vulnerability

CentOS Linux: CVE-2017-7494: Important: samba security update (Multiple Advisories)

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
May 24, 2017
Added
May 25, 2017
Modified
May 25, 2023

Description

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.

Solutions

centos-upgrade-libsmbclientcentos-upgrade-libsmbclient-develcentos-upgrade-libwbclientcentos-upgrade-libwbclient-develcentos-upgrade-sambacentos-upgrade-samba-clientcentos-upgrade-samba-client-libscentos-upgrade-samba-commoncentos-upgrade-samba-common-libscentos-upgrade-samba-common-toolscentos-upgrade-samba-dccentos-upgrade-samba-dc-libscentos-upgrade-samba-debuginfocentos-upgrade-samba-develcentos-upgrade-samba-doccentos-upgrade-samba-domainjoin-guicentos-upgrade-samba-glusterfscentos-upgrade-samba-krb5-printingcentos-upgrade-samba-libscentos-upgrade-samba-pidlcentos-upgrade-samba-pythoncentos-upgrade-samba-swatcentos-upgrade-samba-testcentos-upgrade-samba-test-libscentos-upgrade-samba-vfs-glusterfscentos-upgrade-samba-winbindcentos-upgrade-samba-winbind-clientscentos-upgrade-samba-winbind-develcentos-upgrade-samba-winbind-krb5-locatorcentos-upgrade-samba-winbind-modulescentos-upgrade-samba3xcentos-upgrade-samba3x-clientcentos-upgrade-samba3x-commoncentos-upgrade-samba3x-debuginfocentos-upgrade-samba3x-doccentos-upgrade-samba3x-domainjoin-guicentos-upgrade-samba3x-swatcentos-upgrade-samba3x-winbindcentos-upgrade-samba3x-winbind-develcentos-upgrade-samba4centos-upgrade-samba4-clientcentos-upgrade-samba4-commoncentos-upgrade-samba4-dccentos-upgrade-samba4-dc-libscentos-upgrade-samba4-debuginfocentos-upgrade-samba4-develcentos-upgrade-samba4-libscentos-upgrade-samba4-pidlcentos-upgrade-samba4-pythoncentos-upgrade-samba4-testcentos-upgrade-samba4-winbindcentos-upgrade-samba4-winbind-clientscentos-upgrade-samba4-winbind-krb5-locator

References

    Title
    Rapid7 Labs

    2026 Global Threat Landscape Report

    The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.