A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 24, 2018 | Aug 22, 2018 |
| Amazon Linux Ami 2 | — | Upgrade samba-winbindUpgrade libwbclient-develUpgrade samba-debuginfoUpgrade ctdbUpgrade samba-dcUpgrade samba-develUpgrade ctdb-testsUpgrade samba-client-libsUpgrade sambaUpgrade libwbclientUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-pythonUpgrade libsmbclient-develUpgrade samba-pidlUpgrade samba-libsUpgrade samba-common-libsUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-test-libsUpgrade samba-krb5-printingUpgrade samba-testUpgrade samba-dc-libsUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-python-testUpgrade samba-vfs-glusterfsUpgrade samba-common-tools | Apr 27, 2020 | Aug 22, 2018 |
| Amazon_linux | — | Upgrade samba | Jan 25, 2019 | Aug 14, 2018 |
| Centos_linux | — | Upgrade samba-libsUpgrade samba-client-libsUpgrade samba-krb5-printingUpgrade libwbclientUpgrade samba-common-toolsUpgrade libsmbclient-develUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade libwbclient-develUpgrade samba-dc-libsUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-develUpgrade libsmbclientUpgrade samba-dcUpgrade sambaUpgrade samba-pidlUpgrade samba-pythonUpgrade samba-debuginfoUpgrade samba-winbindUpgrade samba-testUpgrade samba-test-libsUpgrade samba-vfs-glusterfsUpgrade samba-winbind-modulesUpgrade samba-python-test | Aug 28, 2019 | Aug 22, 2018 |
| Debian | — | Upgrade samba | Aug 15, 2018 | Aug 14, 2018 |
| Freebsd | — | Upgrade samba48Upgrade samba46Upgrade samba47 | Aug 15, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Aug 22, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-clientUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade libwbclientUpgrade samba-libsUpgrade samba-winbindUpgrade samba-pythonUpgrade samba | Apr 2, 2019 | Aug 22, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sambaUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-commonUpgrade samba-libsUpgrade samba-common-libs | May 7, 2019 | Aug 22, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-common-libsUpgrade sambaUpgrade samba-clientUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade libsmbclientUpgrade libwbclientUpgrade samba-common | Apr 3, 2019 | Aug 22, 2018 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4 | Oct 19, 2018 | Aug 22, 2018 |
| Oracle_linux | — | Upgrade samba-pythonUpgrade sambaUpgrade samba-clientUpgrade samba-develUpgrade ctdb-testsUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade samba-winbind-krb5-locatorUpgrade libwbclientUpgrade samba-krb5-printingUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-libsUpgrade libsmbclient-develUpgrade samba-winbindUpgrade samba-test-libsUpgrade samba-dcUpgrade libwbclient-develUpgrade samba-common-libsUpgrade samba-testUpgrade samba-vfs-glusterfsUpgrade samba-commonUpgrade samba-pidlUpgrade samba-dc-libsUpgrade samba-python-testUpgrade libsmbclientUpgrade ctdb | Nov 6, 2018 | Aug 16, 2018 |
| Redhat_linux | — | Upgrade samba-testUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-test-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-krb5-printingUpgrade samba-dc-libsUpgrade libwbclientUpgrade samba-develUpgrade samba-dcUpgrade samba-winbind-clientsUpgrade sambaUpgrade samba-libsUpgrade libsmbclient-develUpgrade samba-common-libsUpgrade samba-debuginfoUpgrade samba-commonUpgrade samba-pidlUpgrade samba-python-testUpgrade samba-vfs-glusterfsUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade libwbclient-develUpgrade libsmbclient | Oct 31, 2018 | Aug 22, 2018 |
| Samba | — | Upgrade to Samba version 4.6.16Upgrade to Samba version 4.7.9Upgrade to Samba version 4.8.4 | Aug 15, 2018 | Aug 15, 2018 |
| Suse | — | Upgrade libnetapi0-32bitUpgrade libsmbconf-develUpgrade libsamba-policy-python3-develUpgrade samba-kdcUpgrade libsamdb-develUpgrade libtalloc-develUpgrade libndr0-32bitUpgrade libndr-krb5pac0Upgrade libndr-standard-develUpgrade libndr-develUpgrade samba-libs-python3-32bitUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc0Upgrade libldb1Upgrade libwbclient0-32bitUpgrade samba-testUpgrade libndr-standard0Upgrade samba-python3Upgrade libsmbldap0Upgrade libsamba-hostconfig-develUpgrade libtevent0-32bitUpgrade libdcerpc-samr0Upgrade libtevent-develUpgrade samba-clientUpgrade libsamdb0-32bitUpgrade libndr-krb5pac-develUpgrade samba-client-32bitUpgrade libtevent0-x86Upgrade libsmbclient-raw0-32bitUpgrade libndr-nbt0-32bitUpgrade samba-dsdb-modulesUpgrade libsamba-policy0-32bitUpgrade libsamba-policy0Upgrade libtdb1Upgrade libgensec0-32bitUpgrade libsmbclient0-x86Upgrade libtdb1-x86Upgrade libsamba-passdb-develUpgrade libndr1-32bitUpgrade libsamba-passdb0Upgrade libregistry0Upgrade libsamba-credentials0Upgrade samba-winbind-x86Upgrade samba-krb-printingUpgrade libsmbsharemodes-develUpgrade libdcerpc-atsvc0Upgrade libtalloc2-32bitUpgrade libsamba-errors-develUpgrade ctdb-pcp-pmdaUpgrade samba-winbindUpgrade libsmbclient0-32bitUpgrade libsamba-util0-32bitUpgrade samba-libs-python3Upgrade libsamba-credentials0-32bitUpgrade libdcerpc-develUpgrade ctdbUpgrade libndr-nbt-develUpgrade libsamba-util-develUpgrade libsamba-policy0-python3Upgrade samba-libs-32bitUpgrade ctdb-testsUpgrade libsamba-policy-develUpgrade libtevent-util-develUpgrade libldb-develUpgrade samba-pidlUpgrade libsmbsharemodes0Upgrade libwbclient-develUpgrade libsmbldap2-32bitUpgrade libwbclient0Upgrade libsmbclient-develUpgrade samba-32bitUpgrade libsmbldap2Upgrade libdcerpc-samr-develUpgrade libnetapi-develUpgrade libsmbconf0-32bitUpgrade libsmbldap0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libtevent-util0-32bitUpgrade samba-client-x86Upgrade samba-libsUpgrade libdcerpc0-32bitUpgrade libsamba-credentials-develUpgrade samba-x86Upgrade libndr-standard0-32bitUpgrade samba-kdc-32bitUpgrade libsmbconf0Upgrade ldapsmbUpgrade libsamdb0Upgrade sambaUpgrade libdcerpc-samr0-32bitUpgrade libsamba-errors0Upgrade samba-docUpgrade libtdb-develUpgrade libtalloc2Upgrade libndr-krb5pac0-32bitUpgrade libdcerpc-binding0Upgrade libgensec0Upgrade libndr0Upgrade libsmbldap-develUpgrade libndr1Upgrade samba-develUpgrade libsmbclient-raw0Upgrade libtalloc2-x86Upgrade libsamba-util0Upgrade libtevent0Upgrade libnetapi0Upgrade samba-cephUpgrade samba-core-develUpgrade libsmbclient0Upgrade libtevent-util0Upgrade libwbclient0-x86Upgrade samba-pythonUpgrade libtdb1-32bitUpgrade libndr-nbt0Upgrade libsamba-errors0-32bitUpgrade samba-winbind-32bitUpgrade libsamba-hostconfig0Upgrade libsamba-passdb0-32bit | Aug 15, 2018 | Aug 14, 2018 |
| Ubuntu | — | Upgrade sambaUpgrade libsmbclient | Aug 17, 2018 | Aug 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub