An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Jul 26, 2018 | Jul 26, 2018 |
| Amazon_linux | — | Upgrade samba | Oct 13, 2017 | Sep 21, 2017 |
| Centos_linux | — | Upgrade samba4-winbind-clientsUpgrade samba-pythonUpgrade samba4-libsUpgrade samba-docUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade samba-domainjoin-guiUpgrade samba4-winbindUpgrade samba4-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba-swatUpgrade samba-winbind-modulesUpgrade samba-test-libsUpgrade samba-clientUpgrade samba-develUpgrade samba-winbind-krb5-locatorUpgrade sambaUpgrade samba-client-libsUpgrade samba-dc-libsUpgrade libwbclient-develUpgrade samba-winbindUpgrade libsmbclient-develUpgrade samba4-testUpgrade samba-common-toolsUpgrade samba4-commonUpgrade samba-glusterfsUpgrade samba4-pythonUpgrade samba4-develUpgrade samba-vfs-glusterfsUpgrade samba-testUpgrade samba4-dcUpgrade samba-commonUpgrade samba4-dc-libsUpgrade samba-dcUpgrade samba-debuginfoUpgrade samba-pidlUpgrade samba4-pidlUpgrade samba4-debuginfoUpgrade libwbclientUpgrade samba4-clientUpgrade samba-krb5-printingUpgrade samba-winbind-develUpgrade samba4 | Sep 25, 2017 | Sep 21, 2017 |
| Debian | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
| Hpux | — | Update CIFS-Server to the latest version | Jun 5, 2018 | May 31, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libsmbclientUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-pythonUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-client | Nov 30, 2017 | Sep 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-libsUpgrade samba-commonUpgrade samba-winbindUpgrade sambaUpgrade samba-pythonUpgrade libwbclientUpgrade samba-clientUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-winbind-modules | Nov 30, 2017 | Sep 20, 2017 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3 | Nov 30, 2017 | Nov 30, 2017 |
| Oracle_linux | — | Upgrade samba-winbind-krb5-locatorUpgrade samba4-commonUpgrade samba-krb5-printingUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba4-clientUpgrade samba4-libsUpgrade samba-common-libsUpgrade samba-test-libsUpgrade samba-testUpgrade samba-client-libsUpgrade samba-dc-libsUpgrade samba-clientUpgrade samba-glusterfsUpgrade samba4Upgrade samba4-pidlUpgrade samba4-pythonUpgrade libsmbclient-develUpgrade samba-pidlUpgrade sambaUpgrade libwbclient-develUpgrade samba-docUpgrade samba-winbind-develUpgrade samba-swatUpgrade samba4-winbind-krb5-locatorUpgrade samba-vfs-glusterfsUpgrade libwbclientUpgrade samba4-testUpgrade samba4-winbindUpgrade samba-winbindUpgrade ctdbUpgrade samba4-develUpgrade samba-pythonUpgrade samba4-winbind-clientsUpgrade libsmbclientUpgrade samba4-dcUpgrade samba-dcUpgrade samba4-dc-libsUpgrade samba-winbind-modulesUpgrade samba-develUpgrade samba-domainjoin-guiUpgrade samba-commonUpgrade samba-libsUpgrade ctdb-tests | Sep 27, 2017 | Sep 20, 2017 |
| Redhat_linux | — | Upgrade libwbclient-develUpgrade samba4-pythonUpgrade samba4-winbind-krb5-locatorUpgrade samba4-dc-libsUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-debuginfoUpgrade samba-commonUpgrade samba4-testUpgrade samba-winbindUpgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-common-libsUpgrade sambaUpgrade samba-develUpgrade samba-dc-libsUpgrade libsmbclient-develUpgrade samba-docUpgrade samba4-libsUpgrade samba-winbind-develUpgrade samba-libsUpgrade samba-domainjoin-guiUpgrade samba4-dcUpgrade samba-winbind-clientsUpgrade samba4-develUpgrade samba-swatUpgrade samba-winbind-modulesUpgrade samba-testUpgrade samba-pidlUpgrade samba-vfs-glusterfsUpgrade samba4-pidlUpgrade samba-krb5-printingUpgrade samba4-clientUpgrade samba4-debuginfoUpgrade samba-test-libsUpgrade samba-client-libsUpgrade samba4-winbind-clientsUpgrade libwbclientUpgrade samba-glusterfsUpgrade samba4-winbindNo solution existsUpgrade samba-dcUpgrade samba4Upgrade samba4-common | Oct 4, 2017 | Sep 21, 2017 |
| Samba | — | Upgrade to Samba version 4.5.14Upgrade to Samba version 4.4.16Upgrade to Samba version 4.6.8 | Sep 29, 2017 | Sep 29, 2017 |
| Suse | — | Upgrade sambaUpgrade samba-libs-python3Upgrade libndr-nbt0Upgrade libnetapi0Upgrade libtdb-develUpgrade libtevent-util0Upgrade libtalloc2-x86Upgrade samba-winbind-x86Upgrade libgensec0Upgrade samba-docUpgrade libndr-standard0Upgrade samba-pythonUpgrade libndr-krb5pac0-32bitUpgrade libsmbsharemodes0Upgrade libsamba-hostconfig0Upgrade libsmbconf0Upgrade libnetapi-develUpgrade samba-client-x86Upgrade libwbclient0Upgrade libsamba-policy0-python3Upgrade libndr-standard-develUpgrade libsmbclient-develUpgrade libsamba-util0-32bitUpgrade libsmbldap0-32bitUpgrade libsamba-credentials-develUpgrade samba-cephUpgrade samba-develUpgrade samba-winbind-32bitUpgrade libdcerpc0-32bitUpgrade libndr0Upgrade libsmbclient0-x86Upgrade libsamba-policy-develUpgrade libtalloc-develUpgrade samba-client-32bitUpgrade ctdbUpgrade libsmbldap-develUpgrade samba-krb-printingUpgrade samba-libsUpgrade libsamba-errors0-32bitUpgrade libtevent-util-develUpgrade libndr-nbt-develUpgrade libsmbclient0-32bitUpgrade samba-libs-32bitUpgrade libsmbconf0-32bitUpgrade libtevent0Upgrade samba-dsdb-modulesUpgrade libsmbclient0Upgrade libsamba-passdb-develUpgrade libdcerpc-samr-develUpgrade samba-winbindUpgrade ldapsmbUpgrade libndr-standard0-32bitUpgrade libtevent0-32bitUpgrade libsamba-util-develUpgrade libdcerpc-develUpgrade libsamba-credentials0-32bitUpgrade libndr1Upgrade libsamba-credentials0Upgrade libsmbldap2-32bitUpgrade samba-kdcUpgrade libdcerpc-binding0Upgrade libtevent-develUpgrade libtdb1-x86Upgrade libsmbclient-raw0Upgrade samba-testUpgrade libtdb1-32bitUpgrade libsmbldap0Upgrade libsmbclient-raw0-32bitUpgrade samba-32bitUpgrade samba-test-develUpgrade libsamdb-develUpgrade libdcerpc-binding0-32bitUpgrade libtdb1Upgrade libsamba-policy-python3-develUpgrade libregistry0Upgrade libndr-nbt0-32bitUpgrade libgensec0-32bitUpgrade libtalloc2Upgrade libsamba-hostconfig-develUpgrade libndr1-32bitUpgrade libsamba-policy0Upgrade libldb-develUpgrade libsamdb0Upgrade libndr0-32bitUpgrade libtevent-util0-32bitUpgrade libsamba-passdb0Upgrade libsamdb0-32bitUpgrade samba-python3Upgrade libtalloc2-32bitUpgrade libndr-krb5pac0Upgrade libldb1Upgrade samba-x86Upgrade libwbclient0-32bitUpgrade libsamba-passdb0-32bitUpgrade libndr-develUpgrade libsmbsharemodes-develUpgrade libdcerpc0Upgrade samba-libs-python3-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-errors0Upgrade libnetapi0-32bitUpgrade samba-core-develUpgrade libtevent0-x86Upgrade libsmbconf-develUpgrade libsmbldap2Upgrade samba-clientUpgrade libwbclient0-x86Upgrade libwbclient-develUpgrade libsamba-util0Upgrade libsamba-errors-develUpgrade libndr-krb5pac-develUpgrade libdcerpc-atsvc0Upgrade libdcerpc-samr0 | Oct 5, 2017 | Sep 21, 2017 |
| Ubuntu | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub