All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition. SMB1 with unix extensions has to be enabled in order for this attack to succeed.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade samba-test-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-winexeUpgrade libwbclient-develUpgrade libwbclientUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-clientUpgrade python3-sambaUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-krb5-printingUpgrade python3-samba-testUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-testUpgrade sambaUpgrade samba-develUpgrade samba-winbind-modulesUpgrade ctdbUpgrade samba-vfs-iouringUpgrade samba-pidlUpgrade samba-commonUpgrade libsmbclient-devel | May 13, 2022 | Feb 21, 2022 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Feb 21, 2022 |
| Amazon_linux_2023 | — | Upgrade libwbclient-debuginfoUpgrade python3-sambaUpgrade samba-libsUpgrade samba-dc-libs-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade libnetapiUpgrade samba-debugsourceUpgrade samba-winbind-modules-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-develUpgrade samba-test-debuginfoUpgrade samba-client-libsUpgrade samba-common-libs-debuginfoUpgrade libsmbclient-debuginfoUpgrade python3-samba-develUpgrade samba-debuginfoUpgrade libwbclientUpgrade samba-ldb-ldap-modules-debuginfoUpgrade libnetapi-debuginfoUpgrade samba-testUpgrade samba-krb5-printingUpgrade samba-dcerpc-debuginfoUpgrade samba-usersharesUpgrade samba-vfs-iouringUpgrade samba-common-tools-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade samba-pidlUpgrade samba-dc-libsUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-winbind-debuginfoUpgrade python3-samba-debuginfoUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-test-libsUpgrade libwbclient-develUpgrade samba-vfs-iouring-debuginfoUpgrade samba-dcerpcUpgrade samba-winbindUpgrade samba-client-debuginfoUpgrade samba-common-libsUpgrade libsmbclient-develUpgrade samba-test-libs-debuginfoUpgrade sambaUpgrade python3-samba-testUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade libnetapi-devel | Feb 17, 2025 | Jan 31, 2022 |
| Centos_linux | — | Upgrade samba-testUpgrade samba-winbind-clients-debuginfoUpgrade samba-pidlUpgrade samba-commonUpgrade libwbclientUpgrade samba-clientUpgrade samba-test-libs-debuginfoUpgrade samba-test-debuginfoUpgrade python3-samba-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-krb5-printingUpgrade samba-libs-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-debugsourceUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-libsUpgrade python3-sambaUpgrade samba-test-libsUpgrade samba-winbind-modules-debuginfoUpgrade samba-vfs-iouringUpgrade samba-client-libs-debuginfoUpgrade sambaUpgrade samba-client-libsUpgrade ctdbUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade libsmbclient-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-debuginfoUpgrade libsmbclientUpgrade samba-vfs-iouring-debuginfoUpgrade samba-client-debuginfoUpgrade python3-samba-testUpgrade samba-winbind-debuginfoUpgrade ctdb-debuginfo | May 13, 2022 | Feb 21, 2022 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Feb 21, 2022 |
| Freebsd | — | Upgrade samba415Upgrade samba413Upgrade samba414 | Nov 4, 2022 | Feb 1, 2022 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Feb 21, 2022 |
| Oracle_linux | — | Upgrade libsmbclient-develUpgrade samba-krb5-printingUpgrade sambaUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade python3-samba-testUpgrade samba-winbind-modulesUpgrade samba-develUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-libsUpgrade python3-sambaUpgrade samba-winexeUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade libwbclientUpgrade samba-pidlUpgrade ctdbUpgrade samba-vfs-iouringUpgrade libsmbclientUpgrade samba-test-libsUpgrade libwbclient-develUpgrade samba-testUpgrade samba-common | May 18, 2022 | Jan 31, 2022 |
| Redhat_linux | — | Upgrade samba-commonUpgrade samba-winexe-debuginfoUpgrade samba-debuginfoUpgrade samba-debugsourceUpgrade libwbclient-develUpgrade samba-test-libs-debuginfoUpgrade samba-testUpgrade samba-winbind-krb5-locator-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-vfs-iouringUpgrade samba-pidlUpgrade samba-common-tools-debuginfoUpgrade ctdbUpgrade samba-common-libs-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade libsmbclient-debuginfoUpgrade ctdb-debuginfoUpgrade samba-client-debuginfoUpgrade samba-develUpgrade libsmbclientUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbindUpgrade python3-sambaUpgrade samba-winbind-clients-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade python3-samba-debuginfoUpgrade samba-winexeUpgrade samba-test-debuginfoUpgrade libsmbclient-develUpgrade python3-samba-testUpgrade samba-winbind-modules-debuginfoUpgrade samba-krb5-printingUpgrade samba-test-libsUpgrade sambaUpgrade samba-common-toolsUpgrade samba-vfs-iouring-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-libs | May 13, 2022 | Feb 21, 2022 |
| Rocky_linux | — | Upgrade samba-testUpgrade samba-develUpgrade libwbclient-debuginfoUpgrade samba-winbind-clientsUpgrade python3-sambaUpgrade samba-winbind-modules-debuginfoUpgrade samba-libs-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-common-libsUpgrade samba-debuginfoUpgrade ctdbUpgrade samba-common-toolsUpgrade samba-test-libsUpgrade python3-samba-debuginfoUpgrade samba-debugsourceUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-libsUpgrade samba-krb5-printingUpgrade libsmbclient-develUpgrade samba-clientUpgrade samba-common-tools-debuginfoUpgrade samba-winexeUpgrade samba-test-libs-debuginfoUpgrade samba-test-debuginfoUpgrade libsmbclientUpgrade samba-krb5-printing-debuginfoUpgrade samba-client-debuginfoUpgrade samba-vfs-iouringUpgrade samba-winbind-clients-debuginfoUpgrade sambaUpgrade samba-winexe-debuginfoUpgrade samba-winbindUpgrade libwbclient-develUpgrade samba-winbind-debuginfoUpgrade samba-client-libsUpgrade samba-common-libs-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade libwbclientUpgrade python3-samba-testUpgrade samba-winbind-modulesUpgrade ctdb-debuginfo | May 20, 2022 | Feb 21, 2022 |
| Samba | — | Upgrade to Samba 4.15.5 or later. | Mar 9, 2022 | Feb 21, 2022 |
| Suse | — | Upgrade ctdb-pcp-pmdaUpgrade libgnutls30Upgrade samba-cephUpgrade p11-kit-develUpgrade samba-client-64bitUpgrade samba-develUpgrade libldb2Upgrade apparmor-profilesUpgrade python3-ldb-32bitUpgrade libsss_idmap-develUpgrade pam_apparmorUpgrade python3-tallocUpgrade samba-client-32bitUpgrade p11-kitUpgrade libsamba-policy0-python3-64bitUpgrade python3-talloc-32bitUpgrade libsamba-policy0-python3-32bitUpgrade sssd-krb5Upgrade sssd-proxyUpgrade sssdUpgrade ca-certificatesUpgrade samba-ad-dcUpgrade samba-ad-dc-libsUpgrade apparmor-parserUpgrade krb5-mini-develUpgrade pam_apparmor-32bitUpgrade python3-sssd-configUpgrade krb5-devel-32bitUpgrade tevent-manUpgrade libhogweed4Upgrade krb5-plugin-kdb-ldapUpgrade samba-winbind-libs-32bitUpgrade libsss_idmap0Upgrade apparmor-abstractionsUpgrade sssd-krb5-commonUpgrade samba-libs-32bitUpgrade libsamba-policy-develUpgrade krb5-miniUpgrade krb5-develUpgrade ctdbUpgrade libp11-kit0Upgrade python-sssd-configUpgrade libapparmor-develUpgrade libnettle6-32bitUpgrade libsss_nss_idmap0Upgrade python3-tdb-32bitUpgrade libsamba-policy-python3-develUpgrade p11-kit-toolsUpgrade p11-kit-nss-trustUpgrade libtdb1-32bitUpgrade libtdb-develUpgrade samba-docUpgrade apparmor-parser-langUpgrade sssd-adUpgrade samba-gpupdateUpgrade samba-clientUpgrade sssd-ldapUpgrade libldb-develUpgrade samba-toolUpgrade krb5-serverUpgrade perl-apparmorUpgrade samba-devel-32bitUpgrade libp11-kit0-32bitUpgrade libtalloc2-32bitUpgrade libtevent-develUpgrade krb5-clientUpgrade samba-ldb-ldapUpgrade talloc-manUpgrade libnettle6Upgrade sssd-commonUpgrade yast2-samba-clientUpgrade samba-libs-64bitUpgrade python3-sss_nss_idmapUpgrade libipa_hbac-develUpgrade krb5-plugin-preauth-pkinitUpgrade samba-testUpgrade samba-ad-dc-libs-32bitUpgrade python3-apparmorUpgrade krb5Upgrade sssd-wbclientUpgrade ldb-toolsUpgrade python3-tevent-32bitUpgrade samba-libs-python3Upgrade libsss_nss_idmap-develUpgrade samba-winbind-libsUpgrade samba-libs-python3-64bitUpgrade sssd-wbclient-develUpgrade apache2-mod_apparmorUpgrade libldb2-32bitUpgrade libtdb1Upgrade sambaUpgrade libhogweed4-32bitUpgrade krb5-plugin-preauth-spakeUpgrade libapparmor1-32bitUpgrade libtalloc2Upgrade sssd-dbusUpgrade samba-client-libsUpgrade python3-talloc-develUpgrade samba-client-libs-32bitUpgrade libnfsidmap-sssUpgrade samba-winbindUpgrade samba-python3Upgrade python3-ipa_hbacUpgrade libtevent0-32bitUpgrade krb5-32bitUpgrade sssd-ipaUpgrade tdb-toolsUpgrade libipa_hbac0Upgrade sssd-winbind-idmapUpgrade python3-sss-murmurUpgrade libgnutls30-32bitUpgrade libsss_simpleifp0Upgrade apparmor-docsUpgrade samba-libsUpgrade samba-dsdb-modulesUpgrade libsamba-policy0-python3Upgrade apparmor-utils-langUpgrade ruby-apparmorUpgrade libsss_certmap0Upgrade p11-kit-32bitUpgrade python3-ldbUpgrade libapparmor1Upgrade libtalloc-develUpgrade libtevent0Upgrade libsss_certmap-develUpgrade python3-tdbUpgrade krb5-plugin-preauth-otpUpgrade sssd-toolsUpgrade apparmor-utilsUpgrade python3-ldb-develUpgrade python3-teventUpgrade samba-libs-python3-32bitUpgrade libsss_simpleifp-devel | Feb 2, 2022 | Feb 1, 2022 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub