Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 12, 2018 | Mar 12, 2018 |
| Amazon_linux | — | Upgrade samba | May 31, 2017 | Mar 23, 2017 |
| Centos_linux | — | Upgrade samba-client-libsUpgrade libsmbclientUpgrade samba-dcUpgrade samba-glusterfsUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-dc-libsUpgrade libwbclient-develUpgrade samba-testUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-pidlUpgrade samba-swatUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-krb5-printingUpgrade samba-debuginfoUpgrade samba-vfs-glusterfsUpgrade sambaUpgrade samba-winbind-krb5-locatorUpgrade libwbclientUpgrade samba-develUpgrade libsmbclient-develUpgrade samba-docUpgrade samba-domainjoin-guiUpgrade samba-winbindUpgrade samba-commonUpgrade samba-winbind-develUpgrade samba-test-libsUpgrade samba-python | May 24, 2017 | Mar 23, 2017 |
| Debian | — | Upgrade samba | Mar 24, 2017 | Mar 23, 2017 |
| Freebsd | — | Upgrade samba42Upgrade samba4Upgrade samba46Upgrade samba44Upgrade samba36Upgrade samba43Upgrade samba41Upgrade samba45 | Mar 25, 2017 | Mar 24, 2017 |
| Hpux | — | Update CIFS-Server to the latest version | Mar 28, 2022 | Mar 12, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-winbindUpgrade libsmbclientUpgrade samba-commonUpgrade sambaUpgrade samba-client-libsUpgrade samba-pythonUpgrade libwbclientUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-common-libs | Oct 11, 2019 | Mar 12, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libwbclientUpgrade sambaUpgrade samba-pythonUpgrade samba-libsUpgrade samba-client-libsUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-client | Oct 11, 2019 | Mar 12, 2018 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.4.14-0.175.3.20.0.6.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.14-0.175.3.20.0.6.0 on Solaris 11.3 | May 29, 2017 | May 29, 2017 |
| Oracle_linux | — | Upgrade samba-libsUpgrade samba-clientUpgrade samba-pidlUpgrade samba-develUpgrade samba-vfs-glusterfsUpgrade samba-domainjoin-guiUpgrade samba-test-libsUpgrade samba-krb5-printingUpgrade samba-commonUpgrade libwbclientUpgrade samba-winbind-develUpgrade samba-testUpgrade libsmbclient-develUpgrade ctdbUpgrade samba-glusterfsUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-dcUpgrade samba-swatUpgrade libsmbclientUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-pythonUpgrade libwbclient-develUpgrade samba-docUpgrade samba-common-libsUpgrade ctdb-testsUpgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade samba-client-libs | May 22, 2017 | Mar 23, 2017 |
| Redhat_linux | — | Upgrade samba-winbind-krb5-locatorUpgrade samba-client-libsUpgrade samba-test-libsUpgrade samba-clientUpgrade samba-testUpgrade samba-glusterfsUpgrade samba-common-toolsUpgrade samba-dc-libsUpgrade libwbclient-develUpgrade ctdb-testsNo solution existsUpgrade samba-pythonUpgrade samba-krb5-printingUpgrade samba-winbind-clientsUpgrade samba-debuginfoUpgrade samba-vfs-glusterfsUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade samba-commonUpgrade samba-pidlUpgrade libsmbclient-develUpgrade samba-common-libsUpgrade samba-dcUpgrade samba-winbindUpgrade samba-swatUpgrade samba-develUpgrade libsmbclientUpgrade samba-domainjoin-guiUpgrade sambaUpgrade samba-libsUpgrade samba-docUpgrade samba-winbind-develUpgrade ctdb | May 23, 2017 | Mar 23, 2017 |
| Samba | — | Upgrade to Samba version 4.5.7Upgrade to Samba version 4.6.1Upgrade to Samba version 4.4.12 | Apr 6, 2017 | Apr 6, 2017 |
| Suse | — | Upgrade libsamba-passdb0Upgrade samba-client-32bitUpgrade samba-winbind-x86Upgrade libsamba-errors-develUpgrade samba-dsdb-modulesUpgrade libwbclient0Upgrade samba-test-develUpgrade samba-develUpgrade libsmbclient-raw0Upgrade ctdbUpgrade libregistry0Upgrade samba-testUpgrade ctdb-develUpgrade libtevent-util-develUpgrade libgensec-develUpgrade libgensec0-32bitUpgrade libsamba-util0-32bitUpgrade libdcerpc-samr0Upgrade libndr0-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-policy-python3-develUpgrade libtdb1Upgrade libsmbclient0Upgrade libgensec0Upgrade libsamba-credentials0Upgrade libsmbclient-develUpgrade libnetapi0-32bitUpgrade libtdb1-x86Upgrade samba-client-x86Upgrade libsamdb0-32bitUpgrade libsamba-policy-develUpgrade libtevent0Upgrade samba-krb-printingUpgrade libsamba-passdb-develUpgrade libdcerpc-atsvc-develUpgrade libndr-nbt0-32bitUpgrade samba-libsUpgrade libdcerpc0Upgrade libsamba-util0Upgrade libnetapi-develUpgrade libsmbldap0-32bitUpgrade libsamba-errors0-32bitUpgrade samba-clientUpgrade libsamba-credentials0-32bitUpgrade libtevent0-32bitUpgrade libsmbsharemodes-develUpgrade libndr-standard0Upgrade libdcerpc-binding0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsamba-policy0-python3Upgrade libsamba-hostconfig-develUpgrade libtdb-develUpgrade libsmbclient0-x86Upgrade libldb1Upgrade ldapsmbUpgrade libsmbldap2Upgrade libregistry-develUpgrade libndr-standard-develUpgrade libsamdb-develUpgrade samba-kdcUpgrade libsamba-hostconfig0Upgrade libdcerpc0-32bitUpgrade libsmbclient0-32bitUpgrade libtalloc2-32bitUpgrade libtdb1-32bitUpgrade libndr-nbt-develUpgrade libtevent-util0-32bitUpgrade samba-cephUpgrade sambaUpgrade libsamba-credentials-develUpgrade libsamba-passdb0-32bitUpgrade libsmbconf-develUpgrade libtalloc2-x86Upgrade libsamba-policy0Upgrade samba-libs-python3Upgrade libwbclient0-32bitUpgrade libsamba-util-develUpgrade samba-libs-python3-32bitUpgrade samba-winbindUpgrade libtevent0-x86Upgrade libtalloc2Upgrade samba-python3Upgrade libsmbconf0-32bitUpgrade libsmbldap-develUpgrade libwbclient-develUpgrade libsmbsharemodes0Upgrade libndr1Upgrade libsmbldap2-32bitUpgrade samba-winbind-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libndr-develUpgrade libndr-krb5pac-develUpgrade libsamdb0Upgrade libsmbconf0Upgrade libndr0Upgrade libdcerpc-binding0Upgrade samba-32bitUpgrade libtevent-util0Upgrade libndr-standard0-32bitUpgrade samba-docUpgrade samba-x86Upgrade libdcerpc-atsvc0Upgrade samba-pythonUpgrade libdcerpc-develUpgrade libtalloc-develUpgrade libsmbclient-raw-develUpgrade libwbclient0-x86Upgrade libsmbclient-raw0-32bitUpgrade libsamba-errors0Upgrade libndr1-32bitUpgrade libsmbldap0Upgrade samba-core-develUpgrade libldb-develUpgrade libnetapi0Upgrade libndr-nbt0Upgrade samba-libs-32bitUpgrade libtevent-develUpgrade libndr-krb5pac0 | Mar 29, 2017 | Mar 23, 2017 |
| Ubuntu | — | Upgrade samba | Mar 24, 2017 | Mar 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub