Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate data stream (ADS).
CVSS Details
- CVSS 3.1 Base Score: 4.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | Nov 13, 2013 |
| Centos_linux | — | Upgrade samba-winbind-krb5-locatorUpgrade libsmbclient-develUpgrade samba-clientUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba3x-swatUpgrade samba3x-commonUpgrade samba3x-winbindUpgrade samba3x-winbind-develUpgrade samba3xUpgrade samba-winbind-develUpgrade samba-domainjoin-guiUpgrade samba3x-domainjoin-guiUpgrade samba3x-clientUpgrade samba-winbindUpgrade samba3x-docUpgrade samba-swatUpgrade samba-docUpgrade sambaUpgrade libsmbclient | Dec 1, 2016 | Nov 13, 2013 |
| Debian | — | Upgrade sambaUpgrade samba4 | Jul 30, 2024 | Nov 13, 2013 |
| Freebsd | — | Upgrade samba36Upgrade samba34Upgrade samba35Upgrade samba4Upgrade samba41 | Dec 10, 2025 | Nov 19, 2013 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Nov 13, 2013 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.6.20-0.175.1.14.0.4.0 on Solaris 11.1 | May 29, 2017 | Nov 13, 2013 |
| Oracle_linux | — | Upgrade samba3xUpgrade samba3x-winbind-develUpgrade samba-winbind-krb5-locatorUpgrade samba-commonUpgrade samba-winbind-develUpgrade samba-winbind-clientsUpgrade samba-docUpgrade samba3x-domainjoin-guiUpgrade sambaUpgrade samba-clientUpgrade libsmbclientUpgrade samba3x-clientUpgrade samba3x-docUpgrade samba3x-commonUpgrade samba3x-swatUpgrade samba-swatUpgrade samba3x-winbindUpgrade samba-winbindUpgrade libsmbclient-develUpgrade samba-domainjoin-gui | Oct 16, 2024 | Nov 13, 2013 |
| Samba | — | Upgrade to Samba version 3.6.20Upgrade to Samba version 4.1.1Upgrade to Samba version 4.0.11 | Nov 13, 2013 | Nov 13, 2013 |
| Suse | — | Upgrade libsamba-hostconfig0-32bitUpgrade samba-libs-32bitUpgrade samba-winbindUpgrade samba-test-develUpgrade libldb1Upgrade libsmbconf0-32bitUpgrade libwbclient-develUpgrade libgensec0Upgrade libdcerpc-develUpgrade samba-develUpgrade libtalloc2-x86Upgrade libndr0-32bitUpgrade libsmbconf0Upgrade libsmbldap0Upgrade libsmbclient0Upgrade libndr0Upgrade libpdb0-32bitUpgrade libsmbldap-develUpgrade libsmbldap0-32bitUpgrade libsamba-util0-32bitUpgrade libsmbconf-develUpgrade libdcerpc-atsvc-develUpgrade libnetapi0Upgrade libsamba-credentials0Upgrade samba-client-x86Upgrade samba-testUpgrade libtalloc2Upgrade samba-winbind-32bitUpgrade libsamba-credentials0-32bitUpgrade sle-sdk-releaseUpgrade samba-pythonUpgrade libwbclient0-x86Upgrade sambaUpgrade samba-docUpgrade libgensec-develUpgrade libndr-develUpgrade libndr-nbt0-32bitUpgrade samba-pidlUpgrade libdcerpc-samr0Upgrade samba-32bitUpgrade libdcerpc-atsvc0Upgrade libtalloc-develUpgrade samba-winbind-x86Upgrade libtevent-util0-32bitUpgrade libsmbclient-raw0Upgrade libndr-krb5pac0-32bitUpgrade libdcerpc-binding0Upgrade libdcerpc-samr0-32bitUpgrade libtdb1-x86Upgrade libgensec0-32bitUpgrade libtdb-develUpgrade libndr-standard0-32bitUpgrade libnetapi-develUpgrade libsamba-hostconfig-develUpgrade libsmbsharemodes0Upgrade libndr-nbt0Upgrade libtevent0-32bitUpgrade libldb1-32bitUpgrade libpdb-develUpgrade libtevent-util-develUpgrade samba-core-develUpgrade libsamba-hostconfig0Upgrade libsamdb0-32bitUpgrade libtdb1-32bitUpgrade libdcerpc0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libtalloc1Upgrade libregistry0Upgrade libwbclient0Upgrade libdcerpc-samr-develUpgrade libsamba-policy0-32bitUpgrade libsmbclient-raw-develUpgrade samba-clientUpgrade libndr-nbt-develUpgrade libregistry0-32bitUpgrade samba-libsUpgrade libtalloc1-32bitUpgrade samba-krb-printingUpgrade libsamdb0Upgrade libsmbclient-raw0-32bitUpgrade libdcerpc0Upgrade libtdb1Upgrade libsmbclient0-x86Upgrade libregistry-develUpgrade libndr-standard-develUpgrade libnetapi0-32bitUpgrade libsamba-util0Upgrade libndr-krb5pac-develUpgrade libsamba-policy-develUpgrade libtalloc2-32bitUpgrade cifs-mountUpgrade libwbclient0-32bitUpgrade libndr-krb5pac0Upgrade libtevent-util0Upgrade libldb-develUpgrade libtevent0Upgrade libsamba-util-develUpgrade samba-x86Upgrade libtevent-develUpgrade libsamdb-develUpgrade libtalloc1-x86Upgrade libsamba-policy0Upgrade samba-client-32bitUpgrade libsmbclient0-32bitUpgrade libdcerpc-atsvc0-32bitUpgrade libndr-standard0Upgrade libpdb0Upgrade libsmbsharemodes-develUpgrade libsamba-credentials-develUpgrade ldapsmbUpgrade libsmbclient-devel | Dec 12, 2013 | Nov 13, 2013 |
| Ubuntu | — | Upgrade sambaUpgrade libpam-winbindUpgrade winbind | Nov 8, 2024 | Nov 13, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub