Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 12, 2018 | Mar 12, 2018 |
| Amazon_linux | — | Upgrade samba | May 31, 2017 | Mar 23, 2017 |
| Centos_linux | — | Upgrade samba-winbind-modulesUpgrade libwbclient-develUpgrade samba-common-toolsUpgrade samba-dcUpgrade samba-client-libsUpgrade samba-common-libsUpgrade samba-testUpgrade samba-clientUpgrade samba-glusterfsUpgrade samba-pidlUpgrade libsmbclientUpgrade samba-dc-libsUpgrade samba-debuginfoUpgrade samba-develUpgrade libwbclientUpgrade samba-winbind-develUpgrade samba-vfs-glusterfsUpgrade samba-winbind-krb5-locatorUpgrade samba-krb5-printingUpgrade sambaUpgrade samba-winbindUpgrade samba-commonUpgrade samba-domainjoin-guiUpgrade samba-test-libsUpgrade samba-docUpgrade samba-swatUpgrade libsmbclient-develUpgrade samba-libsUpgrade samba-pythonUpgrade samba-winbind-clients | May 24, 2017 | Mar 23, 2017 |
| Debian | — | Upgrade samba | Mar 24, 2017 | Mar 23, 2017 |
| Freebsd | — | Upgrade samba44Upgrade samba46Upgrade samba42Upgrade samba4Upgrade samba41Upgrade samba43Upgrade samba36Upgrade samba45 | Mar 25, 2017 | Mar 24, 2017 |
| Hpux | — | Update CIFS-Server to the latest version | Mar 28, 2022 | Mar 12, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade sambaUpgrade libsmbclientUpgrade samba-commonUpgrade samba-client-libsUpgrade samba-pythonUpgrade libwbclientUpgrade samba-winbindUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade samba-common-tools | Oct 11, 2019 | Mar 12, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-pythonUpgrade sambaUpgrade samba-commonUpgrade samba-client-libsUpgrade samba-libsUpgrade libwbclientUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-winbindUpgrade samba-common-libs | Oct 11, 2019 | Mar 12, 2018 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.14-0.175.3.20.0.6.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.14-0.175.3.20.0.6.0 on Solaris 11.3 | May 29, 2017 | May 29, 2017 |
| Oracle_linux | — | Upgrade ctdbUpgrade libsmbclient-develUpgrade samba-pidlUpgrade samba-testUpgrade samba-develUpgrade samba-libsUpgrade samba-domainjoin-guiUpgrade samba-test-libsUpgrade samba-vfs-glusterfsUpgrade samba-commonUpgrade samba-krb5-printingUpgrade samba-clientUpgrade samba-winbind-develUpgrade libwbclientUpgrade samba-pythonUpgrade samba-winbind-krb5-locatorUpgrade libwbclient-develUpgrade samba-docUpgrade samba-client-libsUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade ctdb-testsUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-dc-libsUpgrade samba-winbindUpgrade samba-dcUpgrade samba-glusterfsUpgrade sambaUpgrade samba-swat | May 22, 2017 | Mar 23, 2017 |
| Redhat_linux | — | Upgrade samba-dcUpgrade libsmbclient-develUpgrade libsmbclientUpgrade samba-libsUpgrade samba-domainjoin-guiUpgrade samba-winbind-modulesUpgrade samba-docUpgrade libwbclientUpgrade samba-swatUpgrade samba-pythonUpgrade samba-common-libsUpgrade samba-winbindUpgrade sambaUpgrade samba-krb5-printingUpgrade ctdbUpgrade samba-vfs-glusterfsUpgrade samba-pidlUpgrade samba-develUpgrade samba-winbind-develUpgrade samba-commonUpgrade samba-debuginfoUpgrade samba-winbind-clientsUpgrade ctdb-testsNo solution existsUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade libwbclient-develUpgrade samba-client-libsUpgrade samba-common-toolsUpgrade samba-test-libsUpgrade samba-testUpgrade samba-dc-libsUpgrade samba-glusterfs | May 23, 2017 | Mar 23, 2017 |
| Samba | — | Upgrade to Samba version 4.6.1Upgrade to Samba version 4.4.12Upgrade to Samba version 4.5.7 | Apr 6, 2017 | Apr 6, 2017 |
| Suse | — | Upgrade libndr-krb5pac-develUpgrade libdcerpc-develUpgrade libdcerpc-binding0Upgrade libndr0Upgrade samba-libs-python3Upgrade libsmbldap2-32bitUpgrade samba-python3Upgrade libsmbldap-develUpgrade libtalloc-develUpgrade libwbclient-develUpgrade libndr-standard0-32bitUpgrade libndr-krb5pac0Upgrade libsamba-passdb0-32bitUpgrade libldb-develUpgrade libnetapi0Upgrade libndr-nbt0Upgrade sambaUpgrade samba-winbind-32bitUpgrade libndr-nbt-develUpgrade samba-cephUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-credentials-develUpgrade libtevent-util0-32bitUpgrade samba-pythonUpgrade libtdb1-32bitUpgrade samba-core-develUpgrade libsmbldap0Upgrade libsmbconf0Upgrade libsmbconf0-32bitUpgrade samba-libs-python3-32bitUpgrade libtevent-develUpgrade libndr1-32bitUpgrade libtalloc2-x86Upgrade libwbclient0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libsmbsharemodes0Upgrade libsamba-util-develUpgrade libsmbclient-raw-develUpgrade libsmbconf-develUpgrade libtevent-util0Upgrade samba-x86Upgrade samba-32bitUpgrade samba-docUpgrade samba-libs-32bitUpgrade libndr1Upgrade libdcerpc-atsvc0Upgrade libsamba-policy0Upgrade libndr-develUpgrade libwbclient0-x86Upgrade libsamdb0Upgrade libsamba-errors0Upgrade libtalloc2Upgrade samba-winbindUpgrade libtevent0-x86Upgrade libtdb1Upgrade libregistry-develUpgrade libdcerpc-samr0Upgrade libsamba-util0Upgrade libldb1Upgrade libsamba-hostconfig0Upgrade libsmbldap2Upgrade libsmbclient0-32bitUpgrade libdcerpc0-32bitUpgrade ldapsmbUpgrade libsamba-passdb-develUpgrade libgensec0Upgrade libsmbclient0-x86Upgrade samba-kdcUpgrade libsamba-errors-develUpgrade samba-client-32bitUpgrade libsamba-passdb0Upgrade libsamdb-develUpgrade libndr-standard-develUpgrade samba-winbind-x86Upgrade libtevent0Upgrade libsmbclient0Upgrade libtalloc2-32bitUpgrade libtdb-develUpgrade libsamba-util0-32bitUpgrade libtdb1-x86Upgrade libsmbclient-develUpgrade libsamba-credentials0Upgrade libgensec0-32bitUpgrade libwbclient0Upgrade samba-dsdb-modulesUpgrade libnetapi0-32bitUpgrade libsamdb0-32bitUpgrade samba-krb-printingUpgrade libdcerpc0Upgrade libsmbldap0-32bitUpgrade libsamba-policy-develUpgrade libsamba-policy0-python3Upgrade libndr-krb5pac0-32bitUpgrade libsamba-hostconfig-develUpgrade libtevent0-32bitUpgrade libdcerpc-binding0-32bitUpgrade samba-clientUpgrade libsamba-credentials0-32bitUpgrade libnetapi-develUpgrade libsamba-errors0-32bitUpgrade libndr-standard0Upgrade libsmbsharemodes-develUpgrade libndr-nbt0-32bitUpgrade libdcerpc-atsvc-develUpgrade samba-test-develUpgrade libdcerpc-samr-develUpgrade samba-libsUpgrade libgensec-develUpgrade samba-testUpgrade samba-client-x86Upgrade libtevent-util-develUpgrade ctdb-develUpgrade samba-develUpgrade libsmbclient-raw0Upgrade libsamba-policy-python3-develUpgrade libndr0-32bitUpgrade libregistry0Upgrade ctdb | Mar 29, 2017 | Mar 23, 2017 |
| Ubuntu | — | Upgrade samba | Mar 24, 2017 | Mar 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub