The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The SMB2 implementation in Samba 3.6.x before 3.6.6, as used on the IBM Storwize V7000 Unified 1.3 before 1.3.2.3 and 1.4 before 1.4.0.1 and possibly other products, does not properly enforce CIFS share attributes, which allows remote authenticated users to (1) write to a read-only share; (2) trigger data-integrity problems related to the oplock, locking, coherency, or leases attribute; or (3) have an unspecified impact by leveraging incorrect handling of the browseable or "hide unreadable" parameter.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade samba | Jul 30, 2024 | Mar 26, 2013 |
| Samba | — | Upgrade to Samba version 3.6.6 | Nov 13, 2013 | Mar 26, 2013 |
| Suse | — | Upgrade samba-debuginfo-32bitUpgrade libldb1-debuginfoUpgrade libtdb1-x86Upgrade libwbclient0-debuginfo-x86Upgrade libsmbclient0Upgrade libsmbsharemodes-develUpgrade libtalloc2-debuginfoUpgrade libtalloc2-debuginfo-32bitUpgrade libwbclient-develUpgrade samba-krb-printingUpgrade libtdb1-debuginfo-32bitUpgrade libwbclient0-x86Upgrade samba-winbind-x86Upgrade libnetapi0-debuginfoUpgrade samba-debuginfoUpgrade libnetapi-develUpgrade libtdb1-32bitUpgrade samba-debugsourceUpgrade libtevent0-32bitUpgrade libtdb1-debuginfoUpgrade libtalloc2Upgrade samba-winbind-debuginfo-x86Upgrade libtdb1-debuginfo-x86Upgrade libwbclient0-32bitUpgrade libsmbclient0-debuginfo-x86Upgrade samba-debuginfo-x86Upgrade samba-32bitUpgrade samba-client-32bitUpgrade libtalloc2-debuginfo-x86Upgrade samba-client-debuginfo-x86Upgrade libldb1Upgrade libsmbclient0-x86Upgrade libtdb-develUpgrade libldb1-x86Upgrade libsmbclient0-debuginfoUpgrade libtevent0Upgrade samba-krb-printing-debuginfoUpgrade libsmbsharemodes0Upgrade sambaUpgrade libldb1-32bitUpgrade libtalloc-develUpgrade libtalloc2-32bitUpgrade samba-winbind-debuginfo-32bitUpgrade samba-winbindUpgrade samba-winbind-32bitUpgrade libtdb1Upgrade samba-x86Upgrade samba-clientUpgrade libsmbclient-develUpgrade libtalloc2-x86Upgrade libldb1-debuginfo-32bitUpgrade libtevent0-debuginfo-x86Upgrade ldapsmbUpgrade libnetapi0Upgrade libwbclient0-debuginfoUpgrade libwbclient0Upgrade samba-winbind-debuginfoUpgrade libwbclient0-debuginfo-32bitUpgrade libtevent-develUpgrade samba-client-x86Upgrade libtevent0-debuginfoUpgrade libsmbsharemodes0-debuginfoUpgrade samba-client-debuginfo-32bitUpgrade libtevent0-x86Upgrade libldb1-debuginfo-x86Upgrade libsmbclient0-debuginfo-32bitUpgrade libsmbclient0-32bitUpgrade libtevent0-debuginfo-32bitUpgrade samba-docUpgrade libldb-develUpgrade samba-client-debuginfoUpgrade samba-devel | Dec 12, 2013 | Mar 26, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Mar 26, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub