An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.0 Base Score: 4.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Jul 26, 2018 | Jul 26, 2018 |
| Amazon_linux | — | Upgrade samba | Oct 13, 2017 | Sep 21, 2017 |
| Centos_linux | — | Upgrade samba4-debuginfoUpgrade samba-pidlUpgrade libwbclientUpgrade samba4-pythonUpgrade samba4-dc-libsUpgrade samba4Upgrade samba-krb5-printingUpgrade samba-winbind-develUpgrade samba-vfs-glusterfsUpgrade samba-commonUpgrade samba4-dcUpgrade samba-testUpgrade samba-glusterfsUpgrade samba4-clientUpgrade samba4-develUpgrade samba-dcUpgrade samba-debuginfoUpgrade samba4-pidlUpgrade samba4-commonUpgrade samba-common-libsUpgrade samba-clientUpgrade sambaUpgrade samba-develUpgrade samba-test-libsUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-libsUpgrade samba-swatUpgrade samba-common-toolsUpgrade samba4-testUpgrade samba-client-libsUpgrade libsmbclient-develUpgrade samba-winbind-modulesUpgrade samba4-winbindUpgrade samba-domainjoin-guiUpgrade libwbclient-develUpgrade samba4-winbind-krb5-locatorUpgrade samba-docUpgrade samba4-libsUpgrade libsmbclientUpgrade samba4-winbind-clientsUpgrade samba-pythonUpgrade samba-dc-libsUpgrade samba-winbind-krb5-locator | Sep 25, 2017 | Sep 21, 2017 |
| Debian | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
| Hpux | — | Update CIFS-Server to the latest version | Jun 5, 2018 | May 31, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libsmbclientUpgrade libwbclientUpgrade samba-client-libsUpgrade sambaUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-clientUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-common | Nov 30, 2017 | Sep 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-commonUpgrade libwbclientUpgrade samba-pythonUpgrade sambaUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-libsUpgrade samba-winbind-clients | Nov 30, 2017 | Sep 20, 2017 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3 | Nov 30, 2017 | Nov 30, 2017 |
| Oracle_linux | — | Upgrade samba4-pidlUpgrade samba-glusterfsUpgrade samba-clientUpgrade samba4-clientUpgrade samba-test-libsUpgrade samba4Upgrade samba-client-libsUpgrade samba-dc-libsUpgrade samba4-commonUpgrade samba-testUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba4-libsUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba-krb5-printingUpgrade samba-swatUpgrade samba4-testUpgrade libsmbclient-develUpgrade samba-vfs-glusterfsUpgrade samba4-winbind-krb5-locatorUpgrade samba4-winbindUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade ctdbUpgrade libsmbclientUpgrade samba4-winbind-clientsUpgrade samba-winbind-develUpgrade samba-develUpgrade samba4-pythonUpgrade samba-pythonUpgrade samba4-develUpgrade samba4-dc-libsUpgrade samba4-dcUpgrade samba-dcUpgrade samba-docUpgrade ctdb-testsUpgrade samba-domainjoin-guiUpgrade libwbclient-develUpgrade samba-libsUpgrade samba-pidlUpgrade libwbclientUpgrade sambaUpgrade samba-common | Sep 27, 2017 | Sep 20, 2017 |
| Redhat_linux | — | Upgrade samba4No solution existsUpgrade libwbclientUpgrade samba-dcUpgrade samba-testUpgrade samba4-clientUpgrade samba4-winbind-clientsUpgrade samba-vfs-glusterfsUpgrade samba-client-libsUpgrade samba-glusterfsUpgrade samba-test-libsUpgrade samba4-winbindUpgrade samba4-pidlUpgrade samba-krb5-printingUpgrade samba4-commonUpgrade samba-pidlUpgrade samba4-debuginfoUpgrade samba4-develUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-develUpgrade samba-commonUpgrade samba-dc-libsUpgrade samba4-testUpgrade sambaUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-develUpgrade samba-domainjoin-guiUpgrade samba4-libsUpgrade samba-debuginfoUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba4-dc-libsUpgrade libsmbclient-develUpgrade samba4-winbind-krb5-locatorUpgrade samba-clientUpgrade samba-swatUpgrade samba4-pythonUpgrade samba4-dcUpgrade samba-libsUpgrade samba-docUpgrade samba-common-toolsUpgrade samba-pythonUpgrade libwbclient-devel | Oct 4, 2017 | Sep 21, 2017 |
| Samba | — | Upgrade to Samba version 4.4.16Upgrade to Samba version 4.6.8Upgrade to Samba version 4.5.14 | Sep 29, 2017 | Sep 29, 2017 |
| Suse | — | Upgrade libnetapi0-32bitUpgrade libldb-develUpgrade libwbclient-develUpgrade libtalloc2-32bitUpgrade libsamba-hostconfig0-32bitUpgrade samba-test-develUpgrade libsamba-errors0Upgrade libsmbsharemodes-develUpgrade libsmbldap0Upgrade libsamba-errors-develUpgrade libtevent-develUpgrade libndr-krb5pac-develUpgrade libndr-develUpgrade libsmbconf-develUpgrade libsamba-hostconfig-develUpgrade libsamdb-develUpgrade libsamba-policy0Upgrade libsamdb0Upgrade samba-32bitUpgrade libdcerpc0Upgrade libtdb1-x86Upgrade libsamba-util0Upgrade libldb1Upgrade libtdb1Upgrade libsamba-passdb0Upgrade libsmbclient-raw0-32bitUpgrade libwbclient0-32bitUpgrade libsmbldap2Upgrade libtalloc2Upgrade samba-libs-python3-32bitUpgrade libndr1-32bitUpgrade libdcerpc-samr0Upgrade samba-x86Upgrade libgensec0-32bitUpgrade libsmbclient-raw0Upgrade libtdb1-32bitUpgrade libwbclient0-x86Upgrade libsamdb0-32bitUpgrade samba-clientUpgrade libtevent-util0-32bitUpgrade libsamba-policy-python3-develUpgrade libregistry0Upgrade libndr-nbt0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc-atsvc0Upgrade samba-testUpgrade libtevent0-x86Upgrade samba-python3Upgrade libndr0-32bitUpgrade samba-core-develUpgrade libndr-krb5pac0Upgrade libsamba-passdb0-32bitUpgrade sambaUpgrade libsmbclient-develUpgrade libsamba-policy-develUpgrade libndr0Upgrade libtalloc-develUpgrade samba-libs-32bitUpgrade libwbclient0Upgrade libsamba-util0-32bitUpgrade libtdb-develUpgrade libsmbconf0Upgrade libgensec0Upgrade samba-pythonUpgrade libsamba-errors0-32bitUpgrade libtevent-util-develUpgrade samba-client-32bitUpgrade libsmbconf0-32bitUpgrade samba-libsUpgrade libnetapi0Upgrade libsmbldap-develUpgrade libndr-standard0Upgrade samba-libs-python3Upgrade samba-dsdb-modulesUpgrade libsmbldap0-32bitUpgrade libdcerpc0-32bitUpgrade libdcerpc-develUpgrade libsmbclient0-32bitUpgrade samba-winbindUpgrade libsamba-util-develUpgrade libndr-standard0-32bitUpgrade libsamba-credentials0Upgrade libndr1Upgrade libsmbldap2-32bitUpgrade libsamba-credentials0-32bitUpgrade libdcerpc-samr-develUpgrade libdcerpc-binding0Upgrade samba-kdcUpgrade ldapsmbUpgrade libtalloc2-x86Upgrade libtevent0-32bitUpgrade libsmbsharemodes0Upgrade samba-krb-printingUpgrade libsamba-passdb-develUpgrade libndr-krb5pac0-32bitUpgrade ctdbUpgrade libsamba-credentials-develUpgrade samba-winbind-32bitUpgrade libndr-nbt-develUpgrade samba-client-x86Upgrade libndr-standard-develUpgrade libnetapi-develUpgrade libndr-nbt0Upgrade libtevent-util0Upgrade libtevent0Upgrade samba-cephUpgrade libsmbclient0-x86Upgrade samba-develUpgrade libsamba-hostconfig0Upgrade libsamba-policy0-python3Upgrade samba-winbind-x86Upgrade samba-docUpgrade libsmbclient0 | Oct 5, 2017 | Sep 21, 2017 |
| Ubuntu | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub