Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate data stream (ADS).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | Nov 13, 2013 |
| Centos_linux | — | Upgrade samba3x-clientUpgrade sambaUpgrade samba3x-domainjoin-guiUpgrade libsmbclientUpgrade samba3x-docUpgrade samba-domainjoin-guiUpgrade samba-swatUpgrade samba-winbindUpgrade samba-winbind-develUpgrade samba3xUpgrade samba-docUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-commonUpgrade samba3x-winbind-develUpgrade samba3x-swatUpgrade samba3x-commonUpgrade samba-winbind-clientsUpgrade libsmbclient-develUpgrade samba3x-winbind | Dec 1, 2016 | Nov 13, 2013 |
| Debian | — | Upgrade sambaUpgrade samba4 | Jul 30, 2024 | Nov 13, 2013 |
| Freebsd | — | Upgrade samba34Upgrade samba36Upgrade samba4Upgrade samba35Upgrade samba41 | Dec 10, 2025 | Nov 19, 2013 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Nov 13, 2013 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.6.20-0.175.1.14.0.4.0 on Solaris 11.1 | May 29, 2017 | Nov 13, 2013 |
| Oracle_linux | — | Upgrade samba3x-winbindUpgrade libsmbclient-develUpgrade samba3x-docUpgrade samba3x-swatUpgrade samba-domainjoin-guiUpgrade samba-swatUpgrade samba-winbindUpgrade samba3x-commonUpgrade libsmbclientUpgrade samba-winbind-develUpgrade samba-docUpgrade sambaUpgrade samba3x-clientUpgrade samba-clientUpgrade samba3x-domainjoin-guiUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade samba3x-winbind-develUpgrade samba3xUpgrade samba-common | Oct 16, 2024 | Nov 13, 2013 |
| Samba | — | Upgrade to Samba version 3.6.20Upgrade to Samba version 4.0.11Upgrade to Samba version 4.1.1 | Nov 13, 2013 | Nov 13, 2013 |
| Suse | — | Upgrade libtevent-util0Upgrade samba-krb-printingUpgrade libdcerpc-atsvc0-32bitUpgrade libndr-nbt-develUpgrade libpdb0Upgrade libdcerpc-samr-develUpgrade libsmbclient-raw-develUpgrade libsamba-util-develUpgrade samba-clientUpgrade libsamba-policy0-32bitUpgrade libtevent0Upgrade libndr-krb5pac-develUpgrade samba-client-32bitUpgrade ldapsmbUpgrade libtalloc1-32bitUpgrade libtdb1-32bitUpgrade libsamba-policy0Upgrade libdcerpc-binding0-32bitUpgrade libsmbsharemodes-develUpgrade libwbclient0Upgrade libregistry0Upgrade libndr-krb5pac0Upgrade libnetapi0-32bitUpgrade libndr-standard-develUpgrade libwbclient0-32bitUpgrade libtevent-develUpgrade libldb-develUpgrade libtalloc1Upgrade libsamdb0Upgrade libsmbclient-develUpgrade samba-x86Upgrade libtdb1Upgrade libregistry0-32bitUpgrade libsamba-util0Upgrade libtalloc2-32bitUpgrade libsamba-policy-develUpgrade libdcerpc0-32bitUpgrade libsamdb-develUpgrade libsmbclient0-32bitUpgrade cifs-mountUpgrade libregistry-develUpgrade libsmbclient0-x86Upgrade samba-libsUpgrade libsamdb0-32bitUpgrade libndr-standard0Upgrade libtalloc1-x86Upgrade libdcerpc0Upgrade libsamba-credentials-develUpgrade libsmbclient-raw0-32bitUpgrade sle-sdk-releaseUpgrade libdcerpc-develUpgrade samba-docUpgrade libsmbldap0Upgrade libsamba-credentials0-32bitUpgrade libsamba-util0-32bitUpgrade libsmbconf0Upgrade libtdb1-x86Upgrade libdcerpc-atsvc0Upgrade libgensec0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libndr-develUpgrade libdcerpc-samr0Upgrade libldb1Upgrade samba-core-develUpgrade libsamba-hostconfig0Upgrade samba-testUpgrade libndr0Upgrade libndr-nbt0-32bitUpgrade libpdb-develUpgrade libgensec-develUpgrade libsmbclient-raw0Upgrade libtdb-develUpgrade libdcerpc-samr0-32bitUpgrade libwbclient0-x86Upgrade libndr-krb5pac0-32bitUpgrade samba-libs-32bitUpgrade samba-winbindUpgrade libtalloc-develUpgrade libnetapi-develUpgrade samba-winbind-x86Upgrade samba-pythonUpgrade libgensec0Upgrade samba-pidlUpgrade samba-winbind-32bitUpgrade libsmbclient0Upgrade libsamba-hostconfig-develUpgrade libpdb0-32bitUpgrade libtevent0-32bitUpgrade samba-32bitUpgrade libsamba-credentials0Upgrade libndr-nbt0Upgrade libsmbldap0-32bitUpgrade libdcerpc-binding0Upgrade libtalloc2-x86Upgrade libtevent-util-develUpgrade samba-client-x86Upgrade samba-develUpgrade libtevent-util0-32bitUpgrade libtalloc2Upgrade libsmbconf-develUpgrade sambaUpgrade libsmbsharemodes0Upgrade libdcerpc-atsvc-develUpgrade libnetapi0Upgrade libsmbconf0-32bitUpgrade libsmbldap-develUpgrade libndr-standard0-32bitUpgrade libndr0-32bitUpgrade libwbclient-develUpgrade libldb1-32bitUpgrade samba-test-devel | Dec 12, 2013 | Nov 13, 2013 |
| Ubuntu | — | Upgrade sambaUpgrade winbindUpgrade libpam-winbind | Nov 8, 2024 | Nov 13, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub