Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a denial of service (mounting outage) via a SIGKILL signal during a time window when the /etc/mtab~ file exists.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade sambaUpgrade samba-commonUpgrade samba-swatUpgrade samba-client | Aug 17, 2018 | Aug 29, 2011 |
| Debian | — | Upgrade cifs-utilsUpgrade samba | Jul 30, 2024 | Dec 31, 2019 |
| Oracle_linux | — | Upgrade samba-winbind-develUpgrade sambaUpgrade libsmbclientUpgrade samba-domainjoin-guiUpgrade samba-winbind-krb5-locatorUpgrade cifs-utilsUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-commonUpgrade libsmbclient-develUpgrade samba-docUpgrade samba-clientUpgrade samba-swat | Oct 16, 2024 | Dec 31, 2019 |
| Ubuntu | — | Upgrade smbfs | Nov 8, 2024 | Dec 31, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub