Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate data stream (ADS).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | Nov 13, 2013 |
| Centos_linux | — | Upgrade samba-winbindUpgrade samba3x-clientUpgrade sambaUpgrade samba-domainjoin-guiUpgrade libsmbclientUpgrade samba3x-docUpgrade samba3x-domainjoin-guiUpgrade samba3xUpgrade samba-docUpgrade samba-swatUpgrade samba-winbind-develUpgrade libsmbclient-develUpgrade samba3x-swatUpgrade samba-commonUpgrade samba3x-commonUpgrade samba-winbind-krb5-locatorUpgrade samba3x-winbind-develUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba3x-winbind | Dec 1, 2016 | Nov 13, 2013 |
| Debian | — | Upgrade sambaUpgrade samba4 | Jul 30, 2024 | Nov 13, 2013 |
| Freebsd | — | Upgrade samba36Upgrade samba34Upgrade samba4Upgrade samba35Upgrade samba41 | Dec 10, 2025 | Nov 19, 2013 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Nov 13, 2013 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.6.20-0.175.1.14.0.4.0 on Solaris 11.1 | May 29, 2017 | Nov 13, 2013 |
| Oracle_linux | — | Upgrade samba-commonUpgrade samba3x-winbind-develUpgrade samba3xUpgrade samba-winbind-develUpgrade samba3x-domainjoin-guiUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade samba-docUpgrade sambaUpgrade libsmbclientUpgrade samba-clientUpgrade samba3x-clientUpgrade samba-swatUpgrade samba3x-commonUpgrade samba-domainjoin-guiUpgrade samba-winbindUpgrade libsmbclient-develUpgrade samba3x-swatUpgrade samba3x-docUpgrade samba3x-winbind | Oct 16, 2024 | Nov 13, 2013 |
| Samba | — | Upgrade to Samba version 4.0.11Upgrade to Samba version 3.6.20Upgrade to Samba version 4.1.1 | Nov 13, 2013 | Nov 13, 2013 |
| Suse | — | Upgrade libdcerpc-atsvc-develUpgrade libsamba-hostconfig0-32bitUpgrade libsmbsharemodes0Upgrade samba-libs-32bitUpgrade samba-winbindUpgrade libsmbclient0Upgrade libdcerpc-binding0Upgrade libndr-krb5pac0-32bitUpgrade libsamba-util0-32bitUpgrade sle-sdk-releaseUpgrade libtalloc-develUpgrade libdcerpc-atsvc0Upgrade libsamba-credentials0-32bitUpgrade libnetapi-develUpgrade libtalloc2Upgrade libdcerpc-samr0-32bitUpgrade libsmbclient-raw0Upgrade libsamba-hostconfig-develUpgrade samba-core-develUpgrade libldb1Upgrade libndr-standard0-32bitUpgrade libtalloc2-x86Upgrade samba-client-x86Upgrade libpdb0-32bitUpgrade libndr0-32bitUpgrade libsmbconf0Upgrade libsmbldap0-32bitUpgrade libgensec0Upgrade libgensec-develUpgrade libsamba-credentials0Upgrade libndr-nbt0Upgrade samba-pidlUpgrade libdcerpc-develUpgrade samba-winbind-32bitUpgrade libsmbldap-develUpgrade libtdb1-x86Upgrade libndr-develUpgrade libtevent-util0-32bitUpgrade libwbclient-develUpgrade samba-test-develUpgrade libndr0Upgrade libpdb-develUpgrade libtdb-develUpgrade libdcerpc-samr0Upgrade libsmbconf0-32bitUpgrade libldb1-32bitUpgrade libsmbconf-develUpgrade libndr-nbt0-32bitUpgrade samba-pythonUpgrade samba-winbind-x86Upgrade libsmbldap0Upgrade libgensec0-32bitUpgrade samba-develUpgrade libsamba-hostconfig0Upgrade libnetapi0Upgrade libtevent0-32bitUpgrade samba-testUpgrade samba-docUpgrade samba-32bitUpgrade libwbclient0-x86Upgrade sambaUpgrade libtevent-util-develUpgrade libndr-krb5pac-develUpgrade libtevent-util0Upgrade libpdb0Upgrade libtevent-develUpgrade libsamba-util-develUpgrade libwbclient0-32bitUpgrade samba-krb-printingUpgrade libtdb1-32bitUpgrade libtdb1Upgrade libdcerpc0-32bitUpgrade samba-libsUpgrade libsamba-policy-develUpgrade libsmbclient-raw-develUpgrade libsmbclient-develUpgrade samba-clientUpgrade libsamba-policy0Upgrade libsmbclient0-x86Upgrade libsamba-policy0-32bitUpgrade libwbclient0Upgrade libdcerpc0Upgrade libregistry-develUpgrade libsmbclient0-32bitUpgrade libtalloc2-32bitUpgrade libsamdb-develUpgrade libndr-standard0Upgrade cifs-mountUpgrade libdcerpc-atsvc0-32bitUpgrade libsmbsharemodes-develUpgrade libtalloc1-x86Upgrade libtalloc1-32bitUpgrade libdcerpc-binding0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libldb-develUpgrade libndr-krb5pac0Upgrade libndr-standard-develUpgrade libregistry0Upgrade libsamdb0Upgrade libsamba-util0Upgrade libsamdb0-32bitUpgrade libndr-nbt-develUpgrade samba-client-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-credentials-develUpgrade libtalloc1Upgrade samba-x86Upgrade libtevent0Upgrade libregistry0-32bitUpgrade ldapsmbUpgrade libnetapi0-32bit | Dec 12, 2013 | Nov 13, 2013 |
| Ubuntu | — | Upgrade sambaUpgrade winbindUpgrade libpam-winbind | Nov 8, 2024 | Nov 13, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub