A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or modify share metadata, to perform this operation outside of the share.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsmbclientUpgrade samba-winbindUpgrade sambaUpgrade samba-vfs-iouringUpgrade python3-sambaUpgrade samba-pidlUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade libwbclient-develUpgrade libwbclientUpgrade samba-testUpgrade ctdbUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-libsUpgrade samba-test-libsUpgrade python3-samba-testUpgrade samba-develUpgrade samba-clientUpgrade samba-krb5-printingUpgrade samba-winbind-krb5-locatorUpgrade libsmbclient-develUpgrade samba-common-libsUpgrade samba-winexeUpgrade samba-winbind-clients | May 13, 2022 | May 10, 2022 |
| Alpine Linux | — | Upgrade samba | Mar 21, 2024 | Aug 23, 2022 |
| Amazon_linux_2023 | — | Upgrade samba-develUpgrade samba-krb5-printingUpgrade samba-pidlUpgrade libwbclientUpgrade samba-common-tools-debuginfoUpgrade samba-testUpgrade samba-test-debuginfoUpgrade samba-test-libs-debuginfoUpgrade python3-sambaUpgrade samba-client-libsUpgrade samba-commonUpgrade samba-common-libs-debuginfoUpgrade samba-vfs-iouringUpgrade samba-winbind-modules-debuginfoUpgrade libsmbclient-debuginfoUpgrade sambaUpgrade samba-debugsourceUpgrade samba-winbindUpgrade libnetapi-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-usersharesUpgrade python3-samba-develUpgrade samba-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade libnetapi-develUpgrade samba-winbind-krb5-locator-debuginfoUpgrade libwbclient-develUpgrade samba-winbind-clients-debuginfoUpgrade samba-winbind-clientsUpgrade samba-krb5-printing-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-common-libsUpgrade samba-test-libsUpgrade samba-dcerpc-debuginfoUpgrade libsmbclientUpgrade samba-vfs-iouring-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-client-debuginfoUpgrade samba-dcerpcUpgrade samba-dc-libsUpgrade python3-samba-testUpgrade samba-client-libs-debuginfoUpgrade libsmbclient-develUpgrade libnetapiUpgrade samba-winbind-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade samba-libsUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-clientUpgrade samba-winbind-modules | Feb 17, 2025 | Jan 10, 2022 |
| Centos_linux | — | Upgrade samba-client-libs-debuginfoUpgrade samba-commonUpgrade sambaUpgrade samba-winbind-modules-debuginfoUpgrade samba-winbindUpgrade samba-winbind-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade samba-common-libsUpgrade samba-vfs-iouringUpgrade libsmbclientUpgrade samba-debugsourceUpgrade samba-pidlUpgrade samba-test-libs-debuginfoUpgrade ctdbUpgrade samba-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade python3-samba-testUpgrade ctdb-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-winbind-modulesUpgrade libwbclient-debuginfoUpgrade samba-client-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade python3-sambaUpgrade libwbclientUpgrade samba-libsUpgrade samba-clientUpgrade samba-test-libsUpgrade samba-krb5-printingUpgrade samba-common-tools-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-testUpgrade samba-test-debuginfo | May 13, 2022 | May 10, 2022 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Aug 23, 2022 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Aug 23, 2022 |
| Oracle_linux | — | Upgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade samba-winexeUpgrade samba-vfs-iouringUpgrade libwbclient-develUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-pidlUpgrade python3-samba-testUpgrade samba-clientUpgrade samba-develUpgrade libwbclientUpgrade samba-krb5-printingUpgrade samba-testUpgrade sambaUpgrade ctdbUpgrade samba-libsUpgrade samba-common-toolsUpgrade libsmbclient-develUpgrade samba-test-libsUpgrade python3-sambaUpgrade samba-common | May 18, 2022 | Jan 10, 2022 |
| Redhat_linux | — | Upgrade samba-client-libsUpgrade samba-pidlUpgrade samba-winexe-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade sambaUpgrade python3-samba-testUpgrade samba-debugsourceUpgrade samba-winbind-modulesUpgrade python3-sambaUpgrade ctdb-debuginfoUpgrade samba-libsUpgrade libsmbclient-develUpgrade libsmbclientUpgrade libwbclientUpgrade libwbclient-develUpgrade libsmbclient-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-develUpgrade samba-debuginfoUpgrade ctdbUpgrade samba-libs-debuginfoUpgrade samba-vfs-iouringUpgrade samba-winbindUpgrade samba-commonUpgrade samba-test-libs-debuginfoUpgrade samba-testUpgrade samba-test-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-winexeUpgrade samba-winbind-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-common-toolsNo solution existsUpgrade samba-krb5-printingUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-common-libs-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-test-libsUpgrade samba-client-debuginfoUpgrade samba-winbind-krb5-locator-debuginfo | May 13, 2022 | May 10, 2022 |
| Rocky_linux | — | Upgrade samba-winexe-debuginfoUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba-common-libs-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-client-libsUpgrade samba-krb5-printing-debuginfoUpgrade samba-client-libs-debuginfoUpgrade python3-samba-testUpgrade samba-winbind-modulesUpgrade samba-winbind-debuginfoUpgrade samba-client-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade libsmbclientUpgrade python3-samba-debuginfoUpgrade samba-winbind-clientsUpgrade libwbclient-develUpgrade ctdb-debuginfoUpgrade samba-vfs-iouringUpgrade ctdbUpgrade samba-test-libsUpgrade samba-common-tools-debuginfoUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-test-debuginfoUpgrade samba-develUpgrade samba-debugsourceUpgrade libwbclient-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-clientUpgrade python3-sambaUpgrade sambaUpgrade libsmbclient-develUpgrade samba-libsUpgrade samba-testUpgrade samba-krb5-printingUpgrade samba-libs-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-winexeUpgrade samba-winbind-krb5-locatorUpgrade libwbclientUpgrade samba-debuginfo | May 20, 2022 | May 18, 2022 |
| Suse | — | Upgrade yast2-samba-clientUpgrade krb5-clientUpgrade apparmor-utilsUpgrade libtalloc2Upgrade sambaUpgrade libgnutls30-32bitUpgrade python3-ipa_hbacUpgrade samba-cephUpgrade samba-winbindUpgrade sssd-ipaUpgrade sssd-commonUpgrade p11-kit-toolsUpgrade samba-client-libsUpgrade samba-ad-dc-libs-32bitUpgrade sssd-proxyUpgrade apache2-mod_apparmorUpgrade sssd-adUpgrade libipa_hbac0Upgrade samba-ldb-ldapUpgrade tdb-toolsUpgrade ctdb-pcp-pmdaUpgrade krb5-32bitUpgrade python3-sss-murmurUpgrade sssd-winbind-idmapUpgrade libapparmor-develUpgrade krb5-plugin-preauth-spakeUpgrade libnettle6Upgrade samba-testUpgrade samba-libs-64bitUpgrade krb5-plugin-preauth-pkinitUpgrade libgnutls30Upgrade libsss_simpleifp-develUpgrade python3-tevent-32bitUpgrade sssd-krb5-commonUpgrade krb5Upgrade libhogweed4-32bitUpgrade python3-sss_nss_idmapUpgrade libtevent-develUpgrade samba-winbind-libsUpgrade libsss_idmap-develUpgrade python3-ldb-develUpgrade samba-libs-python3Upgrade samba-python3Upgrade samba-ad-dcUpgrade libsss_nss_idmap-develUpgrade sssd-toolsUpgrade libldb2-32bitUpgrade samba-docUpgrade apparmor-parser-langUpgrade p11-kit-32bitUpgrade sssd-dbusUpgrade samba-libs-python3-32bitUpgrade libnfsidmap-sssUpgrade libapparmor1Upgrade libtalloc-develUpgrade sssd-wbclientUpgrade samba-ad-dc-libsUpgrade python3-tdbUpgrade libapparmor1-32bitUpgrade libldb-develUpgrade samba-libsUpgrade libtalloc2-32bitUpgrade samba-libs-python3-64bitUpgrade talloc-manUpgrade libtevent0Upgrade samba-winbind-libs-32bitUpgrade samba-dsdb-modulesUpgrade libsamba-policy0-python3-64bitUpgrade ctdbUpgrade samba-libs-32bitUpgrade samba-develUpgrade samba-client-32bitUpgrade python3-tallocUpgrade pam_apparmor-32bitUpgrade libsamba-policy0-python3Upgrade libldb2Upgrade libsss_nss_idmap0Upgrade libsamba-policy-develUpgrade libp11-kit0-32bitUpgrade libnettle6-32bitUpgrade libtdb-develUpgrade apparmor-abstractionsUpgrade python3-ldbUpgrade samba-clientUpgrade krb5-serverUpgrade p11-kitUpgrade krb5-develUpgrade samba-client-libs-32bitUpgrade python3-apparmorUpgrade sssdUpgrade python3-ldb-32bitUpgrade ldb-toolsUpgrade samba-client-64bitUpgrade samba-toolUpgrade krb5-plugin-preauth-otpUpgrade samba-gpupdateUpgrade krb5-mini-develUpgrade libsss_certmap-develUpgrade samba-devel-32bitUpgrade apparmor-utils-langUpgrade libipa_hbac-develUpgrade python3-tdb-32bitUpgrade apparmor-docsUpgrade p11-kit-nss-trustUpgrade python3-sssd-configUpgrade sssd-ldapUpgrade libhogweed4Upgrade krb5-miniUpgrade apparmor-parserUpgrade libsamba-policy0-python3-32bitUpgrade perl-apparmorUpgrade python3-talloc-32bitUpgrade p11-kit-develUpgrade libsss_certmap0Upgrade libsss_idmap0Upgrade apparmor-profilesUpgrade ruby-apparmorUpgrade ca-certificatesUpgrade libp11-kit0Upgrade libtevent0-32bitUpgrade libsamba-policy-python3-develUpgrade python3-talloc-develUpgrade python3-teventUpgrade libtdb1-32bitUpgrade tevent-manUpgrade pam_apparmorUpgrade libsss_simpleifp0Upgrade sssd-wbclient-develUpgrade krb5-plugin-kdb-ldapUpgrade krb5-devel-32bitUpgrade sssd-krb5Upgrade libtdb1Upgrade python-sssd-config | Feb 2, 2022 | Feb 1, 2022 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Aug 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub