An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.0 Base Score: 4.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Jul 26, 2018 | Jul 26, 2018 |
| Amazon_linux | — | Upgrade samba | Oct 13, 2017 | Sep 21, 2017 |
| Centos_linux | — | Upgrade samba4-pidlUpgrade samba4-debuginfoUpgrade samba-krb5-printingUpgrade samba-pidlUpgrade samba4Upgrade samba-vfs-glusterfsUpgrade samba4-pythonUpgrade samba4-develUpgrade samba-glusterfsUpgrade samba4-dc-libsUpgrade samba-winbind-develUpgrade libwbclientUpgrade samba4-commonUpgrade samba-testUpgrade samba-commonUpgrade samba4-dcUpgrade samba-debuginfoUpgrade samba-dcUpgrade samba4-clientUpgrade libsmbclientUpgrade samba-pythonUpgrade samba4-winbind-clientsUpgrade libwbclient-develUpgrade samba-winbindUpgrade samba-dc-libsUpgrade libsmbclient-develUpgrade samba4-winbind-krb5-locatorUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-docUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade sambaUpgrade samba-clientUpgrade samba-develUpgrade samba-domainjoin-guiUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libsUpgrade samba4-winbindUpgrade samba-client-libsUpgrade samba4-testUpgrade samba4-libsUpgrade samba-test-libsUpgrade samba-swat | Sep 25, 2017 | Sep 21, 2017 |
| Debian | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
| Hpux | — | Update CIFS-Server to the latest version | Jun 5, 2018 | May 31, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-libsUpgrade samba-common-libsUpgrade libsmbclientUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-winbindUpgrade samba-python | Nov 30, 2017 | Sep 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libwbclientUpgrade sambaUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-commonUpgrade samba-clientUpgrade samba-winbindUpgrade samba-pythonUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade libsmbclient | Nov 30, 2017 | Sep 20, 2017 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3 | Nov 30, 2017 | Nov 30, 2017 |
| Oracle_linux | — | Upgrade samba-dc-libsUpgrade samba-testUpgrade samba-common-toolsUpgrade samba4-clientUpgrade samba-common-libsUpgrade samba4-libsUpgrade samba-test-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-glusterfsUpgrade samba4-commonUpgrade samba4-pidlUpgrade samba-krb5-printingUpgrade samba4Upgrade samba-winbind-clientsUpgrade libwbclient-develUpgrade samba-docUpgrade samba-winbindUpgrade samba-pidlUpgrade samba-vfs-glusterfsUpgrade samba4-winbind-krb5-locatorUpgrade samba-swatUpgrade sambaUpgrade samba-domainjoin-guiUpgrade samba4-testUpgrade samba-winbind-modulesUpgrade libsmbclient-develUpgrade samba-libsUpgrade libsmbclientUpgrade ctdbUpgrade samba4-winbindUpgrade samba-winbind-develUpgrade libwbclientUpgrade samba-commonUpgrade samba4-pythonUpgrade samba-develUpgrade ctdb-testsUpgrade samba4-dc-libsUpgrade samba-dcUpgrade samba4-dcUpgrade samba4-winbind-clientsUpgrade samba4-develUpgrade samba-python | Sep 27, 2017 | Sep 20, 2017 |
| Redhat_linux | — | Upgrade samba4-clientUpgrade samba-dcUpgrade samba4-winbind-clientsUpgrade samba-testUpgrade samba-client-libsUpgrade samba-test-libsUpgrade samba-vfs-glusterfsUpgrade samba-pidlUpgrade samba4-pidlUpgrade samba4-debuginfoUpgrade libwbclientUpgrade samba4-winbindNo solution existsUpgrade samba4-commonUpgrade samba-glusterfsUpgrade samba-krb5-printingUpgrade samba4Upgrade samba-winbind-krb5-locatorUpgrade sambaUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba4-pythonUpgrade libsmbclient-develUpgrade samba-libsUpgrade libwbclient-develUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-docUpgrade samba4-testUpgrade samba4-winbind-krb5-locatorUpgrade samba4-libsUpgrade samba-domainjoin-guiUpgrade samba-dc-libsUpgrade samba-winbind-develUpgrade samba-winbind-modulesUpgrade samba-debuginfoUpgrade samba-swatUpgrade samba-clientUpgrade samba-pythonUpgrade samba-develUpgrade samba4-dcUpgrade samba4-dc-libsUpgrade samba4-develUpgrade samba-common | Oct 4, 2017 | Sep 21, 2017 |
| Samba | — | Upgrade to Samba version 4.6.8Upgrade to Samba version 4.5.14Upgrade to Samba version 4.4.16 | Sep 29, 2017 | Sep 29, 2017 |
| Suse | — | Upgrade libsamba-util0-32bitUpgrade libsmbconf0Upgrade libwbclient0Upgrade libsmbldap0-32bitUpgrade samba-client-x86Upgrade sambaUpgrade libndr-nbt0Upgrade libsamba-passdb-develUpgrade libndr-standard-develUpgrade libtevent-util0Upgrade samba-kdcUpgrade libsmbsharemodes0Upgrade libsamba-policy0-python3Upgrade samba-libsUpgrade libdcerpc-binding0Upgrade libsmbconf0-32bitUpgrade samba-libs-python3Upgrade libndr-standard0Upgrade libsmbldap2-32bitUpgrade libnetapi-develUpgrade libsamba-credentials0-32bitUpgrade samba-libs-32bitUpgrade samba-dsdb-modulesUpgrade libndr-krb5pac0-32bitUpgrade libdcerpc-samr-develUpgrade libdcerpc0-32bitUpgrade libnetapi0Upgrade libsmbldap-develUpgrade libsamba-hostconfig0Upgrade libgensec0Upgrade samba-pythonUpgrade libsmbclient-develUpgrade libsamba-credentials0Upgrade libndr1Upgrade samba-client-32bitUpgrade libndr-standard0-32bitUpgrade libtalloc-develUpgrade libtevent0-32bitUpgrade ldapsmbUpgrade libtevent0Upgrade samba-winbind-x86Upgrade samba-docUpgrade libndr0Upgrade samba-cephUpgrade libsmbclient0Upgrade libtdb-develUpgrade libsmbclient0-32bitUpgrade libsamba-credentials-develUpgrade libsamba-errors0-32bitUpgrade libsmbclient0-x86Upgrade ctdbUpgrade libsamba-policy-develUpgrade samba-develUpgrade libndr-nbt-develUpgrade libsamba-util-develUpgrade libdcerpc-develUpgrade samba-winbind-32bitUpgrade samba-krb-printingUpgrade samba-winbindUpgrade libtalloc2-x86Upgrade libtevent-util-develUpgrade libwbclient0-32bitUpgrade samba-x86Upgrade libdcerpc-atsvc0Upgrade samba-clientUpgrade libdcerpc-binding0-32bitUpgrade samba-32bitUpgrade libtalloc2-32bitUpgrade libsamba-policy0Upgrade libsamba-passdb0-32bitUpgrade libsamba-passdb0Upgrade libndr-krb5pac0Upgrade libtevent-develUpgrade libgensec0-32bitUpgrade libsamba-hostconfig-develUpgrade libtdb1-32bitUpgrade libndr0-32bitUpgrade libldb-develUpgrade libsmbldap0Upgrade libsamba-errors-develUpgrade libndr-develUpgrade libdcerpc0Upgrade libsmbsharemodes-develUpgrade samba-libs-python3-32bitUpgrade libtevent0-x86Upgrade libndr1-32bitUpgrade libsmbldap2Upgrade libdcerpc-samr0Upgrade libsamba-policy-python3-develUpgrade libwbclient-develUpgrade libsmbclient-raw0Upgrade libtalloc2Upgrade libsmbconf-develUpgrade samba-python3Upgrade libsamba-errors0Upgrade samba-core-develUpgrade libsmbclient-raw0-32bitUpgrade libldb1Upgrade libnetapi0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libwbclient0-x86Upgrade libtevent-util0-32bitUpgrade libsamdb0-32bitUpgrade libsamdb0Upgrade libtdb1-x86Upgrade libtdb1Upgrade libregistry0Upgrade libsamba-util0Upgrade samba-testUpgrade samba-test-develUpgrade libndr-krb5pac-develUpgrade libsamdb-develUpgrade libndr-nbt0-32bit | Oct 5, 2017 | Sep 21, 2017 |
| Ubuntu | — | Upgrade samba | Sep 25, 2017 | Sep 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub