Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 12, 2018 | Mar 12, 2018 |
| Amazon_linux | — | Upgrade samba | May 31, 2017 | Mar 23, 2017 |
| Centos_linux | — | Upgrade libwbclient-develUpgrade samba-clientUpgrade samba-glusterfsUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-testUpgrade samba-client-libsUpgrade samba-pidlUpgrade samba-dc-libsUpgrade samba-dcUpgrade samba-debuginfoUpgrade samba-commonUpgrade libsmbclient-develUpgrade samba-winbindUpgrade samba-test-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-pythonUpgrade samba-krb5-printingUpgrade samba-winbind-clientsUpgrade samba-winbind-develUpgrade samba-develUpgrade libwbclientUpgrade samba-docUpgrade samba-swatUpgrade samba-vfs-glusterfsUpgrade sambaUpgrade samba-libsUpgrade samba-domainjoin-gui | May 24, 2017 | Mar 23, 2017 |
| Debian | — | Upgrade samba | Mar 24, 2017 | Mar 23, 2017 |
| Freebsd | — | Upgrade samba43Upgrade samba41Upgrade samba45Upgrade samba36Upgrade samba44Upgrade samba46Upgrade samba4Upgrade samba42 | Mar 25, 2017 | Mar 24, 2017 |
| Hpux | — | Update CIFS-Server to the latest version | Mar 28, 2022 | Mar 12, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libwbclientUpgrade libsmbclientUpgrade samba-pythonUpgrade sambaUpgrade samba-winbindUpgrade samba-commonUpgrade samba-client-libsUpgrade samba-common-toolsUpgrade samba-libsUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-winbind-modules | Oct 11, 2019 | Mar 12, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-commonUpgrade samba-libsUpgrade samba-client-libsUpgrade libwbclientUpgrade sambaUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade libsmbclient | Oct 11, 2019 | Mar 12, 2018 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.14-0.175.3.20.0.6.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.14-0.175.3.20.0.6.0 on Solaris 11.3 | May 29, 2017 | May 29, 2017 |
| Oracle_linux | — | Upgrade samba-common-libsUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba-glusterfsUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-dc-libsUpgrade samba-dcUpgrade sambaUpgrade samba-swatUpgrade libwbclient-develUpgrade samba-winbind-krb5-locatorUpgrade ctdb-testsUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-docUpgrade samba-winbind-clientsUpgrade samba-testUpgrade samba-develUpgrade samba-libsUpgrade samba-vfs-glusterfsUpgrade libwbclientUpgrade samba-clientUpgrade ctdbUpgrade samba-winbind-develUpgrade samba-pidlUpgrade libsmbclient-develUpgrade samba-krb5-printingUpgrade samba-commonUpgrade samba-domainjoin-guiUpgrade samba-test-libs | May 22, 2017 | Mar 23, 2017 |
| Redhat_linux | — | Upgrade samba-dc-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade ctdb-testsUpgrade samba-clientUpgrade samba-glusterfsUpgrade samba-testUpgrade libwbclient-develUpgrade samba-client-libsNo solution existsUpgrade samba-common-toolsUpgrade samba-docUpgrade libsmbclient-develUpgrade samba-pythonUpgrade samba-domainjoin-guiUpgrade samba-vfs-glusterfsUpgrade libwbclientUpgrade samba-winbind-modulesUpgrade samba-swatUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-pidlUpgrade samba-develUpgrade sambaUpgrade samba-debuginfoUpgrade samba-common-libsUpgrade samba-libsUpgrade samba-krb5-printingUpgrade libsmbclientUpgrade samba-dcUpgrade samba-commonUpgrade ctdbUpgrade samba-winbind-devel | May 23, 2017 | Mar 23, 2017 |
| Samba | — | Upgrade to Samba version 4.6.1Upgrade to Samba version 4.4.12Upgrade to Samba version 4.5.7 | Apr 6, 2017 | Apr 6, 2017 |
| Suse | — | Upgrade libtdb-develUpgrade libsamba-passdb-develUpgrade libtevent0Upgrade libsamba-util0-32bitUpgrade libsamba-policy-develUpgrade libsamba-errors0-32bitUpgrade libdcerpc-atsvc-develUpgrade samba-krb-printingUpgrade libndr-nbt0-32bitUpgrade samba-dsdb-modulesUpgrade libgensec0Upgrade libsmbclient0Upgrade libsamdb0-32bitUpgrade samba-test-develUpgrade libsmbsharemodes-develUpgrade libsmbclient-develUpgrade libldb1Upgrade libtalloc2-32bitUpgrade ldapsmbUpgrade libsamba-hostconfig0Upgrade libdcerpc0-32bitUpgrade libregistry-develUpgrade libsmbldap2Upgrade samba-kdcUpgrade libdcerpc0Upgrade libsmbclient0-32bitUpgrade libregistry0Upgrade ctdb-develUpgrade libndr0-32bitUpgrade samba-develUpgrade libsmbclient-raw0Upgrade samba-testUpgrade libsamba-policy-python3-develUpgrade libtdb1Upgrade libsamba-util0Upgrade libtevent-util-develUpgrade libtevent0-32bitUpgrade ctdbUpgrade libsamba-policy0-python3Upgrade libnetapi-develUpgrade libndr-krb5pac0-32bitUpgrade samba-clientUpgrade libdcerpc-binding0-32bitUpgrade libsamba-credentials0-32bitUpgrade libsamba-hostconfig-develUpgrade libsmbldap0-32bitUpgrade libndr-standard0Upgrade libsamdb-develUpgrade libgensec-develUpgrade libdcerpc-samr0Upgrade libwbclient0Upgrade libgensec0-32bitUpgrade libsmbclient0-x86Upgrade libdcerpc-samr-develUpgrade samba-client-x86Upgrade samba-client-32bitUpgrade libtdb1-x86Upgrade libsamba-errors-develUpgrade libsamba-passdb0Upgrade libndr-standard-develUpgrade samba-winbind-x86Upgrade libsamba-credentials0Upgrade samba-libsUpgrade libnetapi0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libsmbldap0Upgrade libdcerpc-atsvc0Upgrade libndr-standard0-32bitUpgrade samba-docUpgrade libtevent-develUpgrade libdcerpc-develUpgrade libndr0Upgrade libndr-krb5pac-develUpgrade libwbclient0-32bitUpgrade libdcerpc-binding0Upgrade libtdb1-32bitUpgrade libsamba-passdb0-32bitUpgrade samba-cephUpgrade libndr1-32bitUpgrade samba-winbind-32bitUpgrade libtalloc-develUpgrade libsmbconf-develUpgrade libsamba-policy0Upgrade samba-pythonUpgrade samba-core-develUpgrade libsamba-errors0Upgrade samba-32bitUpgrade samba-python3Upgrade libwbclient-develUpgrade libndr1Upgrade libsmbconf0-32bitUpgrade libsmbldap2-32bitUpgrade libtalloc2-x86Upgrade libndr-nbt-develUpgrade libsmbclient-raw-develUpgrade libndr-develUpgrade libsmbsharemodes0Upgrade libndr-krb5pac0Upgrade sambaUpgrade samba-libs-32bitUpgrade libsamba-util-develUpgrade libtevent-util0Upgrade libsmbldap-develUpgrade samba-x86Upgrade libsmbconf0Upgrade libldb-develUpgrade libsmbclient-raw0-32bitUpgrade samba-winbindUpgrade samba-libs-python3-32bitUpgrade libtalloc2Upgrade libtevent0-x86Upgrade libwbclient0-x86Upgrade samba-libs-python3Upgrade libsamdb0Upgrade libtevent-util0-32bitUpgrade libsamba-credentials-develUpgrade libndr-nbt0Upgrade libnetapi0 | Mar 29, 2017 | Mar 23, 2017 |
| Ubuntu | — | Upgrade samba | Mar 24, 2017 | Mar 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub