Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration is enabled, does not properly initialize the SRV_SNAPSHOT_ARRAY response field, which allows remote authenticated users to obtain potentially sensitive information from process memory via a (1) FSCTL_GET_SHADOW_COPY_DATA or (2) FSCTL_SRV_ENUMERATE_SNAPSHOTS request.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | May 28, 2014 |
| Centos_linux | — | Upgrade samba4-testUpgrade sambaUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-pythonUpgrade samba-vfs-glusterfsUpgrade samba-winbind-krb5-locatorUpgrade samba-dcUpgrade samba-winbindUpgrade samba4-commonUpgrade samba-dc-libsUpgrade samba-clientUpgrade samba4-dc-libsUpgrade libwbclient-develUpgrade samba4-develUpgrade samba-winbind-clientsUpgrade samba4-winbind-krb5-locatorUpgrade samba4-swatUpgrade samba-commonUpgrade samba-testUpgrade samba4Upgrade samba4-winbindUpgrade samba-test-develUpgrade samba4-pidlUpgrade samba4-winbind-clientsUpgrade samba4-dcUpgrade samba-pidlUpgrade samba4-clientUpgrade libsmbclient-develUpgrade samba-develUpgrade samba-libsUpgrade samba4-pythonUpgrade samba4-libsUpgrade libwbclient | Dec 1, 2016 | May 28, 2014 |
| Debian | — | Upgrade samba | Jul 30, 2024 | May 28, 2014 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | May 28, 2014 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.6.24-0.175.2.2.0.3.0 on Solaris 11.2 | May 29, 2017 | May 28, 2014 |
| Oracle_linux | — | Upgrade samba-vfs-glusterfsUpgrade samba-commonUpgrade samba-dc-libsUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-test-develUpgrade samba-winbind-clientsUpgrade libsmbclient-develUpgrade samba-develUpgrade samba-dcUpgrade samba-pythonUpgrade samba-testUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-pidlUpgrade libwbclient-develUpgrade libwbclientUpgrade samba-libsUpgrade libsmbclientUpgrade samba | Oct 16, 2024 | May 28, 2014 |
| Samba | — | Upgrade to Samba version 4.0.18 | May 30, 2014 | May 28, 2014 |
| Suse | — | Upgrade libwbclient0Upgrade libsmbldap2-32bitUpgrade samba-pythonUpgrade libtalloc2-x86Upgrade libndr-krb5pac-develUpgrade libdcerpc-develUpgrade libsamba-hostconfig0Upgrade libnetapi0Upgrade libtevent-util0Upgrade samba-libs-32bitUpgrade libtalloc2Upgrade libwbclient0-x86Upgrade libtalloc-develUpgrade libndr-krb5pac0-32bitUpgrade samba-libs-python3Upgrade libsamba-hostconfig0-32bitUpgrade samba-core-develUpgrade libsmbsharemodes0Upgrade libsmbclient-raw0-32bitUpgrade samba-x86Upgrade libsmbconf0Upgrade libsmbclient-develUpgrade samba-winbind-x86Upgrade libsmbclient-raw0Upgrade libtalloc1-32bitUpgrade sambaUpgrade libsamba-errors0Upgrade libsmbldap-develUpgrade samba-dsdb-modulesUpgrade libsamba-util-develUpgrade samba-winbindUpgrade libsamba-passdb0-32bitUpgrade libpdb0-32bitUpgrade libndr-nbt-develUpgrade libpdb-develUpgrade libsmbldap0-32bitUpgrade libldb-develUpgrade libsamba-policy0Upgrade libdcerpc-binding0Upgrade libndr-nbt0Upgrade libpdb0Upgrade libwbclient0-32bitUpgrade libndr-krb5pac0Upgrade libdcerpc-atsvc0Upgrade ctdbUpgrade libgensec0-32bitUpgrade samba-32bitUpgrade libsmbldap0Upgrade samba-winbind-32bitUpgrade libgensec0Upgrade libtevent-develUpgrade libndr-standard0-32bitUpgrade libsmbconf-develUpgrade libtevent-util0-32bitUpgrade libldb1-32bitUpgrade libsamba-credentials-develUpgrade samba-develUpgrade samba-docUpgrade samba-testUpgrade libsmbclient0Upgrade ldapsmbUpgrade samba-kdcUpgrade libregistry-develUpgrade libsamba-credentials0-32bitUpgrade libsmbsharemodes-develUpgrade libldb1Upgrade libsamba-passdb0Upgrade libdcerpc-atsvc-develUpgrade libdcerpc0-32bitUpgrade libsamba-errors0-32bitUpgrade libsmbclient-raw-develUpgrade libtdb-develUpgrade libndr-develUpgrade libtalloc2-32bitUpgrade libndr0-32bitUpgrade libndr-standard-develUpgrade libsmbclient0-32bitUpgrade libsamdb0-32bitUpgrade libdcerpc-samr0Upgrade libsamba-util0Upgrade libtevent-util-develUpgrade libtalloc1Upgrade samba-client-32bitUpgrade libdcerpc-binding0-32bitUpgrade libsamba-util0-32bitUpgrade libdcerpc-samr-develUpgrade libsmbldap2Upgrade libndr-nbt0-32bitUpgrade libtdb1-x86Upgrade libdcerpc0Upgrade libsamba-hostconfig-develUpgrade samba-client-x86Upgrade samba-clientUpgrade libnetapi-develUpgrade libtevent0-32bitUpgrade samba-krb-printingUpgrade libregistry0Upgrade libsamba-policy-develUpgrade libsamdb-develUpgrade samba-libsUpgrade samba-test-develUpgrade libsmbclient0-x86Upgrade libgensec-develUpgrade libtevent0Upgrade samba-libs-python3-32bitUpgrade libnetapi0-32bitUpgrade libtdb1Upgrade libsamba-passdb-develUpgrade libndr-standard0Upgrade libsamba-credentials0 | Dec 18, 2015 | May 28, 2014 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | May 28, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub