A symlink following vulnerability was found in Samba, where a user can create a symbolic link that will make 'smbd' escape the configured share path. This flaw allows a remote user with access to the exported part of the file system under a share via SMB1 unix extensions or NFS to create symlinks to files outside the 'smbd' configured share path and gain access to another restricted server's filesystem.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Jan 12, 2023 |
| Amazon_linux_2023 | — | Upgrade samba-winbind-modules-debuginfoUpgrade libwbclientUpgrade samba-debuginfoUpgrade python3-sambaUpgrade libwbclient-debuginfoUpgrade samba-libsUpgrade samba-ldb-ldap-modules-debuginfoUpgrade python3-samba-develUpgrade samba-krb5-printing-debuginfoUpgrade samba-krb5-printingUpgrade samba-winbind-clients-debuginfoUpgrade samba-test-debuginfoUpgrade libnetapi-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade samba-dcerpc-debuginfoUpgrade samba-testUpgrade samba-libs-debuginfoUpgrade libsmbclient-develUpgrade libnetapiUpgrade samba-common-libs-debuginfoUpgrade samba-client-libsUpgrade samba-vfs-iouringUpgrade samba-dc-libs-debuginfoUpgrade samba-common-tools-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-usersharesUpgrade samba-pidlUpgrade libnetapi-develUpgrade python3-samba-testUpgrade samba-dcerpcUpgrade samba-winbind-krb5-locatorUpgrade samba-develUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-winbind-clientsUpgrade samba-vfs-iouring-debuginfoUpgrade samba-debugsourceUpgrade python3-samba-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-client-debuginfoUpgrade sambaUpgrade libwbclient-develUpgrade samba-winbind-debuginfoUpgrade samba-test-libsUpgrade samba-clientUpgrade samba-winbindUpgrade samba-dc-libsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-common-tools | Feb 17, 2025 | Oct 25, 2022 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Jan 12, 2023 |
| Samba | — | Upgrade to Samba 4.17.2 or later. | Jan 12, 2023 | Jan 12, 2023 |
| Suse | — | Upgrade samba-libs-32bitUpgrade samba-ldb-ldapUpgrade samba-client-libs-32bitUpgrade samba-libs-python3Upgrade samba-libsUpgrade samba-python3Upgrade samba-gpupdateUpgrade samba-client-libsUpgrade samba-cephUpgrade samba-winbind-libsUpgrade sambaUpgrade samba-develUpgrade libsamba-policy0-python3Upgrade samba-winbindUpgrade libsamba-policy-python3-develUpgrade libsamba-policy-develUpgrade samba-winbind-libs-32bitUpgrade samba-client | Jun 13, 2023 | Jan 12, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub