Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 12, 2018 | Mar 12, 2018 |
| Amazon_linux | — | Upgrade samba | May 31, 2017 | Mar 23, 2017 |
| Centos_linux | — | Upgrade samba-testUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba-pidlUpgrade libwbclient-develUpgrade samba-winbind-modulesUpgrade samba-dc-libsUpgrade samba-dcUpgrade samba-glusterfsUpgrade samba-winbind-develUpgrade samba-develUpgrade libwbclientUpgrade samba-domainjoin-guiUpgrade samba-debuginfoUpgrade libsmbclient-develUpgrade samba-winbindUpgrade samba-docUpgrade samba-test-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-vfs-glusterfsUpgrade sambaUpgrade samba-libsUpgrade samba-pythonUpgrade samba-swatUpgrade samba-winbind-clientsUpgrade samba-krb5-printingUpgrade samba-common | May 24, 2017 | Mar 23, 2017 |
| Debian | — | Upgrade samba | Mar 24, 2017 | Mar 23, 2017 |
| Freebsd | — | Upgrade samba46Upgrade samba4Upgrade samba42Upgrade samba44Upgrade samba43Upgrade samba41Upgrade samba36Upgrade samba45 | Mar 25, 2017 | Mar 24, 2017 |
| Hpux | — | Update CIFS-Server to the latest version | Mar 28, 2022 | Mar 12, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-commonUpgrade sambaUpgrade samba-pythonUpgrade samba-winbindUpgrade libwbclientUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-libs | Oct 11, 2019 | Mar 12, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-libsUpgrade libwbclientUpgrade sambaUpgrade samba-pythonUpgrade samba-commonUpgrade samba-client-libsUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-winbind-clients | Oct 11, 2019 | Mar 12, 2018 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.4.14-0.175.3.20.0.6.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.14-0.175.3.20.0.6.0 on Solaris 11.3 | May 29, 2017 | May 29, 2017 |
| Oracle_linux | — | Upgrade samba-commonUpgrade samba-domainjoin-guiUpgrade libwbclientUpgrade samba-test-libsUpgrade samba-pidlUpgrade samba-testUpgrade samba-krb5-printingUpgrade libsmbclient-develUpgrade samba-vfs-glusterfsUpgrade samba-libsUpgrade samba-develUpgrade samba-clientUpgrade samba-winbind-develUpgrade ctdbUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade libwbclient-develUpgrade ctdb-testsUpgrade samba-winbind-krb5-locatorUpgrade samba-glusterfsUpgrade samba-pythonUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-dc-libsUpgrade samba-client-libsUpgrade samba-docUpgrade samba-common-toolsUpgrade samba-dcUpgrade samba-swatUpgrade samba | May 22, 2017 | Mar 23, 2017 |
| Redhat_linux | — | Upgrade samba-clientUpgrade samba-test-libsUpgrade samba-client-libsUpgrade ctdb-testsUpgrade samba-dc-libsUpgrade samba-common-toolsUpgrade samba-testUpgrade samba-glusterfsUpgrade libwbclient-develNo solution existsUpgrade samba-winbind-krb5-locatorUpgrade samba-libsUpgrade samba-common-libsUpgrade libsmbclient-develUpgrade samba-krb5-printingUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-vfs-glusterfsUpgrade samba-debuginfoUpgrade samba-winbindUpgrade samba-winbind-develUpgrade libwbclientUpgrade samba-commonUpgrade libsmbclientUpgrade samba-pidlUpgrade sambaUpgrade samba-pythonUpgrade samba-docUpgrade samba-swatUpgrade samba-domainjoin-guiUpgrade ctdbUpgrade samba-dcUpgrade samba-devel | May 23, 2017 | Mar 23, 2017 |
| Samba | — | Upgrade to Samba version 4.4.12Upgrade to Samba version 4.6.1Upgrade to Samba version 4.5.7 | Apr 6, 2017 | Apr 6, 2017 |
| Suse | — | Upgrade samba-develUpgrade ctdbUpgrade libdcerpc-samr0Upgrade libsmbldap2Upgrade libregistry0Upgrade libgensec-develUpgrade samba-kdcUpgrade libtalloc2-32bitUpgrade libsamba-policy-python3-develUpgrade libsmbclient-raw0Upgrade ldapsmbUpgrade libtevent-util-develUpgrade libldb1Upgrade libsamba-hostconfig0Upgrade libregistry-develUpgrade libtevent0Upgrade libsamba-errors0-32bitUpgrade libtdb-develUpgrade libsamba-policy-develUpgrade libdcerpc-atsvc-develUpgrade libsamba-passdb-develUpgrade samba-krb-printingUpgrade samba-libsUpgrade libdcerpc-samr-develUpgrade libsmbclient-develUpgrade libsmbclient0-x86Upgrade libsmbsharemodes-develUpgrade libsmbclient0Upgrade libdcerpc0Upgrade libndr-nbt0-32bitUpgrade libtdb1-x86Upgrade samba-client-x86Upgrade libsmbclient0-32bitUpgrade samba-test-develUpgrade libdcerpc0-32bitUpgrade libnetapi0-32bitUpgrade libsamba-credentials0Upgrade libndr0-32bitUpgrade libtdb1Upgrade samba-testUpgrade libsamba-policy0-python3Upgrade ctdb-develUpgrade libsamdb0-32bitUpgrade libgensec0Upgrade libsamba-util0Upgrade libtevent0-32bitUpgrade libsamba-passdb0Upgrade libsamdb-develUpgrade libndr-standard-develUpgrade samba-winbind-x86Upgrade libndr-standard0Upgrade libsamba-errors-develUpgrade libsamba-util0-32bitUpgrade libgensec0-32bitUpgrade libsmbldap0-32bitUpgrade libwbclient0Upgrade samba-clientUpgrade libsamba-credentials0-32bitUpgrade libndr-krb5pac0-32bitUpgrade samba-dsdb-modulesUpgrade libsmbconf0-32bitUpgrade libnetapi-develUpgrade libndr1Upgrade libdcerpc-binding0-32bitUpgrade libsamba-hostconfig-develUpgrade samba-client-32bitUpgrade libsmbldap2-32bitUpgrade libsmbsharemodes0Upgrade libsmbldap0Upgrade samba-python3Upgrade libwbclient-develUpgrade libsamba-errors0Upgrade libtalloc2-x86Upgrade libsmbldap-develUpgrade samba-x86Upgrade libdcerpc-atsvc0Upgrade samba-docUpgrade libtevent-util0Upgrade samba-32bitUpgrade samba-core-develUpgrade libndr-standard0-32bitUpgrade libndr-krb5pac-develUpgrade libndr-nbt0Upgrade libsamba-hostconfig0-32bitUpgrade libndr1-32bitUpgrade libsamba-credentials-develUpgrade libtdb1-32bitUpgrade libndr-krb5pac0Upgrade libndr0Upgrade libnetapi0Upgrade libdcerpc-binding0Upgrade samba-pythonUpgrade sambaUpgrade libtevent-util0-32bitUpgrade libndr-nbt-develUpgrade libsmbclient-raw0-32bitUpgrade samba-winbind-32bitUpgrade libsamba-passdb0-32bitUpgrade libldb-develUpgrade samba-cephUpgrade libdcerpc-develUpgrade libsamba-util-develUpgrade libtalloc2Upgrade samba-libs-python3-32bitUpgrade samba-libs-python3Upgrade libwbclient0-32bitUpgrade libtevent0-x86Upgrade samba-winbindUpgrade libtalloc-develUpgrade libsmbconf0Upgrade libtevent-develUpgrade libsmbclient-raw-develUpgrade libsmbconf-develUpgrade samba-libs-32bitUpgrade libsamba-policy0Upgrade libndr-develUpgrade libwbclient0-x86Upgrade libsamdb0 | Mar 29, 2017 | Mar 23, 2017 |
| Ubuntu | — | Upgrade samba | Mar 24, 2017 | Mar 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub