Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a denial of service (mounting outage) via a SIGKILL signal during a time window when the /etc/mtab~ file exists.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | debian-upgrade-cifs-utilsdebian-upgrade-samba | Jul 30, 2024 | Dec 31, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-cifs-utilsoracle-linux-upgrade-libsmbclientoracle-linux-upgrade-libsmbclient-develoracle-linux-upgrade-sambaoracle-linux-upgrade-samba-clientoracle-linux-upgrade-samba-commonoracle-linux-upgrade-samba-docoracle-linux-upgrade-samba-domainjoin-guioracle-linux-upgrade-samba-swatoracle-linux-upgrade-samba-winbindoracle-linux-upgrade-samba-winbind-clientsoracle-linux-upgrade-samba-winbind-develoracle-linux-upgrade-samba-winbind-krb5-locator | Oct 16, 2024 | Dec 31, 2019 |
| Ubuntu | ubuntu-upgrade-smbfs | Nov 8, 2024 | Dec 31, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub