A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libsmbclient-develalma-upgrade-libwbclient-develalma-upgrade-samba-develalma-upgrade-samba-vfs-iouring | May 4, 2022 | Mar 2, 2022 | |
| Alpine Linux | alpine-linux-upgrade-samba | Mar 26, 2024 | Mar 2, 2022 | |
| Centos_linux | — | centos-upgrade-ctdbcentos-upgrade-ctdb-debuginfocentos-upgrade-libsmbclientcentos-upgrade-libsmbclient-debuginfocentos-upgrade-libwbclientcentos-upgrade-libwbclient-debuginfocentos-upgrade-python3-sambacentos-upgrade-python3-samba-debuginfocentos-upgrade-python3-samba-testcentos-upgrade-sambacentos-upgrade-samba-clientcentos-upgrade-samba-client-debuginfocentos-upgrade-samba-client-libscentos-upgrade-samba-client-libs-debuginfocentos-upgrade-samba-commoncentos-upgrade-samba-common-libscentos-upgrade-samba-common-libs-debuginfocentos-upgrade-samba-common-toolscentos-upgrade-samba-common-tools-debuginfocentos-upgrade-samba-debuginfocentos-upgrade-samba-debugsourcecentos-upgrade-samba-krb5-printingcentos-upgrade-samba-krb5-printing-debuginfocentos-upgrade-samba-libscentos-upgrade-samba-libs-debuginfocentos-upgrade-samba-pidlcentos-upgrade-samba-testcentos-upgrade-samba-test-debuginfocentos-upgrade-samba-test-libscentos-upgrade-samba-test-libs-debuginfocentos-upgrade-samba-vfs-iouringcentos-upgrade-samba-vfs-iouring-debuginfocentos-upgrade-samba-winbindcentos-upgrade-samba-winbind-clientscentos-upgrade-samba-winbind-clients-debuginfocentos-upgrade-samba-winbind-debuginfocentos-upgrade-samba-winbind-krb5-locatorcentos-upgrade-samba-winbind-krb5-locator-debuginfocentos-upgrade-samba-winbind-modulescentos-upgrade-samba-winbind-modules-debuginfo | Dec 14, 2021 | Dec 13, 2021 |
| Debian | debian-upgrade-samba | Nov 4, 2022 | Mar 2, 2022 | |
| Freebsd | freebsd-upgrade-package-samba413freebsd-upgrade-package-samba414freebsd-upgrade-package-samba415 | Nov 4, 2022 | Nov 10, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-net-fs-samba | Sep 18, 2023 | Mar 2, 2022 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-library-samba-libsmbclient-4-13-8-11-4-42-0-1-113-0oracle-solaris-11-4-upgrade-service-network-samba-4-13-14-11-4-42-0-1-113-0 | Feb 17, 2022 | Feb 17, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-ctdboracle-linux-upgrade-libsmbclientoracle-linux-upgrade-libsmbclient-develoracle-linux-upgrade-libwbclientoracle-linux-upgrade-libwbclient-develoracle-linux-upgrade-python3-sambaoracle-linux-upgrade-python3-samba-testoracle-linux-upgrade-sambaoracle-linux-upgrade-samba-clientoracle-linux-upgrade-samba-client-libsoracle-linux-upgrade-samba-commonoracle-linux-upgrade-samba-common-libsoracle-linux-upgrade-samba-common-toolsoracle-linux-upgrade-samba-develoracle-linux-upgrade-samba-krb5-printingoracle-linux-upgrade-samba-libsoracle-linux-upgrade-samba-pidloracle-linux-upgrade-samba-testoracle-linux-upgrade-samba-test-libsoracle-linux-upgrade-samba-vfs-iouringoracle-linux-upgrade-samba-winbindoracle-linux-upgrade-samba-winbind-clientsoracle-linux-upgrade-samba-winbind-krb5-locatororacle-linux-upgrade-samba-winbind-modulesoracle-linux-upgrade-samba-winexe | Dec 14, 2021 | Nov 9, 2021 |
| Redhat_linux | redhat-upgrade-ctdbredhat-upgrade-ctdb-debuginforedhat-upgrade-ctdb-testsredhat-upgrade-ctdb-tests-debuginforedhat-upgrade-libsmbclientredhat-upgrade-libsmbclient-debuginforedhat-upgrade-libsmbclient-develredhat-upgrade-libwbclientredhat-upgrade-libwbclient-debuginforedhat-upgrade-libwbclient-develredhat-upgrade-python3-sambaredhat-upgrade-python3-samba-debuginforedhat-upgrade-python3-samba-testredhat-upgrade-sambaredhat-upgrade-samba-clientredhat-upgrade-samba-client-debuginforedhat-upgrade-samba-client-libsredhat-upgrade-samba-client-libs-debuginforedhat-upgrade-samba-commonredhat-upgrade-samba-common-libsredhat-upgrade-samba-common-libs-debuginforedhat-upgrade-samba-common-toolsredhat-upgrade-samba-common-tools-debuginforedhat-upgrade-samba-debuginforedhat-upgrade-samba-debugsourceredhat-upgrade-samba-develredhat-upgrade-samba-krb5-printingredhat-upgrade-samba-krb5-printing-debuginforedhat-upgrade-samba-libsredhat-upgrade-samba-libs-debuginforedhat-upgrade-samba-pidlredhat-upgrade-samba-testredhat-upgrade-samba-test-debuginforedhat-upgrade-samba-test-libsredhat-upgrade-samba-test-libs-debuginforedhat-upgrade-samba-vfs-glusterfs-debuginforedhat-upgrade-samba-vfs-iouringredhat-upgrade-samba-vfs-iouring-debuginforedhat-upgrade-samba-winbindredhat-upgrade-samba-winbind-clientsredhat-upgrade-samba-winbind-clients-debuginforedhat-upgrade-samba-winbind-debuginforedhat-upgrade-samba-winbind-krb5-locatorredhat-upgrade-samba-winbind-krb5-locator-debuginforedhat-upgrade-samba-winbind-modulesredhat-upgrade-samba-winbind-modules-debuginforedhat-upgrade-samba-winexeredhat-upgrade-samba-winexe-debuginfo | Dec 14, 2021 | Dec 13, 2021 | |
| Rocky_linux | rocky-upgrade-ctdbrocky-upgrade-ctdb-debuginforocky-upgrade-libsmbclientrocky-upgrade-libsmbclient-debuginforocky-upgrade-libsmbclient-develrocky-upgrade-libwbclientrocky-upgrade-libwbclient-debuginforocky-upgrade-libwbclient-develrocky-upgrade-python3-sambarocky-upgrade-python3-samba-debuginforocky-upgrade-python3-samba-testrocky-upgrade-sambarocky-upgrade-samba-clientrocky-upgrade-samba-client-debuginforocky-upgrade-samba-client-libsrocky-upgrade-samba-client-libs-debuginforocky-upgrade-samba-common-libsrocky-upgrade-samba-common-libs-debuginforocky-upgrade-samba-common-toolsrocky-upgrade-samba-common-tools-debuginforocky-upgrade-samba-debuginforocky-upgrade-samba-debugsourcerocky-upgrade-samba-develrocky-upgrade-samba-krb5-printingrocky-upgrade-samba-krb5-printing-debuginforocky-upgrade-samba-libsrocky-upgrade-samba-libs-debuginforocky-upgrade-samba-testrocky-upgrade-samba-test-debuginforocky-upgrade-samba-test-libsrocky-upgrade-samba-test-libs-debuginforocky-upgrade-samba-vfs-iouringrocky-upgrade-samba-vfs-iouring-debuginforocky-upgrade-samba-winbindrocky-upgrade-samba-winbind-clientsrocky-upgrade-samba-winbind-clients-debuginforocky-upgrade-samba-winbind-debuginforocky-upgrade-samba-winbind-krb5-locatorrocky-upgrade-samba-winbind-krb5-locator-debuginforocky-upgrade-samba-winbind-modulesrocky-upgrade-samba-winbind-modules-debuginforocky-upgrade-samba-winexerocky-upgrade-samba-winexe-debuginfo | Mar 12, 2024 | Mar 2, 2022 | |
| Samba | samba-upgrade-4_13_14samba-upgrade-4_14_10samba-upgrade-4_15_2 | Mar 10, 2022 | Mar 2, 2022 | |
| Suse | — | suse-upgrade-ctdbsuse-upgrade-ctdb-pcp-pmdasuse-upgrade-ctdb-testssuse-upgrade-ldb-toolssuse-upgrade-libdcerpc-binding0suse-upgrade-libdcerpc-binding0-32bitsuse-upgrade-libdcerpc-binding0-64bitsuse-upgrade-libdcerpc-develsuse-upgrade-libdcerpc-samr-develsuse-upgrade-libdcerpc-samr0suse-upgrade-libdcerpc-samr0-32bitsuse-upgrade-libdcerpc-samr0-64bitsuse-upgrade-libdcerpc0suse-upgrade-libdcerpc0-32bitsuse-upgrade-libdcerpc0-64bitsuse-upgrade-libldb-develsuse-upgrade-libldb2suse-upgrade-libldb2-32bitsuse-upgrade-libndr-develsuse-upgrade-libndr-krb5pac-develsuse-upgrade-libndr-krb5pac0suse-upgrade-libndr-krb5pac0-32bitsuse-upgrade-libndr-krb5pac0-64bitsuse-upgrade-libndr-nbt-develsuse-upgrade-libndr-nbt0suse-upgrade-libndr-nbt0-32bitsuse-upgrade-libndr-nbt0-64bitsuse-upgrade-libndr-standard-develsuse-upgrade-libndr-standard0suse-upgrade-libndr-standard0-32bitsuse-upgrade-libndr-standard0-64bitsuse-upgrade-libndr0suse-upgrade-libndr0-32bitsuse-upgrade-libndr1suse-upgrade-libndr1-32bitsuse-upgrade-libndr1-64bitsuse-upgrade-libnetapi-develsuse-upgrade-libnetapi-devel-32bitsuse-upgrade-libnetapi-devel-64bitsuse-upgrade-libnetapi0suse-upgrade-libnetapi0-32bitsuse-upgrade-libnetapi0-64bitsuse-upgrade-libsamba-credentials-develsuse-upgrade-libsamba-credentials0suse-upgrade-libsamba-credentials0-32bitsuse-upgrade-libsamba-credentials0-64bitsuse-upgrade-libsamba-errors-develsuse-upgrade-libsamba-errors0suse-upgrade-libsamba-errors0-32bitsuse-upgrade-libsamba-errors0-64bitsuse-upgrade-libsamba-hostconfig-develsuse-upgrade-libsamba-hostconfig0suse-upgrade-libsamba-hostconfig0-32bitsuse-upgrade-libsamba-hostconfig0-64bitsuse-upgrade-libsamba-passdb-develsuse-upgrade-libsamba-passdb0suse-upgrade-libsamba-passdb0-32bitsuse-upgrade-libsamba-passdb0-64bitsuse-upgrade-libsamba-policy-develsuse-upgrade-libsamba-policy-python3-develsuse-upgrade-libsamba-policy0-python3suse-upgrade-libsamba-policy0-python3-32bitsuse-upgrade-libsamba-policy0-python3-64bitsuse-upgrade-libsamba-util-develsuse-upgrade-libsamba-util0suse-upgrade-libsamba-util0-32bitsuse-upgrade-libsamba-util0-64bitsuse-upgrade-libsamdb-develsuse-upgrade-libsamdb0suse-upgrade-libsamdb0-32bitsuse-upgrade-libsamdb0-64bitsuse-upgrade-libsmbclient-develsuse-upgrade-libsmbclient0suse-upgrade-libsmbclient0-32bitsuse-upgrade-libsmbclient0-64bitsuse-upgrade-libsmbconf-develsuse-upgrade-libsmbconf0suse-upgrade-libsmbconf0-32bitsuse-upgrade-libsmbconf0-64bitsuse-upgrade-libsmbldap-develsuse-upgrade-libsmbldap2suse-upgrade-libsmbldap2-32bitsuse-upgrade-libsmbldap2-64bitsuse-upgrade-libtevent-util-develsuse-upgrade-libtevent-util0suse-upgrade-libtevent-util0-32bitsuse-upgrade-libtevent-util0-64bitsuse-upgrade-libwbclient-develsuse-upgrade-libwbclient0suse-upgrade-libwbclient0-32bitsuse-upgrade-libwbclient0-64bitsuse-upgrade-python3-ldbsuse-upgrade-python3-ldb-32bitsuse-upgrade-python3-ldb-develsuse-upgrade-sambasuse-upgrade-samba-ad-dcsuse-upgrade-samba-ad-dc-32bitsuse-upgrade-samba-ad-dc-64bitsuse-upgrade-samba-ad-dc-libssuse-upgrade-samba-cephsuse-upgrade-samba-clientsuse-upgrade-samba-client-32bitsuse-upgrade-samba-client-64bitsuse-upgrade-samba-client-libssuse-upgrade-samba-client-libs-32bitsuse-upgrade-samba-core-develsuse-upgrade-samba-develsuse-upgrade-samba-docsuse-upgrade-samba-dsdb-modulessuse-upgrade-samba-gpupdatesuse-upgrade-samba-ldb-ldapsuse-upgrade-samba-libssuse-upgrade-samba-libs-32bitsuse-upgrade-samba-libs-64bitsuse-upgrade-samba-libs-python3suse-upgrade-samba-libs-python3-32bitsuse-upgrade-samba-libs-python3-64bitsuse-upgrade-samba-python3suse-upgrade-samba-testsuse-upgrade-samba-winbindsuse-upgrade-samba-winbind-32bitsuse-upgrade-samba-winbind-64bitsuse-upgrade-samba-winbind-libssuse-upgrade-samba-winbind-libs-32bit | Nov 11, 2021 | Nov 10, 2021 |
| Ubuntu | ubuntu-upgrade-samba | Nov 12, 2021 | Nov 10, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub