An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.0 Base Score: 4.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Jul 26, 2018 | Jul 26, 2018 |
| Amazon_linux | — | Upgrade samba | Oct 13, 2017 | Sep 21, 2017 |
| Centos_linux | — | Upgrade samba-winbind-develUpgrade samba4-pidlUpgrade samba-vfs-glusterfsUpgrade samba-debuginfoUpgrade samba4-clientUpgrade samba-dcUpgrade samba4-dc-libsUpgrade samba4-debuginfoUpgrade libwbclientUpgrade samba4-commonUpgrade samba4-dcUpgrade samba-testUpgrade samba-commonUpgrade samba-pidlUpgrade samba4Upgrade samba-krb5-printingUpgrade samba4-pythonUpgrade samba4-develUpgrade samba-glusterfsUpgrade samba-winbind-krb5-locatorUpgrade sambaUpgrade samba-clientUpgrade libsmbclientUpgrade samba-test-libsUpgrade samba4-winbind-krb5-locatorUpgrade samba-winbind-modulesUpgrade samba-domainjoin-guiUpgrade samba-client-libsUpgrade samba-docUpgrade libwbclient-develUpgrade samba-develUpgrade samba4-winbindUpgrade libsmbclient-develUpgrade samba4-libsUpgrade samba4-winbind-clientsUpgrade samba-pythonUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba4-testUpgrade samba-swatUpgrade samba-common-libsUpgrade samba-dc-libsUpgrade samba-winbindUpgrade samba-common-tools | Sep 25, 2017 | Sep 21, 2017 |
| Debian | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
| Hpux | — | Update CIFS-Server to the latest version | Jun 5, 2018 | May 31, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libsmbclientUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade samba-pythonUpgrade samba-client-libsUpgrade sambaUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade samba-commonUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-common-tools | Nov 30, 2017 | Sep 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-libsUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade samba-libsUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade sambaUpgrade samba-pythonUpgrade samba-clientUpgrade samba-common | Nov 30, 2017 | Sep 20, 2017 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3 | Nov 30, 2017 | Nov 30, 2017 |
| Oracle_linux | — | Upgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-glusterfsUpgrade samba-test-libsUpgrade samba4-commonUpgrade samba4-pidlUpgrade samba-krb5-printingUpgrade samba4-clientUpgrade samba-clientUpgrade samba-dc-libsUpgrade samba4-libsUpgrade samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libsUpgrade samba4Upgrade samba-client-libsUpgrade samba-dcUpgrade samba4-testUpgrade samba4-winbind-krb5-locatorUpgrade samba4-dc-libsUpgrade samba4-dcUpgrade ctdb-testsUpgrade ctdbUpgrade samba4-winbindUpgrade samba-winbindUpgrade samba-libsUpgrade samba-commonUpgrade libwbclient-develUpgrade samba-pidlUpgrade sambaUpgrade libwbclientUpgrade samba-pythonUpgrade samba4-pythonUpgrade samba-vfs-glusterfsUpgrade libsmbclientUpgrade samba-swatUpgrade libsmbclient-develUpgrade samba-winbind-modulesUpgrade samba4-winbind-clientsUpgrade samba-domainjoin-guiUpgrade samba-develUpgrade samba4-develUpgrade samba-docUpgrade samba-winbind-devel | Sep 27, 2017 | Sep 20, 2017 |
| Redhat_linux | — | Upgrade samba4-develUpgrade samba-common-toolsUpgrade samba-docUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba-domainjoin-guiUpgrade samba-winbind-krb5-locatorUpgrade samba-develUpgrade samba4-dc-libsUpgrade samba-swatUpgrade libsmbclient-develUpgrade samba4-dcUpgrade samba-common-libsUpgrade samba4-pythonUpgrade samba-libsUpgrade samba4-libsUpgrade samba-debuginfoUpgrade libsmbclientUpgrade samba-dc-libsUpgrade samba-clientUpgrade samba-winbind-develUpgrade samba4-testUpgrade samba4-winbind-krb5-locatorUpgrade sambaUpgrade samba-winbindUpgrade libwbclient-develUpgrade samba4-debuginfoUpgrade samba-testUpgrade samba-test-libsNo solution existsUpgrade samba-glusterfsUpgrade samba4-winbind-clientsUpgrade samba-dcUpgrade samba-vfs-glusterfsUpgrade samba4-winbindUpgrade samba-client-libsUpgrade samba4-pidlUpgrade samba-pidlUpgrade samba4-clientUpgrade libwbclientUpgrade samba4-commonUpgrade samba-krb5-printingUpgrade samba4 | Oct 4, 2017 | Sep 21, 2017 |
| Samba | — | Upgrade to Samba version 4.6.8Upgrade to Samba version 4.5.14Upgrade to Samba version 4.4.16 | Sep 29, 2017 | Sep 29, 2017 |
| Suse | — | Upgrade sambaUpgrade libsmbconf0Upgrade samba-client-32bitUpgrade libsmbldap0-32bitUpgrade samba-pythonUpgrade samba-winbind-32bitUpgrade libsamba-credentials-develUpgrade libsamba-policy-develUpgrade samba-libsUpgrade samba-develUpgrade libsmbsharemodes0Upgrade libndr0Upgrade libsmbclient-develUpgrade libsamba-errors0-32bitUpgrade libndr-nbt0Upgrade libnetapi-develUpgrade libndr-standard-develUpgrade libndr-standard0-32bitUpgrade samba-winbindUpgrade ldapsmbUpgrade libtevent0-32bitUpgrade libsmbclient0-32bitUpgrade libwbclient0Upgrade libndr-krb5pac0-32bitUpgrade ctdbUpgrade libsamba-util0-32bitUpgrade libsamba-passdb-develUpgrade samba-docUpgrade samba-winbind-x86Upgrade libsamba-util-develUpgrade libsmbclient0-x86Upgrade libsamba-policy0-python3Upgrade samba-krb-printingUpgrade samba-cephUpgrade libndr-standard0Upgrade libnetapi0Upgrade libdcerpc-develUpgrade libdcerpc0-32bitUpgrade libtevent0Upgrade samba-client-x86Upgrade libtevent-util0Upgrade libsmbclient0Upgrade libsamba-hostconfig0Upgrade libsamba-credentials0-32bitUpgrade libdcerpc-samr-develUpgrade samba-kdcUpgrade libtevent-util-develUpgrade libsmbldap2-32bitUpgrade libdcerpc-binding0Upgrade libsamba-credentials0Upgrade libtalloc-develUpgrade samba-dsdb-modulesUpgrade libsmbconf0-32bitUpgrade libtalloc2-x86Upgrade libndr-nbt-develUpgrade libndr1Upgrade libsmbldap-develUpgrade libtdb-develUpgrade samba-libs-32bitUpgrade samba-libs-python3Upgrade libgensec0Upgrade libsamba-errors-develUpgrade libsmbclient-raw0-32bitUpgrade libsamdb0Upgrade libtdb1Upgrade libsamba-policy0Upgrade libsamba-util0Upgrade libgensec0-32bitUpgrade libldb1Upgrade libsmbclient-raw0Upgrade libtdb1-32bitUpgrade libndr1-32bitUpgrade libdcerpc-samr0Upgrade libtalloc2Upgrade samba-libs-python3-32bitUpgrade libsamba-passdb0-32bitUpgrade libwbclient0-32bitUpgrade libndr0-32bitUpgrade samba-x86Upgrade libsamdb-develUpgrade libndr-krb5pac-develUpgrade libsamba-policy-python3-develUpgrade samba-clientUpgrade libwbclient-develUpgrade libsmbconf-develUpgrade libsmbldap2Upgrade libsmbldap0Upgrade libsamba-hostconfig-develUpgrade libnetapi0-32bitUpgrade samba-python3Upgrade libsamba-errors0Upgrade libsamba-hostconfig0-32bitUpgrade samba-core-develUpgrade libdcerpc-binding0-32bitUpgrade samba-testUpgrade libtalloc2-32bitUpgrade libndr-develUpgrade libregistry0Upgrade libndr-nbt0-32bitUpgrade libtdb1-x86Upgrade samba-32bitUpgrade libtevent-develUpgrade libldb-develUpgrade libsamba-passdb0Upgrade libndr-krb5pac0Upgrade samba-test-develUpgrade libtevent-util0-32bitUpgrade libsmbsharemodes-develUpgrade libdcerpc0Upgrade libtevent0-x86Upgrade libsamdb0-32bitUpgrade libdcerpc-atsvc0Upgrade libwbclient0-x86 | Oct 5, 2017 | Sep 21, 2017 |
| Ubuntu | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub