vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with certain substring relationships exist, allows remote attackers to bypass intended file-access restrictions via a symlink that points outside of a share.
CVSS Details
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sambaUpgrade ldb | Aug 30, 2017 | Dec 29, 2015 |
| Centos_linux | — | Upgrade samba-domainjoin-guiUpgrade samba-develUpgrade samba-winbind-develUpgrade libwbclientUpgrade samba4-clientUpgrade libsmbclient-develUpgrade samba-pidlUpgrade samba-vfs-glusterfsUpgrade samba-docUpgrade ctdbUpgrade samba-commonUpgrade sambaUpgrade samba4Upgrade samba-dcUpgrade samba4-winbindUpgrade samba-libsUpgrade samba4-pythonUpgrade samba4-dcUpgrade samba-winbind-clientsUpgrade samba4-winbind-clientsUpgrade ctdb-develUpgrade samba-winbindUpgrade samba-dc-libsUpgrade samba-common-libsUpgrade samba-test-libsUpgrade samba-pythonUpgrade samba4-dc-libsUpgrade libsmbclientUpgrade samba-test-develUpgrade samba4-libsUpgrade samba-winbind-modulesUpgrade ctdb-testsUpgrade libwbclient-develUpgrade samba4-pidlUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade samba4-winbind-krb5-locatorUpgrade samba4-develUpgrade samba-swatUpgrade samba4-commonUpgrade samba4-swatUpgrade samba4-testUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-glusterfsUpgrade samba-test | Jul 6, 2016 | Dec 29, 2015 |
| Debian | — | Upgrade samba | Jan 4, 2016 | Dec 29, 2015 |
| Freebsd | — | Upgrade samba4Upgrade samba43Upgrade ldbUpgrade samba36Upgrade samba42Upgrade samba41 | Dec 10, 2025 | Dec 19, 2015 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Dec 29, 2015 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.6.25-0.175.3.6.0.2.0 on Solaris 11.3 | May 29, 2017 | Dec 29, 2015 |
| Oracle_linux | — | Upgrade samba-docUpgrade sambaUpgrade samba-common-libsUpgrade samba4-pythonUpgrade samba-winbind-clientsUpgrade libwbclient-develUpgrade samba-pythonUpgrade libsmbclient-develUpgrade samba4-testUpgrade samba-dc-libsUpgrade samba4-winbind-krb5-locatorUpgrade samba-winbind-modulesUpgrade samba-swatUpgrade samba4-dcUpgrade samba-winbindUpgrade samba4-develUpgrade samba4-winbindUpgrade samba-vfs-glusterfsUpgrade samba-develUpgrade samba-commonUpgrade samba-dcUpgrade samba-domainjoin-guiUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba4-libsUpgrade samba-libsUpgrade samba-winbind-develUpgrade samba4-dc-libsUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba4Upgrade samba4-swatUpgrade samba4-winbind-clientsUpgrade samba-testUpgrade samba-test-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-pidlUpgrade samba4-clientUpgrade samba-glusterfsUpgrade samba4-pidlUpgrade samba-test-develUpgrade samba4-commonUpgrade libwbclient | May 3, 2019 | Dec 29, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 16, 2015 |
| Samba | — | Upgrade to Samba version 4.2.7Upgrade to Samba version 4.1.22Upgrade to Samba version 4.3.3 | Mar 24, 2016 | Dec 29, 2015 |
| Suse | — | Upgrade samba-kdcUpgrade libgensec0-32bitUpgrade libsamba-hostconfig0Upgrade samba-client-x86Upgrade libtdb1-x86Upgrade libtdb-develUpgrade libsamba-util-develUpgrade samba-develUpgrade libsamba-credentials0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsamba-util0-32bitUpgrade libwbclient0Upgrade libndr-nbt0Upgrade pytallocUpgrade libtevent0-32bitUpgrade libsamba-policy-python3-develUpgrade libpdb0Upgrade sambaUpgrade libldb1-32bitUpgrade libndr-standard-develUpgrade libsmbconf0-32bitUpgrade libnetapi-develUpgrade samba-libs-python3Upgrade libsmbldap2-32bitUpgrade samba-krb-printingUpgrade samba-clientUpgrade samba-pythonUpgrade libdcerpc-develUpgrade libtevent-util0Upgrade libsmbldap0-32bitUpgrade libsmbclient-raw0Upgrade pytalloc-develUpgrade libsamba-passdb-develUpgrade libndr1Upgrade libsmbclient0Upgrade samba-winbind-x86Upgrade libgensec0Upgrade libpdb0-32bitUpgrade libsamba-policy0-python3Upgrade libregistry0Upgrade libndr0Upgrade libgensec-develUpgrade libsamba-policy-develUpgrade samba-libs-32bitUpgrade samba-libsUpgrade libsamba-credentials0Upgrade libsmbclient-develUpgrade samba-dsdb-modulesUpgrade libsamba-errors0-32bitUpgrade samba-cephUpgrade samba-testUpgrade libtevent0Upgrade libsamdb-develUpgrade libndr-standard0Upgrade libpdb-develUpgrade libndr-nbt-develUpgrade libtalloc-develUpgrade samba-docUpgrade libnetapi0Upgrade ldapsmbUpgrade ctdbUpgrade tdb-toolsUpgrade libsmbsharemodes0Upgrade libtevent-util-develUpgrade libsmbclient0-x86Upgrade libtalloc2-x86Upgrade libsmbconf0Upgrade samba-client-32bitUpgrade libsmbsharemodes-develUpgrade libdcerpc-atsvc0Upgrade libdcerpc0-32bitUpgrade libndr-standard0-32bitUpgrade libsamba-passdb0Upgrade libldb-develUpgrade libsmbclient-raw0-32bitUpgrade libwbclient-develUpgrade libtevent-util0-32bitUpgrade libndr-krb5pac-develUpgrade samba-core-develUpgrade libndr-nbt0-32bitUpgrade libsamdb0-32bitUpgrade libndr1-32bitUpgrade samba-32bitUpgrade libtevent-develUpgrade libtalloc2Upgrade samba-python3Upgrade libndr-develUpgrade samba-libs-python3-32bitUpgrade libnetapi0-32bitUpgrade libsamba-hostconfig-develUpgrade libsmbldap0Upgrade libsamba-credentials-develUpgrade libndr0-32bitUpgrade libsamba-policy0Upgrade libsamba-errors0Upgrade libregistry-develUpgrade libdcerpc-samr-develUpgrade libdcerpc-samr0Upgrade samba-x86Upgrade libsmbclient-raw-develUpgrade pytalloc-32bitUpgrade libdcerpc-binding0Upgrade libtevent0-x86Upgrade samba-winbind-32bitUpgrade samba-test-develUpgrade libldb1Upgrade pyldb-develUpgrade libwbclient0-x86Upgrade samba-winbindUpgrade libsmbclient0-32bitUpgrade libsmbldap-develUpgrade libtdb1-32bitUpgrade pyldbUpgrade libsamba-passdb0-32bitUpgrade libsamba-util0Upgrade libdcerpc-atsvc-develUpgrade libdcerpc0Upgrade libsmbconf-develUpgrade libsmbldap2Upgrade libtalloc2-32bitUpgrade libndr-krb5pac0Upgrade libwbclient0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libsamdb0Upgrade libsamba-hostconfig0-32bitUpgrade libsamba-errors-develUpgrade libtdb1 | Jan 4, 2016 | Dec 18, 2015 |
| Ubuntu | — | Upgrade samba | Feb 2, 2016 | Dec 29, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub