Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate data stream (ADS).
CVSS Details
- CVSS 3.1 Base Score: 4.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | Nov 13, 2013 |
| Centos_linux | — | Upgrade samba3x-clientUpgrade samba-domainjoin-guiUpgrade libsmbclientUpgrade samba-winbindUpgrade samba3x-docUpgrade samba3x-domainjoin-guiUpgrade samba-swatUpgrade sambaUpgrade samba3xUpgrade samba-winbind-develUpgrade samba-docUpgrade samba3x-winbindUpgrade samba-clientUpgrade samba3x-swatUpgrade samba3x-winbind-develUpgrade samba-commonUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade samba3x-commonUpgrade libsmbclient-devel | Dec 1, 2016 | Nov 13, 2013 |
| Debian | — | Upgrade sambaUpgrade samba4 | Jul 30, 2024 | Nov 13, 2013 |
| Freebsd | — | Upgrade samba41Upgrade samba4Upgrade samba34Upgrade samba36Upgrade samba35 | Dec 10, 2025 | Nov 19, 2013 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Nov 13, 2013 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.6.20-0.175.1.14.0.4.0 on Solaris 11.1 | May 29, 2017 | Nov 13, 2013 |
| Oracle_linux | — | Upgrade samba-domainjoin-guiUpgrade samba3x-docUpgrade samba3x-commonUpgrade samba3x-swatUpgrade libsmbclient-develUpgrade samba-swatUpgrade samba-winbindUpgrade samba3x-winbindUpgrade libsmbclientUpgrade samba3x-clientUpgrade samba-commonUpgrade samba3x-domainjoin-guiUpgrade samba-winbind-develUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade samba-docUpgrade samba3xUpgrade sambaUpgrade samba3x-winbind-develUpgrade samba-client | Oct 16, 2024 | Nov 13, 2013 |
| Samba | — | Upgrade to Samba version 3.6.20Upgrade to Samba version 4.0.11Upgrade to Samba version 4.1.1 | Nov 13, 2013 | Nov 13, 2013 |
| Suse | — | Upgrade samba-libsUpgrade samba-x86Upgrade libsmbclient-develUpgrade libtalloc1Upgrade libndr-krb5pac0Upgrade libtevent0Upgrade libdcerpc-samr-develUpgrade libtalloc1-32bitUpgrade libdcerpc-atsvc0-32bitUpgrade libndr-standard0Upgrade cifs-mountUpgrade samba-client-32bitUpgrade libsamba-policy0-32bitUpgrade libwbclient0-32bitUpgrade libdcerpc0-32bitUpgrade libtalloc1-x86Upgrade libtevent-util0Upgrade libsmbsharemodes-develUpgrade libsmbclient0-32bitUpgrade libregistry0-32bitUpgrade libsamdb0-32bitUpgrade libndr-krb5pac-develUpgrade ldapsmbUpgrade libpdb0Upgrade libsamdb-develUpgrade libsmbclient-raw-develUpgrade libtevent-develUpgrade libldb-develUpgrade libdcerpc-binding0-32bitUpgrade samba-clientUpgrade libtalloc2-32bitUpgrade libsamba-credentials-develUpgrade libsamba-util-develUpgrade libndr-nbt-develUpgrade libsmbclient-raw0-32bitUpgrade libsamba-policy-develUpgrade libwbclient0Upgrade libsamdb0Upgrade libtdb1Upgrade libregistry0Upgrade libregistry-develUpgrade libdcerpc0Upgrade libsmbclient0-x86Upgrade libsamba-policy0Upgrade libtdb1-32bitUpgrade samba-krb-printingUpgrade libsamba-util0Upgrade libnetapi0-32bitUpgrade libndr-standard-develUpgrade libsmbldap0-32bitUpgrade libpdb-develUpgrade libtalloc2-x86Upgrade libtevent-util-develUpgrade samba-develUpgrade libsamba-hostconfig0Upgrade libsmbsharemodes0Upgrade libdcerpc-atsvc0Upgrade libtdb1-x86Upgrade libsmbldap0Upgrade libtevent0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-util0-32bitUpgrade libsamba-credentials0Upgrade libndr0-32bitUpgrade libsmbconf0Upgrade libdcerpc-binding0Upgrade libnetapi0Upgrade libdcerpc-samr0-32bitUpgrade libgensec0-32bitUpgrade libsmbclient-raw0Upgrade libtdb-develUpgrade samba-docUpgrade libldb1Upgrade libpdb0-32bitUpgrade samba-testUpgrade libndr-develUpgrade samba-winbind-x86Upgrade libsmbclient0Upgrade libndr-nbt0Upgrade libldb1-32bitUpgrade samba-winbind-32bitUpgrade libndr0Upgrade sle-sdk-releaseUpgrade libwbclient0-x86Upgrade libnetapi-develUpgrade libsamba-credentials0-32bitUpgrade libndr-krb5pac0-32bitUpgrade samba-pythonUpgrade libtalloc-develUpgrade samba-winbindUpgrade libsmbldap-develUpgrade samba-pidlUpgrade libtevent-util0-32bitUpgrade libndr-standard0-32bitUpgrade libndr-nbt0-32bitUpgrade libdcerpc-samr0Upgrade libtalloc2Upgrade libgensec0Upgrade libsmbconf0-32bitUpgrade samba-core-develUpgrade samba-32bitUpgrade libsmbconf-develUpgrade samba-client-x86Upgrade libsamba-hostconfig-develUpgrade samba-libs-32bitUpgrade samba-test-develUpgrade libwbclient-develUpgrade libdcerpc-develUpgrade libgensec-develUpgrade libdcerpc-atsvc-develUpgrade samba | Dec 12, 2013 | Nov 13, 2013 |
| Ubuntu | — | Upgrade libpam-winbindUpgrade winbindUpgrade samba | Nov 8, 2024 | Nov 13, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub