A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libwbclient-develUpgrade libsmbclient-develUpgrade samba-develUpgrade samba-vfs-iouring | May 4, 2022 | Mar 2, 2022 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Mar 2, 2022 |
| Centos_linux | — | Upgrade libsmbclient-debuginfoUpgrade python3-samba-testUpgrade samba-winbind-modules-debuginfoUpgrade samba-common-libsUpgrade samba-winbind-debuginfoUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-vfs-iouring-debuginfoUpgrade samba-debuginfoUpgrade samba-commonUpgrade libwbclient-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-debugsourceUpgrade samba-test-libs-debuginfoUpgrade libsmbclientUpgrade ctdbUpgrade sambaUpgrade samba-vfs-iouringUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade ctdb-debuginfoUpgrade samba-pidlUpgrade samba-libs-debuginfoUpgrade samba-krb5-printingUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-common-toolsUpgrade samba-test-debuginfoUpgrade samba-common-tools-debuginfoUpgrade libwbclientUpgrade samba-krb5-printing-debuginfoUpgrade python3-sambaUpgrade samba-winbind-clients-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libs-debuginfoUpgrade samba-testUpgrade samba-test-libsUpgrade samba-client-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-client | Dec 14, 2021 | Dec 13, 2021 |
| Debian | — | Upgrade samba | Nov 4, 2022 | Mar 2, 2022 |
| Freebsd | — | Upgrade samba413Upgrade samba415Upgrade samba414 | Nov 4, 2022 | Nov 10, 2021 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Mar 2, 2022 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.13.8-11.4.42.0.1.113.0 on Solaris 11.4Upgrade service/network/samba to version 4.13.14-11.4.42.0.1.113.0 on Solaris 11.4 | Feb 17, 2022 | Feb 17, 2022 |
| Oracle_linux | — | Upgrade samba-clientUpgrade samba-common-libsUpgrade samba-libsUpgrade samba-winbindUpgrade python3-samba-testUpgrade samba-winexeUpgrade libsmbclientUpgrade samba-commonUpgrade samba-develUpgrade libsmbclient-develUpgrade libwbclient-develUpgrade samba-winbind-clientsUpgrade sambaUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-modulesUpgrade samba-pidlUpgrade samba-vfs-iouringUpgrade samba-client-libsUpgrade python3-sambaUpgrade samba-test-libsUpgrade samba-testUpgrade samba-krb5-printingUpgrade ctdbUpgrade libwbclient | Dec 14, 2021 | Nov 9, 2021 |
| Redhat_linux | — | Upgrade samba-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-vfs-iouringUpgrade ctdb-tests-debuginfoUpgrade samba-testUpgrade samba-krb5-printingUpgrade libwbclient-debuginfoUpgrade ctdb-debuginfoUpgrade ctdbUpgrade samba-winexe-debuginfoUpgrade samba-pidlUpgrade samba-test-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade python3-sambaUpgrade samba-debugsourceUpgrade libsmbclient-debuginfoUpgrade samba-common-tools-debuginfoUpgrade libwbclientUpgrade samba-common-libs-debuginfoUpgrade ctdb-testsUpgrade samba-libsUpgrade samba-client-libsUpgrade python3-samba-testUpgrade samba-client-libs-debuginfoUpgrade samba-test-libsUpgrade samba-common-toolsUpgrade samba-test-libs-debuginfoUpgrade libsmbclientUpgrade libsmbclient-develUpgrade samba-client-debuginfoUpgrade libwbclient-develUpgrade samba-vfs-iouring-debuginfoUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-develUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-clientUpgrade python3-samba-debuginfoUpgrade samba-winexeUpgrade samba-winbind-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-common-libs | Dec 14, 2021 | Dec 13, 2021 |
| Rocky_linux | — | Upgrade libsmbclient-debuginfoUpgrade libwbclientUpgrade samba-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade libsmbclientUpgrade samba-develUpgrade ctdbUpgrade samba-vfs-iouringUpgrade samba-common-libsUpgrade samba-krb5-printing-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-test-libs-debuginfoUpgrade libwbclient-develUpgrade python3-samba-testUpgrade samba-test-debuginfoUpgrade samba-krb5-printingUpgrade samba-vfs-iouring-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-clientsUpgrade ctdb-debuginfoUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-debuginfoUpgrade samba-winbind-modulesUpgrade samba-client-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-winexeUpgrade libsmbclient-develUpgrade samba-winbindUpgrade python3-sambaUpgrade samba-libsUpgrade sambaUpgrade libwbclient-debuginfoUpgrade samba-debugsourceUpgrade samba-winbind-krb5-locator-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-clientUpgrade samba-common-libs-debuginfoUpgrade samba-client-libsUpgrade samba-common-tools-debuginfoUpgrade samba-testUpgrade samba-winexe-debuginfoUpgrade samba-test-libs | Mar 12, 2024 | Mar 2, 2022 |
| Samba | — | Upgrade to Samba 4.15.2 or later.Upgrade to Samba 4.13.14 or later.Upgrade to Samba 4.14.10 or later. | Mar 10, 2022 | Mar 2, 2022 |
| Suse | — | Upgrade samba-libs-python3-64bitUpgrade libsamba-credentials-develUpgrade libdcerpc-samr-develUpgrade samba-dsdb-modulesUpgrade libdcerpc-samr0-32bitUpgrade libtevent-util-develUpgrade samba-client-libs-32bitUpgrade libndr-krb5pac0-64bitUpgrade libsamba-policy0-python3-64bitUpgrade samba-client-libsUpgrade libsamdb-develUpgrade samba-libs-python3Upgrade libdcerpc0-64bitUpgrade libndr-standard0-32bitUpgrade libdcerpc0-32bitUpgrade libsamba-util0-32bitUpgrade libndr-standard-develUpgrade libnetapi0Upgrade libsmbclient-develUpgrade libdcerpc-develUpgrade libsamba-hostconfig0Upgrade libtevent-util0-64bitUpgrade samba-docUpgrade samba-testUpgrade libsamba-passdb-develUpgrade libwbclient0Upgrade libsamba-policy-python3-develUpgrade libsamba-util-develUpgrade libtevent-util0Upgrade libsamba-credentials0Upgrade samba-libs-32bitUpgrade libnetapi0-32bitUpgrade libdcerpc-binding0-64bitUpgrade samba-winbind-32bitUpgrade ctdb-testsUpgrade samba-ad-dc-32bitUpgrade libsmbldap2-32bitUpgrade samba-libsUpgrade libnetapi0-64bitUpgrade ldb-toolsUpgrade samba-clientUpgrade samba-winbindUpgrade libsamba-policy0-python3-32bitUpgrade libndr-krb5pac0-32bitUpgrade samba-develUpgrade libwbclient0-64bitUpgrade libsmbclient0-32bitUpgrade libsamba-policy-develUpgrade samba-client-32bitUpgrade libndr-nbt-develUpgrade libldb2Upgrade libsamba-policy0-python3Upgrade libndr-nbt0Upgrade sambaUpgrade samba-winbind-64bitUpgrade ctdbUpgrade libdcerpc-binding0Upgrade libsmbconf-develUpgrade samba-libs-64bitUpgrade libsmbldap-develUpgrade libndr-nbt0-64bitUpgrade libldb-develUpgrade libndr-krb5pac0Upgrade python3-ldb-develUpgrade libsamdb0-32bitUpgrade libsmbclient0Upgrade samba-cephUpgrade libsmbconf0Upgrade libdcerpc0Upgrade libldb2-32bitUpgrade libsamdb0-64bitUpgrade libsamba-errors0-32bitUpgrade libsmbldap2-64bitUpgrade libndr0Upgrade libndr1-64bitUpgrade libnetapi-develUpgrade libwbclient0-32bitUpgrade libsmbconf0-32bitUpgrade libsamdb0Upgrade libwbclient-develUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc-samr0Upgrade samba-gpupdateUpgrade libsmbconf0-64bitUpgrade libsamba-hostconfig-develUpgrade libsamba-util0-64bitUpgrade libdcerpc-samr0-64bitUpgrade python3-ldbUpgrade libndr-standard0-64bitUpgrade libsamba-util0Upgrade samba-core-develUpgrade libndr-develUpgrade libsamba-credentials0-64bitUpgrade libnetapi-devel-32bitUpgrade libsamba-credentials0-32bitUpgrade libsamba-passdb0Upgrade libsamba-hostconfig0-64bitUpgrade samba-ad-dcUpgrade libndr-nbt0-32bitUpgrade libsamba-errors0-64bitUpgrade libndr-krb5pac-develUpgrade samba-winbind-libsUpgrade libsamba-errors-develUpgrade python3-ldb-32bitUpgrade libsmbclient0-64bitUpgrade libtevent-util0-32bitUpgrade libndr1Upgrade samba-ldb-ldapUpgrade samba-ad-dc-64bitUpgrade libsamba-passdb0-64bitUpgrade samba-libs-python3-32bitUpgrade libnetapi-devel-64bitUpgrade libsmbldap2Upgrade libsamba-hostconfig0-32bitUpgrade libndr1-32bitUpgrade libndr0-32bitUpgrade ctdb-pcp-pmdaUpgrade samba-client-64bitUpgrade samba-ad-dc-libsUpgrade samba-winbind-libs-32bitUpgrade libsamba-errors0Upgrade samba-python3Upgrade libsamba-passdb0-32bitUpgrade libndr-standard0 | Nov 11, 2021 | Nov 10, 2021 |
| Ubuntu | — | Upgrade samba | Nov 12, 2021 | Nov 10, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub