrade samba-python-testUpgrade ctdbUpgrade samba-dcUpgrade ctdb-testsUpgrade samba-winbindUpgrade samba-krb5-printing | Jun 10, 2021 | Apr 29, 2021 |
| Qnap Qts | — | Upgrade QNAP QTS to the latest version | Aug 4, 2025 | Jun 16, 2021 |
| Redhat_linux | — | Upgrade samba-common-libs-debuginfoUpgrade libwbclient-develUpgrade samba-vfs-glusterfs-debuginfoUpgrade python3-samba-testUpgrade ctdb-testsUpgrade samba-winbind-modulesUpgrade samba-vfs-glusterfsUpgrade samba-client-libs-debuginfoUpgrade samba-dc-libsUpgrade samba-dcUpgrade samba-common-toolsUpgrade python3-samba-debuginfoUpgrade samba-winexeUpgrade ctdb-debuginfoUpgrade samba-debugsourceUpgrade samba-clientUpgrade ctdb-tests-debuginfoUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade libwbclient-debuginfoUpgrade samba-winbindUpgrade samba-winbind-krb5-locatorUpgrade samba-python-testUpgrade samba-winbind-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-pythonUpgrade samba-common-libsUpgrade python3-sambaUpgrade samba-common-tools-debuginfoUpgrade samba-commonUpgrade samba-testUpgrade samba-winbind-modules-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-client-debuginfoUpgrade samba-pidlUpgrade samba-winbind-clients-debuginfoUpgrade samba-develUpgrade samba-test-libsUpgrade libsmbclient-develUpgrade libsmbclient-debuginfoUpgrade samba-libsUpgrade samba-test-debuginfoUpgrade samba-client-libsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade sambaUpgrade samba-debuginfoNo solution existsUpgrade samba-winexe-debuginfoUpgrade ctdbUpgrade libwbclientUpgrade samba-krb5-printingUpgrade samba-libs-debuginfo | Jun 9, 2021 | May 5, 2021 |
| Rocky_linux | — | Upgrade samba-develUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade python3-samba-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-winexeUpgrade samba-test-libs-debuginfoUpgrade samba-client-debuginfoUpgrade python3-samba-testUpgrade samba-common-tools-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-winbind-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade ctdbUpgrade samba-client-libs-debuginfoUpgrade samba-debugsourceUpgrade samba-test-libsUpgrade samba-common-toolsUpgrade samba-test-debuginfoUpgrade libwbclient-develUpgrade samba-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-libsUpgrade samba-winbind-clients-debuginfoUpgrade libwbclient-debuginfoUpgrade ctdb-debuginfoUpgrade samba-testUpgrade libwbclientUpgrade ctdb-testsUpgrade samba-common-libs-debuginfoUpgrade python3-sambaUpgrade samba-winexe-debuginfoUpgrade sambaUpgrade ctdb-tests-debuginfoUpgrade samba-winbindUpgrade samba-winbind-modules-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-client-libsUpgrade samba-krb5-printingUpgrade libsmbclient-devel | May 5, 2022 | May 5, 2021 |
| Samba | — | Upgrade to Samba 4.14.4 or later.Upgrade to Samba 4.12.15 or later.Upgrade to Samba 4.13.8 or later. | Jun 11, 2021 | May 5, 2021 |
| Suse | — | Upgrade libndr-develUpgrade libsamdb0Upgrade libwbclient-develUpgrade libndr-standard0-32bitUpgrade libndr-nbt0-32bitUpgrade libwbclient0-32bitUpgrade samba-core-develUpgrade libndr-krb5pac0Upgrade ctdb-pcp-pmdaUpgrade libtevent-util0Upgrade samba-cephUpgrade libnetapi-devel-32bitUpgrade libdcerpc-atsvc0Upgrade ldapsmbUpgrade libtalloc2Upgrade libdcerpc0Upgrade libsamba-policy0Upgrade libndr-nbt-develUpgrade libtevent-util0-32bitUpgrade libnetapi0Upgrade libsmbldap2-32bitUpgrade libtalloc2-32bitUpgrade samba-python3Upgrade samba-ldb-ldapUpgrade samba-ad-dcUpgrade samba-ad-dc-libsUpgrade samba-libs-python3-32bitUpgrade libsmbconf-develUpgrade samba-winbind-libsUpgrade samba-winbindUpgrade libsamba-errors0Upgrade samba-docUpgrade samba-dsdb-modulesUpgrade samba-32bitUpgrade libndr1-32bitUpgrade libsamba-credentials-develUpgrade libndr-krb5pac-develUpgrade libdcerpc-binding0Upgrade samba-pythonUpgrade libsmbldap-develUpgrade samba-libs-python3Upgrade libsamba-passdb0-32bitUpgrade libsmbldap0Upgrade sambaUpgrade libdcerpc-samr0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libtdb1-32bitUpgrade libndr-nbt0Upgrade samba-winbind-libs-32bitUpgrade libdcerpc-develUpgrade libsamba-passdb0Upgrade ctdb-testsUpgrade samba-gpupdateUpgrade samba-winbind-32bitUpgrade samba-client-libsUpgrade samba-libsUpgrade libsmbconf0-32bitUpgrade samba-libs-pythonUpgrade libsamba-util0Upgrade libsamdb0-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-passdb-develUpgrade libsmbclient-develUpgrade libsamba-util-develUpgrade samba-ad-dc-32bitUpgrade libnetapi-develUpgrade libtevent0Upgrade libtevent0-32bitUpgrade libsamba-hostconfig-develUpgrade samba-krb-printingUpgrade libdcerpc0-32bitUpgrade libdcerpc-binding0-32bitUpgrade samba-develUpgrade samba-client-32bitUpgrade libndr0Upgrade samba-testUpgrade libwbclient0Upgrade libsamdb-develUpgrade libndr0-32bitUpgrade libldb1Upgrade libsamba-errors-develUpgrade ctdbUpgrade libdcerpc-samr0Upgrade libndr-krb5pac0-32bitUpgrade libsamba-errors0-32bitUpgrade libndr1Upgrade libsmbconf0Upgrade libsmbldap2Upgrade libsamba-policy0-python3-32bitUpgrade libsamba-policy0-python3Upgrade libsamba-hostconfig0Upgrade libsmbldap0-32bitUpgrade libnetapi0-32bitUpgrade libtevent-util-develUpgrade libsmbclient0Upgrade libsamba-credentials0Upgrade libndr-standard0Upgrade libtdb1Upgrade samba-libs-32bitUpgrade libsamba-credentials0-32bitUpgrade libsmbclient0-32bitUpgrade libsamba-policy-python3-develUpgrade samba-clientUpgrade libsamba-policy-develUpgrade libndr-standard-develUpgrade samba-client-libs-32bitUpgrade libsamba-util0-32bit | Apr 30, 2021 | Apr 29, 2021 |
| Ubuntu | — | Upgrade samba (Ubuntu Pro)Upgrade samba | Apr 30, 2021 | Apr 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub