An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.0 Base Score: 4.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Jul 26, 2018 | Jul 26, 2018 |
| Amazon_linux | — | Upgrade samba | Oct 13, 2017 | Sep 21, 2017 |
| Centos_linux | — | Upgrade samba-krb5-printingUpgrade samba4-pythonUpgrade libwbclientUpgrade samba-dcUpgrade samba-vfs-glusterfsUpgrade samba-winbind-develUpgrade samba4Upgrade samba4-debuginfoUpgrade samba-commonUpgrade samba4-dcUpgrade samba4-commonUpgrade samba4-pidlUpgrade samba-debuginfoUpgrade samba-testUpgrade samba4-dc-libsUpgrade samba4-clientUpgrade samba-pidlUpgrade samba-glusterfsUpgrade samba4-develUpgrade sambaUpgrade samba-test-libsUpgrade samba-winbind-clientsUpgrade samba4-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba-develUpgrade samba-pythonUpgrade samba4-libsUpgrade samba-dc-libsUpgrade samba-clientUpgrade libsmbclientUpgrade libsmbclient-develUpgrade samba-domainjoin-guiUpgrade samba-docUpgrade samba-common-toolsUpgrade samba-swatUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba4-winbind-krb5-locatorUpgrade samba-winbind-modulesUpgrade libwbclient-develUpgrade samba4-winbindUpgrade samba4-testUpgrade samba-client-libsUpgrade samba-libs | Sep 25, 2017 | Sep 21, 2017 |
| Debian | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
| Hpux | — | Update CIFS-Server to the latest version | Jun 5, 2018 | May 31, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-clientUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-libsUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-pythonUpgrade libsmbclientUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade samba-winbind | Nov 30, 2017 | Sep 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba-common-toolsUpgrade sambaUpgrade samba-winbindUpgrade samba-libsUpgrade samba-commonUpgrade libwbclientUpgrade samba-pythonUpgrade samba-clientUpgrade samba-winbind-clients | Nov 30, 2017 | Sep 20, 2017 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3 | Nov 30, 2017 | Nov 30, 2017 |
| Oracle_linux | — | Upgrade samba-swatUpgrade samba-commonUpgrade samba-winbind-develUpgrade libsmbclient-develUpgrade samba-winbind-modulesUpgrade samba4-dc-libsUpgrade samba4-winbind-krb5-locatorUpgrade samba-libsUpgrade samba-vfs-glusterfsUpgrade samba4-develUpgrade samba-docUpgrade samba-pythonUpgrade samba-dcUpgrade libwbclient-develUpgrade samba4-pythonUpgrade samba4-winbind-clientsUpgrade samba4-testUpgrade samba-develUpgrade sambaUpgrade ctdb-testsUpgrade samba-pidlUpgrade samba-winbindUpgrade ctdbUpgrade libwbclientUpgrade libsmbclientUpgrade samba4-dcUpgrade samba4-winbindUpgrade samba-domainjoin-guiUpgrade samba-client-libsUpgrade samba-testUpgrade samba-clientUpgrade samba4-pidlUpgrade samba4Upgrade samba-common-libsUpgrade samba4-commonUpgrade samba-krb5-printingUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba4-clientUpgrade samba-glusterfsUpgrade samba4-libsUpgrade samba-dc-libsUpgrade samba-test-libs | Sep 27, 2017 | Sep 20, 2017 |
| Redhat_linux | — | Upgrade samba4-commonUpgrade samba4Upgrade samba4-winbind-clientsUpgrade samba4-winbindUpgrade samba4-debuginfoUpgrade samba-krb5-printingUpgrade libwbclientUpgrade samba-testUpgrade samba4-pidlUpgrade samba4-clientUpgrade samba-pidlUpgrade samba-glusterfsUpgrade samba-client-libsUpgrade samba-test-libsNo solution existsUpgrade samba-dcUpgrade samba-vfs-glusterfsUpgrade samba-winbindUpgrade samba-debuginfoUpgrade samba-swatUpgrade samba-common-libsUpgrade samba-clientUpgrade samba4-winbind-krb5-locatorUpgrade samba-winbind-krb5-locatorUpgrade libwbclient-develUpgrade samba4-testUpgrade libsmbclientUpgrade samba-dc-libsUpgrade samba-winbind-develUpgrade samba-libsUpgrade samba-domainjoin-guiUpgrade samba4-dc-libsUpgrade samba4-pythonUpgrade samba4-libsUpgrade samba-develUpgrade samba4-develUpgrade samba-winbind-modulesUpgrade samba-docUpgrade samba-common-toolsUpgrade sambaUpgrade samba4-dcUpgrade libsmbclient-develUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba-common | Oct 4, 2017 | Sep 21, 2017 |
| Samba | — | Upgrade to Samba version 4.5.14Upgrade to Samba version 4.4.16Upgrade to Samba version 4.6.8 | Sep 29, 2017 | Sep 29, 2017 |
| Suse | — | Upgrade libsmbclient-develUpgrade libnetapi-develUpgrade libndr-standard0Upgrade libsamba-errors0-32bitUpgrade libtevent-util-develUpgrade libndr0Upgrade libdcerpc0-32bitUpgrade libsamba-credentials0Upgrade libnetapi0Upgrade libtevent-util0Upgrade samba-client-x86Upgrade samba-libsUpgrade libsmbldap-develUpgrade samba-dsdb-modulesUpgrade libndr-krb5pac0-32bitUpgrade libtevent0Upgrade samba-winbind-x86Upgrade libtalloc2-x86Upgrade samba-libs-32bitUpgrade libndr-standard-develUpgrade libsmbldap0-32bitUpgrade samba-docUpgrade libsmbconf0-32bitUpgrade libwbclient0Upgrade libsamba-policy-develUpgrade samba-client-32bitUpgrade libsamba-passdb-develUpgrade sambaUpgrade libtalloc-develUpgrade samba-libs-python3Upgrade libndr-nbt0Upgrade libndr1Upgrade samba-cephUpgrade libtdb-develUpgrade libsamba-hostconfig0Upgrade libsmbclient0Upgrade libdcerpc-samr-develUpgrade libgensec0Upgrade libndr-nbt-develUpgrade libsmbconf0Upgrade libsamba-util0-32bitUpgrade libsamba-credentials-develUpgrade samba-winbind-32bitUpgrade samba-develUpgrade libsmbclient0-x86Upgrade samba-pythonUpgrade libsmbsharemodes0Upgrade samba-krb-printingUpgrade libsamba-policy0-python3Upgrade ctdbUpgrade libsamba-credentials0-32bitUpgrade samba-kdcUpgrade ldapsmbUpgrade libsmbldap2-32bitUpgrade libtevent0-32bitUpgrade libdcerpc-binding0Upgrade libsamba-util-develUpgrade libndr-standard0-32bitUpgrade libsmbclient0-32bitUpgrade samba-winbindUpgrade libdcerpc-develUpgrade samba-testUpgrade libnetapi0-32bitUpgrade libsamba-util0Upgrade libsmbclient-raw0-32bitUpgrade libsmbconf-develUpgrade libsmbldap2Upgrade samba-clientUpgrade libsmbldap0Upgrade libsamba-policy-python3-develUpgrade libsamba-hostconfig-develUpgrade libtdb1Upgrade libldb-develUpgrade libdcerpc-atsvc0Upgrade libtalloc2-32bitUpgrade libsamba-passdb0Upgrade libtevent-util0-32bitUpgrade libsmbclient-raw0Upgrade libsamdb0-32bitUpgrade libndr1-32bitUpgrade libsamba-policy0Upgrade libldb1Upgrade libregistry0Upgrade samba-test-develUpgrade samba-32bitUpgrade samba-core-develUpgrade libsamba-hostconfig0-32bitUpgrade libndr-nbt0-32bitUpgrade libtevent0-x86Upgrade libndr-krb5pac0Upgrade libndr-krb5pac-develUpgrade libndr0-32bitUpgrade libsamba-errors-develUpgrade libsmbsharemodes-develUpgrade libsamba-passdb0-32bitUpgrade samba-libs-python3-32bitUpgrade libwbclient0-32bitUpgrade libdcerpc0Upgrade libwbclient-develUpgrade libndr-develUpgrade samba-x86Upgrade libsamba-errors0Upgrade libdcerpc-samr0Upgrade libtalloc2Upgrade libtevent-develUpgrade libtdb1-x86Upgrade libwbclient0-x86Upgrade samba-python3Upgrade libdcerpc-binding0-32bitUpgrade libgensec0-32bitUpgrade libtdb1-32bitUpgrade libsamdb0Upgrade libsamdb-devel | Oct 5, 2017 | Sep 21, 2017 |
| Ubuntu | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub