The shadow_copy2_get_shadow_copy_data function in modules/vfs_shadow_copy2.c in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not verify that the DIRECTORY_LIST access right has been granted, which allows remote attackers to access snapshots by visiting a shadow copy directory.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sambaUpgrade ldb | Aug 30, 2017 | Dec 29, 2015 |
| Centos_linux | — | Upgrade samba4-testUpgrade samba-commonUpgrade samba-dc-libsUpgrade samba-winbindUpgrade libwbclient-develUpgrade samba-swatUpgrade samba4-develUpgrade samba-common-libsUpgrade samba-domainjoin-guiUpgrade samba-develUpgrade samba-winbind-krb5-locatorUpgrade samba4-winbind-krb5-locatorUpgrade libsmbclient-develUpgrade sambaUpgrade samba4-dc-libsUpgrade samba-pythonUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-docUpgrade libsmbclientUpgrade samba4-libsUpgrade ctdbUpgrade ctdb-testsUpgrade samba4-pythonUpgrade samba-pidlUpgrade samba-winbind-develUpgrade libwbclientUpgrade samba-testUpgrade samba4-clientUpgrade samba4-commonUpgrade samba4-winbindUpgrade samba-test-develUpgrade samba4-swatUpgrade ctdb-develUpgrade samba4-pidlUpgrade samba-client-libsUpgrade samba-glusterfsUpgrade samba-test-libsUpgrade samba-dcUpgrade samba4-winbind-clientsUpgrade samba4Upgrade samba-vfs-glusterfsUpgrade samba4-dc | Jul 6, 2016 | Dec 29, 2015 |
| Debian | — | Upgrade samba | Jan 4, 2016 | Dec 29, 2015 |
| Freebsd | — | Upgrade samba36Upgrade samba41Upgrade ldbUpgrade samba43Upgrade samba4Upgrade samba42 | Dec 10, 2025 | Dec 19, 2015 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Dec 29, 2015 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.6.25-0.175.3.6.0.2.0 on Solaris 11.3 | May 29, 2017 | Dec 29, 2015 |
| Oracle_linux | — | Upgrade samba4Upgrade samba4-winbindUpgrade sambaUpgrade samba-vfs-glusterfsUpgrade samba-winbind-modulesUpgrade samba-docUpgrade samba4-dc-libsUpgrade samba-pythonUpgrade samba-common-libsUpgrade samba-swatUpgrade samba4-winbind-clientsUpgrade samba-glusterfsUpgrade samba-dc-libsUpgrade samba-test-develUpgrade samba4-clientUpgrade samba-winbind-develUpgrade samba4-pythonUpgrade samba-test-libsUpgrade samba4-swatUpgrade samba-testUpgrade samba-dcUpgrade samba-commonUpgrade samba-pidlUpgrade samba-develUpgrade samba-winbindUpgrade samba4-dcUpgrade samba-clientUpgrade libsmbclientUpgrade samba4-testUpgrade samba4-pidlUpgrade libwbclient-develUpgrade libwbclientUpgrade samba-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-client-libsUpgrade samba4-libsUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba4-commonUpgrade samba4-develUpgrade samba4-winbind-krb5-locatorUpgrade samba-domainjoin-guiUpgrade libsmbclient-devel | May 3, 2019 | Dec 29, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 16, 2015 |
| Samba | — | Upgrade to Samba version 4.3.3Upgrade to Samba version 4.1.22Upgrade to Samba version 4.2.7 | Mar 24, 2016 | Dec 29, 2015 |
| Suse | — | Upgrade samba-pythonUpgrade samba-krb-printingUpgrade samba-winbind-32bitUpgrade libldb-develUpgrade libtevent0Upgrade libsamba-credentials-develUpgrade libsmbclient0-32bitUpgrade libtdb-develUpgrade libsamba-hostconfig0Upgrade libsamba-credentials0-32bitUpgrade libndr-standard0Upgrade libsamba-hostconfig0-32bitUpgrade libdcerpc-atsvc0Upgrade samba-libs-32bitUpgrade samba-libs-python3Upgrade libsamdb0Upgrade samba-core-develUpgrade libsamba-errors0Upgrade libtevent-develUpgrade pyldb-develUpgrade libpdb0-32bitUpgrade libtevent0-x86Upgrade libndr-nbt0Upgrade libsmbsharemodes0Upgrade libregistry-develUpgrade libtevent-util0Upgrade samba-x86Upgrade samba-develUpgrade libsamba-policy-python3-develUpgrade libsamba-policy0-python3Upgrade libsmbldap2-32bitUpgrade libsmbclient-raw-develUpgrade libpdb0Upgrade libsmbclient-develUpgrade libtdb1Upgrade libndr-nbt-develUpgrade libdcerpc-binding0Upgrade libldb1-32bitUpgrade libdcerpc0Upgrade libtdb1-32bitUpgrade ldapsmbUpgrade libwbclient-develUpgrade libsamba-util0-32bitUpgrade samba-clientUpgrade libtalloc2-32bitUpgrade libtevent-util-develUpgrade samba-docUpgrade libpdb-develUpgrade libsmbclient0Upgrade pytallocUpgrade libdcerpc-samr-develUpgrade libdcerpc0-32bitUpgrade libsmbldap0-32bitUpgrade libwbclient0Upgrade libsmbldap2Upgrade samba-client-x86Upgrade libnetapi0-32bitUpgrade libsamba-passdb0-32bitUpgrade libsamba-util0Upgrade samba-winbindUpgrade libdcerpc-develUpgrade sambaUpgrade libsamba-util-develUpgrade samba-libsUpgrade libregistry0Upgrade libsamba-policy-develUpgrade libtevent-util0-32bitUpgrade samba-python3Upgrade libndr-standard0-32bitUpgrade libdcerpc-atsvc-develUpgrade libsmbclient0-x86Upgrade libsmbsharemodes-develUpgrade samba-kdcUpgrade libldb1Upgrade libtalloc2Upgrade libsamba-credentials0Upgrade libndr1-32bitUpgrade libndr0Upgrade libnetapi0Upgrade libwbclient0-32bitUpgrade libsamba-policy0Upgrade libdcerpc-binding0-32bitUpgrade libsmbconf0Upgrade libndr-standard-develUpgrade libsmbclient-raw0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libndr0-32bitUpgrade libsamdb0-32bitUpgrade libgensec0-32bitUpgrade libsamba-passdb0Upgrade libsmbldap0Upgrade samba-test-develUpgrade libsamba-passdb-develUpgrade libsmbconf-develUpgrade samba-32bitUpgrade pyldbUpgrade samba-dsdb-modulesUpgrade tdb-toolsUpgrade libndr-develUpgrade pytalloc-32bitUpgrade libsmbconf0-32bitUpgrade libsamba-errors0-32bitUpgrade libndr-krb5pac-develUpgrade libnetapi-develUpgrade libsmbclient-raw0Upgrade libsmbldap-develUpgrade samba-client-32bitUpgrade libsamdb-develUpgrade samba-winbind-x86Upgrade libsamba-hostconfig-develUpgrade samba-libs-python3-32bitUpgrade libwbclient0-x86Upgrade pytalloc-develUpgrade libdcerpc-samr0Upgrade samba-testUpgrade libtalloc-develUpgrade libtevent0-32bitUpgrade libndr-krb5pac0Upgrade libtalloc2-x86Upgrade libsamba-errors-develUpgrade samba-cephUpgrade libndr1Upgrade ctdbUpgrade libgensec-develUpgrade libndr-nbt0-32bitUpgrade libgensec0Upgrade libtdb1-x86 | Jan 4, 2016 | Dec 18, 2015 |
| Ubuntu | — | Upgrade samba | Feb 2, 2016 | Dec 29, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub