A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share. Versions before 4.8.11, 4.9.6 and 4.10.2 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)
- CVSS 3.0 Base Score: 4.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Apr 22, 2019 | Apr 9, 2019 |
| Amazon Linux Ami 2 | — | Upgrade samba-winbindUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade libsmbclient-develUpgrade libwbclient-develUpgrade samba-test-libsUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-dc-libsUpgrade samba-libsUpgrade samba-krb5-printingUpgrade samba-develUpgrade samba-testUpgrade samba-commonUpgrade samba-client-libsUpgrade samba-python-testUpgrade samba-debuginfoUpgrade ctdbUpgrade samba-dcUpgrade samba-vfs-glusterfsUpgrade samba-pidlUpgrade ctdb-testsUpgrade libwbclientUpgrade samba-python | Apr 27, 2020 | Apr 9, 2019 |
| Amazon_linux | — | Upgrade samba | Dec 20, 2019 | Apr 9, 2019 |
| Centos_linux | — | Upgrade ctdb-tests-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-commonUpgrade samba-pythonUpgrade samba-test-debuginfoUpgrade python3-sambaUpgrade sambaUpgrade samba-vfs-glusterfsUpgrade libsmbclient-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-debuginfoUpgrade samba-dcUpgrade samba-krb5-printingUpgrade libsmbclient-develUpgrade samba-clientUpgrade samba-libsUpgrade samba-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-client-debuginfoUpgrade ctdbUpgrade samba-debugsourceUpgrade samba-test-libsUpgrade samba-develUpgrade samba-test-libs-debuginfoUpgrade libwbclientUpgrade samba-krb5-printing-debuginfoUpgrade python3-samba-debuginfoUpgrade ctdb-debuginfoUpgrade samba-common-tools-debuginfoUpgrade libwbclient-develUpgrade samba-winbind-clients-debuginfoUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-common-toolsUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-pidlUpgrade python3-samba-testUpgrade samba-dc-libsUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-clientsUpgrade samba-common-libs-debuginfoUpgrade samba-python-testUpgrade ctdb-tests | Aug 28, 2019 | Apr 9, 2019 |
| Debian | — | Upgrade samba | Apr 8, 2019 | Apr 8, 2019 |
| Freebsd | — | Upgrade samba49Upgrade samba46Upgrade samba410Upgrade samba47Upgrade samba48 | May 18, 2019 | May 14, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-winbindUpgrade samba-client-libsUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade libsmbclientUpgrade sambaUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-libsUpgrade samba-client | Jul 23, 2019 | Apr 9, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-pythonUpgrade libsmbclientUpgrade samba-libsUpgrade samba-commonUpgrade libwbclientUpgrade samba-winbindUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-winbind-clients | Sep 25, 2019 | Apr 9, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-pythonUpgrade samba-common-toolsUpgrade samba-libsUpgrade sambaUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-commonUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-client | Jul 2, 2019 | Apr 9, 2019 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4Upgrade service/network/samba to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Apr 9, 2019 |
| Oracle_linux | — | Upgrade samba-winbind-modulesUpgrade samba-dc-libsUpgrade samba-python-testUpgrade samba-test-libsUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-winbind-krb5-locatorUpgrade libsmbclient-develUpgrade samba-clientUpgrade python3-samba-testUpgrade samba-commonUpgrade python3-sambaUpgrade sambaUpgrade libwbclient-develUpgrade samba-dcUpgrade ctdbUpgrade samba-vfs-glusterfsUpgrade samba-pidlUpgrade samba-client-libsUpgrade samba-testUpgrade samba-pythonUpgrade samba-winbindUpgrade libwbclientUpgrade samba-libsUpgrade samba-krb5-printingUpgrade samba-develUpgrade ctdb-tests | Jul 21, 2020 | Apr 9, 2019 |
| Redhat_linux | — | Upgrade libwbclientUpgrade samba-commonUpgrade python3-sambaUpgrade libsmbclient-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade sambaUpgrade samba-libs-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-client-libsUpgrade python3-samba-testUpgrade samba-winbindUpgrade samba-test-libsUpgrade samba-winbind-modules-debuginfoUpgrade samba-test-debuginfoUpgrade samba-libsUpgrade samba-winbind-clients-debuginfoUpgrade samba-krb5-printingUpgrade libsmbclient-develUpgrade samba-develUpgrade samba-client-debuginfoUpgrade samba-common-toolsUpgrade samba-winbind-debuginfoUpgrade samba-clientUpgrade samba-pythonUpgrade samba-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-clientsUpgrade samba-dcUpgrade samba-common-libsUpgrade ctdbUpgrade samba-pidlUpgrade samba-debugsourceUpgrade samba-test-libs-debuginfoUpgrade libwbclient-develUpgrade samba-python-testUpgrade samba-common-tools-debuginfoNo solution existsUpgrade samba-vfs-glusterfs-debuginfoUpgrade ctdb-tests-debuginfoUpgrade samba-dc-libsUpgrade libsmbclientUpgrade samba-vfs-glusterfsUpgrade samba-common-libs-debuginfoUpgrade samba-testUpgrade libwbclient-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade ctdb-debuginfoUpgrade samba-winbind-modulesUpgrade ctdb-tests | Aug 7, 2019 | Apr 9, 2019 |
| Samba | — | Upgrade to Samba version 4.9.6Upgrade to Samba version 4.8.11Upgrade to Samba version 4.10.2 | Apr 30, 2019 | Apr 9, 2019 |
| Suse | — | Upgrade libsmbldap0-32bitUpgrade cups-configUpgrade libgamin-1-0Upgrade samba-client-32bitUpgrade libsamba-credentials0Upgrade libndr-nbt-develUpgrade libdns_sdUpgrade libhowl0Upgrade libp11-kit0Upgrade libdcerpc-binding0-32bitUpgrade libsamba-errors-develUpgrade cups-ddkUpgrade libsamba-credentials0-32bitUpgrade python-ldb-develUpgrade p11-kit-nss-trustUpgrade libtdb1Upgrade libwbclient0Upgrade python3-ldb-32bitUpgrade libsamba-policy-python3-develUpgrade libsmbclient0Upgrade libsmbconf-develUpgrade libnettle-develUpgrade avahi-compat-mDNSResponder-develUpgrade cupsUpgrade ctdbUpgrade samba-kdcUpgrade libtevent0-32bitUpgrade libsamdb0-32bitUpgrade libavahi-client3-32bitUpgrade libsamba-util0-32bitUpgrade libtdb-develUpgrade libsamba-util-develUpgrade python-avahiUpgrade libnetapi-develUpgrade libp11-kit0-32bitUpgrade python-ldbUpgrade libavahi-common3-32bitUpgrade libdcerpc0-32bitUpgrade libdcerpc0Upgrade libsamba-policy-develUpgrade libgensec0Upgrade libavahi-common3Upgrade libcupscgi1Upgrade libndr0-32bitUpgrade libndr-standard-develUpgrade python3-ldbUpgrade libndr-standard0Upgrade samba-libsUpgrade libsmbclient-develUpgrade avahi-compat-howl-develUpgrade libtasn1Upgrade libsmbldap0Upgrade libsamdb-develUpgrade libsamba-credentials-develUpgrade libsmbclient0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libavahi-glib-develUpgrade libndr1Upgrade cups-clientUpgrade libavahi-ui-gtk3-0Upgrade libsamba-policy0-python3Upgrade libsamba-hostconfig0Upgrade libsamba-passdb-develUpgrade libavahi-client3Upgrade libtevent-util-develUpgrade gnutlsUpgrade libregistry0Upgrade libldb1Upgrade avahiUpgrade libsamba-util0Upgrade samba-krb-printingUpgrade libndr0Upgrade libsmbclient-raw0Upgrade ldb-toolsUpgrade typelib-1_0-Avahi-0_6Upgrade libdcerpc-samr-develUpgrade samba-clientUpgrade libhogweed4Upgrade libnettle6-32bitUpgrade samba-testUpgrade samba-libs-32bitUpgrade avahi-utils-gtkUpgrade libcups2Upgrade avahi-autoipdUpgrade p11-kitUpgrade libnetapi0-32bitUpgrade tevent-manUpgrade libtasn1-develUpgrade python3-talloc-develUpgrade libsmbldap2Upgrade libsamba-policy0-32bitUpgrade libsamba-errors0-32bitUpgrade libcupsppdc1Upgrade python-tallocUpgrade libndr-nbt0Upgrade libtasn1-6-32bitUpgrade libsmbldap-develUpgrade libsamdb0Upgrade libdcerpc-binding0Upgrade samba-dsdb-modulesUpgrade tdb-toolsUpgrade libtevent-util0Upgrade libnetapi0Upgrade libndr-krb5pac0Upgrade libldb-develUpgrade gamin-develUpgrade libgnutlsxx28Upgrade libndr1-32bitUpgrade talloc-manUpgrade libgnutls30-32bitUpgrade samba-winbind-32bitUpgrade samba-kdc-32bitUpgrade libavahi-ui0Upgrade python-ldb-32bitUpgrade libsamba-hostconfig-develUpgrade avahi-langUpgrade samba-libs-python3-32bitUpgrade libtdb1-32bitUpgrade libtevent0Upgrade libsmbclient-raw0-32bitUpgrade ldapsmbUpgrade libcupsmime1Upgrade libwbclient0-32bitUpgrade python-talloc-develUpgrade libfam0-gamin-32bitUpgrade libcups2-32bitUpgrade libsamba-passdb0Upgrade libsmbldap2-32bitUpgrade libtasn1-6Upgrade libndr-krb5pac-develUpgrade libdcerpc-develUpgrade libndr-standard0-32bitUpgrade libsamba-passdb0-32bitUpgrade libldb1-32bitUpgrade libsamba-policy0Upgrade libsmbconf0-32bitUpgrade samba-docUpgrade p11-kit-toolsUpgrade libavahi-gobject-develUpgrade samba-core-develUpgrade libgensec0-32bitUpgrade libavahi-develUpgrade libavahi-core7Upgrade avahi-utilsUpgrade ctdb-pcp-pmdaUpgrade samba-32bitUpgrade libdcerpc-samr0Upgrade sambaUpgrade libsamba-hostconfig0-32bitUpgrade libnettle6Upgrade samba-libs-python3Upgrade python3-tallocUpgrade libhogweed4-32bitUpgrade ctdb-testsUpgrade libavahi-gobject0Upgrade libdcerpc-samr0-32bitUpgrade libgnutls30Upgrade cups-develUpgrade libdcerpc-atsvc0Upgrade libcupsimage2Upgrade libgnutls-develUpgrade libndr-nbt0-32bitUpgrade libsmbconf0Upgrade samba-winbindUpgrade libtalloc2-32bitUpgrade samba-cephUpgrade libgnutlsxx-develUpgrade libndr-develUpgrade samba-python3Upgrade libfam0-gaminUpgrade samba-pidlUpgrade libwbclient-develUpgrade python3-ldb-develUpgrade libtalloc-develUpgrade libavahi-glib1Upgrade libsamba-errors0Upgrade libtalloc2Upgrade samba-pythonUpgrade p11-kit-develUpgrade libtevent-util0-32bitUpgrade libtevent-devel | Apr 11, 2019 | Apr 9, 2019 |
| Ubuntu | — | Upgrade libsmbclientUpgrade samba | Apr 11, 2019 | Apr 8, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub