The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended administrative change.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade samba4-commonUpgrade samba4-pidlUpgrade samba4-winbind-clientsUpgrade samba4-swatUpgrade samba4-winbindUpgrade samba4Upgrade samba4-clientUpgrade samba4-winbind-krb5-locatorUpgrade samba4-dc-libsUpgrade samba4-dcUpgrade samba4-testUpgrade samba4-libsUpgrade samba4-pythonUpgrade samba4-devel | Dec 1, 2016 | Mar 14, 2014 |
| Debian | — | Upgrade samba4Upgrade samba | Jul 30, 2024 | Mar 14, 2014 |
| Freebsd | — | Upgrade samba4Upgrade samba36Upgrade samba34Upgrade samba41Upgrade samba35 | Dec 10, 2025 | Mar 11, 2014 |
| Oracle_linux | — | Upgrade samba4-commonUpgrade samba4-dc-libsUpgrade samba4-winbind-krb5-locatorUpgrade samba4-dcUpgrade samba4-develUpgrade samba4-testUpgrade samba4-pythonUpgrade samba4-pidlUpgrade samba4-winbindUpgrade samba4Upgrade samba4-swatUpgrade samba4-libsUpgrade samba4-clientUpgrade samba4-winbind-clients | Jun 26, 2018 | Mar 14, 2014 |
| Samba | — | Upgrade to Samba version 4.1.6Upgrade to Samba version 4.0.16 | Mar 17, 2014 | Mar 17, 2014 |
| Suse | — | Upgrade samba-libs-32bitUpgrade sambaUpgrade libwbclient0Upgrade libsmbclient-raw-develUpgrade libregistry-develUpgrade libdcerpc-binding0Upgrade libndr-krb5pac0Upgrade libsamba-credentials-develUpgrade libpdb-develUpgrade libwbclient-develUpgrade samba-pythonUpgrade libsamba-util0Upgrade samba-32bitUpgrade libndr0-32bitUpgrade samba-clientUpgrade samba-core-develUpgrade samba-winbindUpgrade libsmbldap0-32bitUpgrade libndr-krb5pac-develUpgrade libsamba-util-develUpgrade libsmbldap0Upgrade libndr-krb5pac0-32bitUpgrade libpdb0Upgrade libdcerpc0-32bitUpgrade libsmbclient0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libnetapi-develUpgrade libsmbclient0Upgrade libdcerpc-atsvc0Upgrade libtevent-util0Upgrade libndr-nbt-develUpgrade libsmbclient-develUpgrade libsamba-hostconfig0Upgrade libdcerpc-samr-develUpgrade libsamdb0Upgrade libndr-nbt0Upgrade libsamba-policy-develUpgrade libsmbsharemodes0Upgrade libdcerpc-atsvc0-32bitUpgrade samba-winbind-32bitUpgrade libsmbconf0-32bitUpgrade libtevent-util0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libdcerpc-develUpgrade samba-docUpgrade libwbclient0-32bitUpgrade libpdb0-32bitUpgrade libdcerpc-samr0-32bitUpgrade libnetapi0Upgrade libtevent-util-develUpgrade libsmbldap-develUpgrade libndr0Upgrade libsamba-credentials0Upgrade libsamba-hostconfig-develUpgrade libdcerpc-binding0-32bitUpgrade samba-pidlUpgrade samba-test-develUpgrade libndr-standard-develUpgrade libsmbconf-develUpgrade libdcerpc-atsvc-develUpgrade samba-testUpgrade libdcerpc-samr0Upgrade libsmbsharemodes-develUpgrade libsamba-policy0Upgrade libnetapi0-32bitUpgrade libregistry0-32bitUpgrade libsamba-policy0-32bitUpgrade libndr-develUpgrade samba-client-32bitUpgrade libsamdb-develUpgrade libdcerpc0Upgrade libsamba-credentials0-32bitUpgrade libgensec-develUpgrade libsamba-util0-32bitUpgrade libsmbclient-raw0Upgrade libndr-standard0-32bitUpgrade libsmbconf0Upgrade samba-libsUpgrade libndr-standard0Upgrade libregistry0Upgrade libgensec0Upgrade libgensec0-32bitUpgrade libndr-nbt0-32bitUpgrade libsamdb0-32bit | Mar 27, 2014 | Mar 14, 2014 |
| Ubuntu | — | Upgrade samba | Nov 19, 2024 | Mar 14, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub