An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.0 Base Score: 4.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Jul 26, 2018 | Jul 26, 2018 |
| Amazon_linux | — | Upgrade samba | Oct 13, 2017 | Sep 21, 2017 |
| Centos_linux | — | Upgrade samba-dc-libsUpgrade samba-swatUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade libsmbclientUpgrade samba-docUpgrade sambaUpgrade libsmbclient-develUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-domainjoin-guiUpgrade samba-winbind-modulesUpgrade samba4-winbind-clientsUpgrade samba4-testUpgrade samba4-libsUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade libwbclient-develUpgrade samba-develUpgrade samba4-winbindUpgrade samba-pythonUpgrade samba4-winbind-krb5-locatorUpgrade samba-winbind-develUpgrade samba-vfs-glusterfsUpgrade samba4Upgrade samba-krb5-printingUpgrade samba4-pidlUpgrade libwbclientUpgrade samba4-pythonUpgrade samba-debuginfoUpgrade samba-glusterfsUpgrade samba4-develUpgrade samba4-clientUpgrade samba4-dc-libsUpgrade samba4-dcUpgrade samba-commonUpgrade samba-pidlUpgrade samba4-commonUpgrade samba4-debuginfoUpgrade samba-testUpgrade samba-dc | Sep 25, 2017 | Sep 21, 2017 |
| Debian | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
| Hpux | — | Update CIFS-Server to the latest version | Jun 5, 2018 | May 31, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libsmbclientUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade libwbclientUpgrade samba-client-libsUpgrade sambaUpgrade samba-commonUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-libsUpgrade samba-common-libsUpgrade samba-winbind-clients | Nov 30, 2017 | Sep 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-toolsUpgrade sambaUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade samba-pythonUpgrade samba-clientUpgrade libwbclientUpgrade samba-winbindUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-common-libs | Nov 30, 2017 | Sep 20, 2017 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3 | Nov 30, 2017 | Nov 30, 2017 |
| Oracle_linux | — | Upgrade samba-glusterfsUpgrade samba-clientUpgrade samba4-pidlUpgrade samba-test-libsUpgrade samba4Upgrade samba-common-libsUpgrade samba-client-libsUpgrade samba-common-toolsUpgrade samba-dc-libsUpgrade samba-testUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba4-clientUpgrade samba4-libsUpgrade samba-krb5-printingUpgrade samba4-commonUpgrade samba4-pythonUpgrade ctdb-testsUpgrade samba4-dcUpgrade samba4-winbindUpgrade samba4-dc-libsUpgrade samba-winbindUpgrade samba-docUpgrade samba4-winbind-krb5-locatorUpgrade samba-swatUpgrade samba-vfs-glusterfsUpgrade samba-commonUpgrade ctdbUpgrade samba-develUpgrade libwbclient-develUpgrade libwbclientUpgrade sambaUpgrade samba-pidlUpgrade samba4-winbind-clientsUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba-domainjoin-guiUpgrade samba-winbind-develUpgrade samba4-develUpgrade libsmbclient-develUpgrade samba-libsUpgrade samba4-testUpgrade libsmbclientUpgrade samba-dc | Sep 27, 2017 | Sep 20, 2017 |
| Redhat_linux | — | Upgrade samba-dcUpgrade samba-client-libsUpgrade samba-test-libsNo solution existsUpgrade samba4Upgrade libwbclientUpgrade samba-glusterfsUpgrade samba-krb5-printingUpgrade samba4-debuginfoUpgrade samba4-commonUpgrade samba-pidlUpgrade samba4-winbindUpgrade samba4-winbind-clientsUpgrade samba-testUpgrade samba-vfs-glusterfsUpgrade samba4-clientUpgrade samba4-pidlUpgrade samba-winbind-clientsUpgrade samba-docUpgrade samba-winbind-develUpgrade samba-common-toolsUpgrade samba4-pythonUpgrade samba4-dcUpgrade samba-winbind-krb5-locatorUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade libwbclient-develUpgrade samba4-dc-libsUpgrade samba-debuginfoUpgrade samba-dc-libsUpgrade samba-libsUpgrade samba-swatUpgrade samba4-develUpgrade sambaUpgrade samba-commonUpgrade libsmbclientUpgrade samba-winbindUpgrade samba4-libsUpgrade samba-clientUpgrade samba4-winbind-krb5-locatorUpgrade samba4-testUpgrade libsmbclient-develUpgrade samba-common-libsUpgrade samba-develUpgrade samba-domainjoin-gui | Oct 4, 2017 | Sep 21, 2017 |
| Samba | — | Upgrade to Samba version 4.5.14Upgrade to Samba version 4.4.16Upgrade to Samba version 4.6.8 | Sep 29, 2017 | Sep 29, 2017 |
| Suse | — | Upgrade libdcerpc-binding0Upgrade libsmbldap2-32bitUpgrade samba-dsdb-modulesUpgrade libsamba-util0-32bitUpgrade samba-winbindUpgrade libtalloc2-x86Upgrade libdcerpc-develUpgrade samba-winbind-32bitUpgrade libsamba-policy0-python3Upgrade libtevent0-32bitUpgrade libsamba-util-develUpgrade libsmbldap0-32bitUpgrade samba-krb-printingUpgrade libsmbsharemodes0Upgrade libsmbclient0-x86Upgrade libdcerpc0-32bitUpgrade libsamba-hostconfig0Upgrade libndr0Upgrade libsmbclient0-32bitUpgrade libsamba-errors0-32bitUpgrade samba-client-32bitUpgrade sambaUpgrade samba-libs-32bitUpgrade libsamba-credentials-develUpgrade ctdbUpgrade libsmbclient-develUpgrade libtevent-util-develUpgrade libsamba-policy-develUpgrade libnetapi0Upgrade samba-libsUpgrade libnetapi-develUpgrade libndr-nbt0Upgrade libsmbconf0-32bitUpgrade libndr-standard0-32bitUpgrade libndr1Upgrade libndr-standard-develUpgrade libdcerpc-samr-develUpgrade samba-cephUpgrade samba-client-x86Upgrade libtalloc-develUpgrade libgensec0Upgrade libndr-krb5pac0-32bitUpgrade libsamba-credentials0Upgrade samba-kdcUpgrade libtevent-util0Upgrade libsamba-credentials0-32bitUpgrade libndr-standard0Upgrade libtdb-develUpgrade libsmbconf0Upgrade ldapsmbUpgrade libsamba-passdb-develUpgrade libsmbclient0Upgrade samba-winbind-x86Upgrade libtevent0Upgrade samba-libs-python3Upgrade libndr-nbt-develUpgrade samba-docUpgrade libwbclient0Upgrade libsmbldap-develUpgrade samba-develUpgrade samba-pythonUpgrade libndr0-32bitUpgrade libsmbldap0Upgrade libsamba-errors0Upgrade libwbclient-develUpgrade libdcerpc-atsvc0Upgrade libtalloc2-32bitUpgrade libldb1Upgrade libsamba-util0Upgrade samba-32bitUpgrade libndr-krb5pac-develUpgrade libndr-nbt0-32bitUpgrade libsamdb0-32bitUpgrade libsamba-policy-python3-develUpgrade libldb-develUpgrade libtevent-develUpgrade libtdb1-x86Upgrade libndr1-32bitUpgrade libregistry0Upgrade samba-core-develUpgrade samba-python3Upgrade libwbclient0-32bitUpgrade libndr-develUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-passdb0-32bitUpgrade libsmbclient-raw0Upgrade libdcerpc-samr0Upgrade libtdb1-32bitUpgrade libdcerpc-binding0-32bitUpgrade libgensec0-32bitUpgrade samba-testUpgrade samba-test-develUpgrade libsamdb-develUpgrade libsamba-hostconfig-develUpgrade libsmbconf-develUpgrade libsmbldap2Upgrade libsamba-policy0Upgrade libsmbsharemodes-develUpgrade libtevent0-x86Upgrade libsamba-errors-develUpgrade libsamdb0Upgrade libdcerpc0Upgrade libndr-krb5pac0Upgrade samba-libs-python3-32bitUpgrade libnetapi0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libtdb1Upgrade samba-x86Upgrade libtalloc2Upgrade libwbclient0-x86Upgrade samba-clientUpgrade libtevent-util0-32bitUpgrade libsamba-passdb0 | Oct 5, 2017 | Sep 21, 2017 |
| Ubuntu | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub