The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade samba | Jul 30, 2024 | Mar 10, 2010 |
| Oracle_linux | — | Upgrade libsmbclient-develUpgrade libsmbclientUpgrade samba-swatUpgrade samba-commonUpgrade sambaUpgrade samba-client | Oct 16, 2024 | Mar 9, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 5, 2010 |
| Samba | — | Upgrade to Samba version 3.3.11Upgrade to Samba version 3.4.6 | Nov 13, 2013 | Mar 10, 2010 |
| Suse | — | Upgrade libwbclient-develUpgrade samba-python3Upgrade samba-32bitUpgrade samba-ad-dc-libsUpgrade libsmbldap2-32bitUpgrade samba-docUpgrade libtalloc2-x86Upgrade samba-x86Upgrade samba-libs-32bitUpgrade libwbclient0-32bitUpgrade libtdb1-32bitUpgrade samba-winbind-32bitUpgrade samba-develUpgrade samba-ldb-ldapUpgrade libsamba-credentials-develUpgrade libdcerpc-samr-develUpgrade libpdb0Upgrade libsamba-util0Upgrade libpdb0-32bitUpgrade samba-winbindUpgrade samba-libs-python3Upgrade libndr-nbt-develUpgrade libsmbldap0-32bitUpgrade libwbclient0-x86Upgrade libsmbclient-raw-develUpgrade libldb-develUpgrade libtevent-util0-32bitUpgrade libdcerpc-develUpgrade libsmbsharemodes0Upgrade samba-ad-dcUpgrade libtevent-util0Upgrade libsmbclient-develUpgrade libnetapi-develUpgrade libsmbldap2Upgrade ldapsmbUpgrade samba-winbind-libsUpgrade libsamdb0Upgrade samba-client-libsUpgrade ctdbUpgrade libsamba-hostconfig0Upgrade libsamba-policy-develUpgrade libregistry-develUpgrade libsamba-passdb0-32bitUpgrade libtalloc1-32bitUpgrade samba-gpupdateUpgrade ctdb-pcp-pmdaUpgrade libwbclient0Upgrade libldb2Upgrade libsmbclient-raw0-32bitUpgrade libdcerpc0-32bitUpgrade libsamba-util-develUpgrade libsmbconf0Upgrade libndr0-32bitUpgrade libsmbldap0Upgrade samba-pythonUpgrade libdcerpc-binding0Upgrade libnetapi0Upgrade libsamba-errors0Upgrade libsamba-hostconfig0-32bitUpgrade libsmbconf-develUpgrade libsmbclient0Upgrade libsmbclient0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libndr-krb5pac-develUpgrade libpdb-develUpgrade samba-toolUpgrade samba-dcerpcUpgrade libdcerpc-atsvc0Upgrade libsmbconf0-32bitUpgrade samba-core-develUpgrade samba-krb-printingUpgrade libndr-nbt0Upgrade sambaUpgrade libndr-krb5pac0Upgrade samba-client-langUpgrade libsamdb0-32bitUpgrade samba-client-32bitUpgrade libsamba-errors-develUpgrade libsamba-credentials0Upgrade samba-libs-python3-32bitUpgrade samba-dsdb-modulesUpgrade libsamba-passdb0Upgrade libtalloc1Upgrade cifs-mountUpgrade libtalloc1-x86Upgrade samba-winbind-x86Upgrade libsmbclient0-x86Upgrade libsamba-hostconfig-develUpgrade libndr-develUpgrade libsamdb-develUpgrade samba-winbind-libs-langUpgrade libsmbldap-develUpgrade libgensec0Upgrade libdcerpc-samr0Upgrade libndr-nbt0-32bitUpgrade libtalloc2-32bitUpgrade libregistry0Upgrade libtevent-develUpgrade libldb1Upgrade libsamba-policy0Upgrade libtdb1-x86Upgrade libsmbsharemodes-develUpgrade libtdb-develUpgrade libndr0Upgrade libndr-standard0Upgrade libtdb1Upgrade samba-test-develUpgrade libsamba-errors0-32bitUpgrade libdcerpc-atsvc-develUpgrade samba-clientUpgrade samba-client-x86Upgrade libsamba-passdb-develUpgrade samba-libsUpgrade ldb-toolsUpgrade libtevent0-32bitUpgrade libgensec-develUpgrade libndr-standard0-32bitUpgrade libsamba-util0-32bitUpgrade libtevent0-x86Upgrade libndr-standard-develUpgrade libdcerpc0Upgrade libsmbclient-raw0Upgrade libdcerpc-binding0-32bitUpgrade libtalloc2Upgrade libtalloc-develUpgrade libsamba-credentials0-32bitUpgrade libgensec0-32bitUpgrade samba-testUpgrade libnetapi0-32bitUpgrade python3-ldbUpgrade samba-kdcUpgrade libtevent-util-develUpgrade libtevent0 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Mar 10, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub