Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 12, 2018 | Mar 12, 2018 |
| Amazon_linux | — | Upgrade samba | May 31, 2017 | Mar 23, 2017 |
| Centos_linux | — | Upgrade samba-domainjoin-guiUpgrade samba-develUpgrade samba-winbind-clientsUpgrade samba-winbind-develUpgrade samba-test-libsUpgrade libsmbclient-develUpgrade samba-docUpgrade libwbclientUpgrade samba-commonUpgrade samba-libsUpgrade samba-pythonUpgrade samba-winbind-krb5-locatorUpgrade samba-krb5-printingUpgrade samba-swatUpgrade samba-winbindUpgrade samba-vfs-glusterfsUpgrade samba-debuginfoUpgrade sambaUpgrade samba-testUpgrade libwbclient-develUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-glusterfsUpgrade samba-client-libsUpgrade libsmbclientUpgrade samba-pidlUpgrade samba-dc-libsUpgrade samba-winbind-modulesUpgrade samba-dcUpgrade samba-common-libs | May 24, 2017 | Mar 23, 2017 |
| Debian | — | Upgrade samba | Mar 24, 2017 | Mar 23, 2017 |
| Freebsd | — | Upgrade samba46Upgrade samba44Upgrade samba42Upgrade samba4Upgrade samba41Upgrade samba43Upgrade samba36Upgrade samba45 | Mar 25, 2017 | Mar 24, 2017 |
| Hpux | — | Update CIFS-Server to the latest version | Mar 28, 2022 | Mar 12, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade libwbclientUpgrade samba-commonUpgrade samba-winbindUpgrade sambaUpgrade samba-client-libsUpgrade samba-pythonUpgrade libsmbclient | Oct 11, 2019 | Mar 12, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-client-libsUpgrade sambaUpgrade libwbclientUpgrade samba-libsUpgrade samba-python | Oct 11, 2019 | Mar 12, 2018 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.14-0.175.3.20.0.6.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.14-0.175.3.20.0.6.0 on Solaris 11.3 | May 29, 2017 | May 29, 2017 |
| Oracle_linux | — | Upgrade samba-common-toolsUpgrade samba-glusterfsUpgrade samba-winbindUpgrade samba-dcUpgrade sambaUpgrade libsmbclientUpgrade samba-swatUpgrade samba-winbind-modulesUpgrade samba-dc-libsUpgrade ctdb-testsUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade samba-pythonUpgrade libwbclient-develUpgrade samba-docUpgrade samba-vfs-glusterfsUpgrade samba-winbind-develUpgrade samba-develUpgrade ctdbUpgrade samba-pidlUpgrade samba-libsUpgrade samba-commonUpgrade samba-krb5-printingUpgrade libsmbclient-develUpgrade samba-testUpgrade samba-test-libsUpgrade samba-domainjoin-guiUpgrade samba-clientUpgrade libwbclient | May 22, 2017 | Mar 23, 2017 |
| Redhat_linux | — | No solution existsUpgrade ctdb-testsUpgrade libwbclient-develUpgrade samba-test-libsUpgrade samba-clientUpgrade samba-glusterfsUpgrade samba-testUpgrade samba-client-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-dc-libsUpgrade samba-common-toolsUpgrade samba-domainjoin-guiUpgrade samba-dcUpgrade samba-winbind-modulesUpgrade samba-pythonUpgrade samba-vfs-glusterfsUpgrade samba-krb5-printingUpgrade ctdbUpgrade samba-pidlUpgrade samba-winbind-develUpgrade sambaUpgrade libsmbclientUpgrade samba-libsUpgrade samba-commonUpgrade samba-develUpgrade libwbclientUpgrade samba-common-libsUpgrade libsmbclient-develUpgrade samba-winbindUpgrade samba-swatUpgrade samba-winbind-clientsUpgrade samba-docUpgrade samba-debuginfo | May 23, 2017 | Mar 23, 2017 |
| Samba | — | Upgrade to Samba version 4.5.7Upgrade to Samba version 4.6.1Upgrade to Samba version 4.4.12 | Apr 6, 2017 | Apr 6, 2017 |
| Suse | — | Upgrade libtevent0-x86Upgrade libtevent-develUpgrade libsamba-passdb0-32bitUpgrade libsmbclient-raw-develUpgrade samba-winbind-32bitUpgrade libtevent-util0-32bitUpgrade libldb-develUpgrade libndr-nbt-develUpgrade sambaUpgrade libsamba-policy0Upgrade libsmbconf0-32bitUpgrade libtalloc2-x86Upgrade libsmbldap-develUpgrade libtalloc-develUpgrade samba-cephUpgrade libsamba-hostconfig0-32bitUpgrade libsamdb0Upgrade libndr-standard0-32bitUpgrade samba-libs-32bitUpgrade samba-pythonUpgrade samba-core-develUpgrade libndr-krb5pac0Upgrade libsmbldap2-32bitUpgrade samba-x86Upgrade libtevent-util0Upgrade libsmbconf0Upgrade libndr0Upgrade libndr-krb5pac-develUpgrade samba-docUpgrade libdcerpc-atsvc0Upgrade libnetapi0Upgrade samba-32bitUpgrade libndr-develUpgrade libndr1-32bitUpgrade libsmbclient-raw0-32bitUpgrade libndr1Upgrade samba-libs-python3Upgrade libsmbconf-develUpgrade samba-winbindUpgrade libdcerpc-develUpgrade samba-libs-python3-32bitUpgrade libtalloc2Upgrade libwbclient0-x86Upgrade libdcerpc-binding0Upgrade libndr-nbt0Upgrade libwbclient0-32bitUpgrade libwbclient-develUpgrade libsamba-errors0Upgrade libsmbsharemodes0Upgrade samba-python3Upgrade libsmbldap0Upgrade libsamba-util-develUpgrade libsamba-credentials-develUpgrade libtdb1-32bitUpgrade libndr0-32bitUpgrade samba-develUpgrade libsamba-passdb0Upgrade libdcerpc-samr-develUpgrade libwbclient0Upgrade samba-testUpgrade libtdb1Upgrade ctdb-develUpgrade libsmbclient-raw0Upgrade ldapsmbUpgrade libsmbldap2Upgrade libsamba-hostconfig0Upgrade libtalloc2-32bitUpgrade libdcerpc-samr0Upgrade libgensec-develUpgrade libsmbclient0-x86Upgrade libsmbclient0Upgrade libnetapi-develUpgrade libndr-standard0Upgrade libregistry-develUpgrade libtevent0-32bitUpgrade libsmbclient0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libsmbldap0-32bitUpgrade libsamba-policy0-python3Upgrade libsamba-errors0-32bitUpgrade libsamba-credentials0-32bitUpgrade libsamba-passdb-develUpgrade libsamba-util0Upgrade samba-client-x86Upgrade libnetapi0-32bitUpgrade libndr-nbt0-32bitUpgrade samba-clientUpgrade libtdb1-x86Upgrade libsamba-hostconfig-develUpgrade libtevent0Upgrade libsmbsharemodes-develUpgrade libtdb-develUpgrade samba-krb-printingUpgrade libdcerpc-atsvc-develUpgrade libdcerpc0Upgrade libgensec0Upgrade libdcerpc0-32bitUpgrade libsamdb0-32bitUpgrade libsmbclient-develUpgrade libsamdb-develUpgrade libldb1Upgrade libndr-standard-develUpgrade samba-test-develUpgrade samba-winbind-x86Upgrade samba-kdcUpgrade libgensec0-32bitUpgrade libtevent-util-develUpgrade ctdbUpgrade libsamba-policy-python3-develUpgrade libsamba-credentials0Upgrade libsamba-util0-32bitUpgrade samba-dsdb-modulesUpgrade libregistry0Upgrade samba-libsUpgrade samba-client-32bitUpgrade libsamba-policy-develUpgrade libsamba-errors-devel | Mar 29, 2017 | Mar 23, 2017 |
| Ubuntu | — | Upgrade samba | Mar 24, 2017 | Mar 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub