All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in an area of the server file system not exported under the share definition. Note that SMB1 has to be enabled, or the share also available via NFS in order for this attack to succeed.
CVSS Details
- CVSS 3.1 Base Score: 2.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 21, 2024 | Jan 11, 2022 |
| Amazon Linux Ami 2 | — | Upgrade samba-debuginfoUpgrade ctdb-testsUpgrade samba-pythonUpgrade libsmbclient-develUpgrade samba-common-toolsUpgrade samba-dc-libsUpgrade samba-winbindUpgrade libwbclient-develUpgrade sambaUpgrade ctdbUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-libsUpgrade samba-develUpgrade samba-commonUpgrade samba-winbind-krb5-locatorUpgrade samba-vfs-glusterfsUpgrade samba-testUpgrade samba-test-libsUpgrade samba-dcUpgrade samba-client-libsUpgrade samba-python-testUpgrade samba-krb5-printingUpgrade samba-pidlUpgrade libwbclient | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade samba-vfs-iouringUpgrade python3-sambaUpgrade samba-client-libsUpgrade samba-krb5-printingUpgrade samba-pidlUpgrade libnetapi-debuginfoUpgrade samba-dcerpc-debuginfoUpgrade samba-debugsourceUpgrade samba-common-libs-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-commonUpgrade samba-test-libsUpgrade samba-test-libs-debuginfoUpgrade python3-samba-develUpgrade samba-test-debuginfoUpgrade libwbclientUpgrade samba-ldb-ldap-modulesUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-testUpgrade samba-dc-libs-debuginfoUpgrade samba-libsUpgrade samba-winbind-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-winbindUpgrade libsmbclient-develUpgrade libnetapi-develUpgrade samba-clientUpgrade sambaUpgrade samba-client-libs-debuginfoUpgrade samba-develUpgrade samba-winbind-clientsUpgrade samba-usersharesUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-winbind-clients-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-client-debuginfoUpgrade libwbclient-develUpgrade libnetapiUpgrade samba-vfs-iouring-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-dc-libsUpgrade libsmbclient-debuginfoUpgrade samba-dcerpcUpgrade python3-samba-test | Feb 17, 2025 | Jan 10, 2022 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Jan 11, 2022 |
| Freebsd | — | Upgrade samba415Upgrade samba413Upgrade samba414 | Nov 4, 2022 | Feb 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-winbindUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade sambaUpgrade libsmbclientUpgrade libwbclientUpgrade samba-libs | May 9, 2022 | Jan 11, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade python3-samba-testUpgrade samba-common-libsUpgrade libsmbclientUpgrade sambaUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade python2-samba-testUpgrade ctdb-testsUpgrade samba-winbindUpgrade samba-winbind-krb5-locatorUpgrade ctdbUpgrade samba-clientUpgrade samba-pidlUpgrade python3-sambaUpgrade samba-libsUpgrade samba-commonUpgrade python2-sambaUpgrade samba-test-libsUpgrade samba-testUpgrade libwbclientUpgrade samba-krb5-printing | Apr 26, 2022 | Jan 11, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade sambaUpgrade samba-libsUpgrade libwbclientUpgrade samba-common-tools | Apr 19, 2022 | Jan 11, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 11, 2022 |
| Samba | — | Upgrade to Samba 4.13.16 or later. | Mar 7, 2022 | Jan 11, 2022 |
| Suse | — | Upgrade libsamba-policy-develUpgrade libhogweed4Upgrade libsss_certmap-develUpgrade libnfsidmap-sssUpgrade apache2-mod_apparmorUpgrade libgnutls30-32bitUpgrade libp11-kit0-32bitUpgrade sssd-wbclient-develUpgrade python-sssd-configUpgrade libnettle6-32bitUpgrade p11-kit-nss-trustUpgrade talloc-manUpgrade ca-certificatesUpgrade apparmor-parserUpgrade libsamba-policy0-python3-64bitUpgrade samba-libsUpgrade libsss_certmap0Upgrade krb5-miniUpgrade krb5-plugin-kdb-ldapUpgrade tevent-manUpgrade python3-teventUpgrade samba-toolUpgrade samba-testUpgrade libtdb1Upgrade python3-tdb-32bitUpgrade samba-libs-python3-32bitUpgrade apparmor-utils-langUpgrade libsamba-policy0-python3Upgrade python3-sssd-configUpgrade libsss_idmap0Upgrade libtdb-develUpgrade libtalloc2-32bitUpgrade sssd-adUpgrade samba-libs-64bitUpgrade perl-apparmorUpgrade libipa_hbac-develUpgrade samba-client-32bitUpgrade apparmor-docsUpgrade libp11-kit0Upgrade pam_apparmor-32bitUpgrade libtevent0-32bitUpgrade p11-kit-toolsUpgrade krb5-serverUpgrade python3-apparmorUpgrade krb5-plugin-preauth-otpUpgrade sssd-krb5-commonUpgrade python3-talloc-develUpgrade samba-client-libs-32bitUpgrade ldb-toolsUpgrade libsss_nss_idmap0Upgrade samba-clientUpgrade samba-devel-32bitUpgrade yast2-samba-clientUpgrade sssd-krb5Upgrade sssdUpgrade krb5Upgrade python3-sss-murmurUpgrade libsamba-policy-python3-develUpgrade libapparmor-develUpgrade pam_apparmorUpgrade ruby-apparmorUpgrade libapparmor1-32bitUpgrade python3-ldbUpgrade p11-kitUpgrade krb5-develUpgrade libnettle6Upgrade python3-ldb-develUpgrade apparmor-parser-langUpgrade python3-talloc-32bitUpgrade libldb2Upgrade python3-ipa_hbacUpgrade samba-client-libsUpgrade samba-cephUpgrade python3-tdbUpgrade libtevent-develUpgrade libtdb1-32bitUpgrade apparmor-abstractionsUpgrade libgnutls30Upgrade samba-gpupdateUpgrade p11-kit-develUpgrade samba-ad-dc-libs-32bitUpgrade apparmor-utilsUpgrade samba-client-64bitUpgrade samba-winbindUpgrade libsss_nss_idmap-develUpgrade samba-python3Upgrade libapparmor1Upgrade samba-winbind-libs-32bitUpgrade python3-tallocUpgrade krb5-plugin-preauth-spakeUpgrade libsss_simpleifp-develUpgrade samba-winbind-libsUpgrade krb5-devel-32bitUpgrade samba-dsdb-modulesUpgrade samba-ldb-ldapUpgrade python3-sss_nss_idmapUpgrade sssd-commonUpgrade sssd-dbusUpgrade libsss_simpleifp0Upgrade krb5-mini-develUpgrade libtalloc-develUpgrade krb5-32bitUpgrade sssd-winbind-idmapUpgrade apparmor-profilesUpgrade krb5-plugin-preauth-pkinitUpgrade libipa_hbac0Upgrade ctdbUpgrade samba-ad-dc-libsUpgrade samba-develUpgrade libtalloc2Upgrade tdb-toolsUpgrade sssd-ipaUpgrade samba-libs-32bitUpgrade libldb-develUpgrade sambaUpgrade ctdb-pcp-pmdaUpgrade python3-ldb-32bitUpgrade sssd-proxyUpgrade samba-docUpgrade libtevent0Upgrade libsamba-policy0-python3-32bitUpgrade krb5-clientUpgrade samba-libs-python3Upgrade libhogweed4-32bitUpgrade samba-libs-python3-64bitUpgrade libsss_idmap-develUpgrade libldb2-32bitUpgrade p11-kit-32bitUpgrade sssd-ldapUpgrade sssd-toolsUpgrade sssd-wbclientUpgrade python3-tevent-32bitUpgrade samba-ad-dc | Feb 2, 2022 | Jan 11, 2022 |
| Ubuntu | — | Upgrade samba | Feb 2, 2022 | Jan 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub