The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended administrative change.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade samba4-clientUpgrade samba4-commonUpgrade samba4Upgrade samba4-winbindUpgrade samba4-winbind-clientsUpgrade samba4-pidlUpgrade samba4-swatUpgrade samba4-dc-libsUpgrade samba4-testUpgrade samba4-libsUpgrade samba4-pythonUpgrade samba4-winbind-krb5-locatorUpgrade samba4-dcUpgrade samba4-devel | Dec 1, 2016 | Mar 14, 2014 |
| Debian | — | Upgrade samba4Upgrade samba | Jul 30, 2024 | Mar 14, 2014 |
| Freebsd | — | Upgrade samba4Upgrade samba34Upgrade samba36Upgrade samba41Upgrade samba35 | Dec 10, 2025 | Mar 11, 2014 |
| Oracle_linux | — | Upgrade samba4-dcUpgrade samba4-commonUpgrade samba4-testUpgrade samba4-winbind-krb5-locatorUpgrade samba4-dc-libsUpgrade samba4-pythonUpgrade samba4-develUpgrade samba4Upgrade samba4-winbind-clientsUpgrade samba4-pidlUpgrade samba4-libsUpgrade samba4-clientUpgrade samba4-winbindUpgrade samba4-swat | Jun 26, 2018 | Mar 14, 2014 |
| Samba | — | Upgrade to Samba version 4.1.6Upgrade to Samba version 4.0.16 | Mar 17, 2014 | Mar 17, 2014 |
| Suse | — | Upgrade libndr-nbt0-32bitUpgrade libsamdb0-32bitUpgrade libsmbclient-raw0Upgrade libndr0Upgrade samba-client-32bitUpgrade libndr-standard0-32bitUpgrade libgensec-develUpgrade libsmbldap-develUpgrade libnetapi0-32bitUpgrade libsmbconf-develUpgrade libsmbsharemodes-develUpgrade libregistry0Upgrade samba-pidlUpgrade libsamba-hostconfig-develUpgrade libsamba-credentials0Upgrade libsamba-util0-32bitUpgrade libsamba-credentials0-32bitUpgrade libsamba-policy0Upgrade libsamba-policy0-32bitUpgrade samba-test-develUpgrade libsamdb-develUpgrade samba-testUpgrade libsmbconf0Upgrade libdcerpc0Upgrade libndr-standard-develUpgrade libndr-standard0Upgrade libdcerpc-binding0-32bitUpgrade libgensec0-32bitUpgrade libndr-develUpgrade libregistry0-32bitUpgrade libdcerpc-samr0Upgrade samba-libsUpgrade libgensec0Upgrade libdcerpc-atsvc-develUpgrade samba-winbind-32bitUpgrade samba-libs-32bitUpgrade libsmbclient0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsmbclient-raw-develUpgrade sambaUpgrade libsamba-hostconfig0-32bitUpgrade libndr-nbt0Upgrade libndr0-32bitUpgrade libdcerpc-atsvc0-32bitUpgrade libsmbldap0-32bitUpgrade libsmbsharemodes0Upgrade samba-clientUpgrade samba-32bitUpgrade samba-pythonUpgrade libpdb-develUpgrade libtevent-util0Upgrade libsamdb0Upgrade libsamba-util0Upgrade libregistry-develUpgrade samba-docUpgrade libsmbldap0Upgrade libsmbclient0Upgrade libndr-krb5pac-develUpgrade libsmbclient-raw0-32bitUpgrade libsamba-credentials-develUpgrade libdcerpc-binding0Upgrade libwbclient0-32bitUpgrade libwbclient-develUpgrade libtevent-util-develUpgrade libsmbclient-develUpgrade libsamba-hostconfig0Upgrade libtevent-util0-32bitUpgrade libdcerpc-atsvc0Upgrade libsmbconf0-32bitUpgrade libndr-krb5pac0Upgrade samba-core-develUpgrade libndr-nbt-develUpgrade libdcerpc0-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-util-develUpgrade libpdb0Upgrade libpdb0-32bitUpgrade libnetapi0Upgrade libdcerpc-develUpgrade libdcerpc-samr0-32bitUpgrade libwbclient0Upgrade samba-winbindUpgrade libnetapi-develUpgrade libsamba-policy-devel | Mar 27, 2014 | Mar 14, 2014 |
| Ubuntu | — | Upgrade samba | Nov 19, 2024 | Mar 14, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub