A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 24, 2018 | Aug 22, 2018 |
| Amazon Linux Ami 2 | — | Upgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-dcUpgrade libsmbclientUpgrade ctdb-testsUpgrade samba-pidlUpgrade libwbclientUpgrade samba-pythonUpgrade samba-develUpgrade libsmbclient-develUpgrade libwbclient-develUpgrade samba-client-libsUpgrade ctdbUpgrade samba-debuginfoUpgrade sambaUpgrade samba-clientUpgrade samba-python-testUpgrade samba-vfs-glusterfsUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libsUpgrade samba-test-libsUpgrade samba-dc-libsUpgrade samba-krb5-printingUpgrade samba-commonUpgrade samba-libsUpgrade samba-test | Apr 27, 2020 | Aug 22, 2018 |
| Amazon_linux | — | Upgrade samba | Jan 25, 2019 | Aug 14, 2018 |
| Centos_linux | — | Upgrade samba-libsUpgrade samba-clientUpgrade libsmbclient-develUpgrade samba-krb5-printingUpgrade samba-client-libsUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade libwbclient-develUpgrade libwbclientUpgrade samba-python-testUpgrade samba-testUpgrade samba-debuginfoUpgrade samba-dc-libsUpgrade samba-dcUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade samba-winbindUpgrade samba-pidlUpgrade samba-develUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-common-libsUpgrade samba-commonUpgrade samba-vfs-glusterfsUpgrade samba-test-libs | Aug 28, 2019 | Aug 22, 2018 |
| Debian | — | Upgrade samba | Aug 15, 2018 | Aug 14, 2018 |
| Freebsd | — | Upgrade samba46Upgrade samba47Upgrade samba48 | Aug 15, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Aug 22, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-pythonUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-commonUpgrade sambaUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade libsmbclient | Apr 2, 2019 | Aug 22, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libwbclientUpgrade samba-clientUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-pythonUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-client-libsUpgrade samba-winbind | May 7, 2019 | Aug 22, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libwbclientUpgrade samba-commonUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-libsUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-python | Apr 3, 2019 | Aug 22, 2018 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4Upgrade service/network/samba to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4 | Oct 19, 2018 | Aug 22, 2018 |
| Oracle_linux | — | Upgrade samba-common-libsUpgrade samba-pidlUpgrade libsmbclientUpgrade samba-commonUpgrade samba-dcUpgrade samba-test-libsUpgrade samba-vfs-glusterfsUpgrade ctdbUpgrade libwbclient-develUpgrade samba-dc-libsUpgrade samba-python-testUpgrade samba-testUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade libsmbclient-develUpgrade samba-krb5-printingUpgrade ctdb-testsUpgrade samba-develUpgrade samba-winbindUpgrade samba-winbind-krb5-locatorUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba | Nov 6, 2018 | Aug 16, 2018 |
| Redhat_linux | — | Upgrade samba-debuginfoUpgrade libwbclient-develUpgrade samba-pythonUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-dcUpgrade samba-common-libsUpgrade sambaUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade samba-vfs-glusterfsUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba-develUpgrade libsmbclient-develUpgrade samba-pidlUpgrade samba-python-testUpgrade samba-common-toolsUpgrade samba-test-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-testUpgrade samba-clientUpgrade libwbclientUpgrade samba-dc-libsUpgrade samba-krb5-printing | Oct 31, 2018 | Aug 22, 2018 |
| Samba | — | Upgrade to Samba version 4.8.4Upgrade to Samba version 4.7.9Upgrade to Samba version 4.6.16 | Aug 15, 2018 | Aug 15, 2018 |
| Suse | — | Upgrade libwbclient0-32bitUpgrade libsamba-hostconfig-develUpgrade libsmbsharemodes-develUpgrade samba-libs-python3-32bitUpgrade samba-client-32bitUpgrade samba-testUpgrade libdcerpc0Upgrade libtalloc2-32bitUpgrade libndr-krb5pac0Upgrade libdcerpc-samr0Upgrade libsmbldap0Upgrade libndr-standard-develUpgrade libsamba-passdb0Upgrade libgensec0-32bitUpgrade libtdb1Upgrade libldb1Upgrade libsamba-credentials0Upgrade libtevent0-x86Upgrade libregistry0Upgrade libdcerpc-binding0-32bitUpgrade libsamba-errors-develUpgrade samba-winbind-x86Upgrade libtdb1-x86Upgrade samba-clientUpgrade libsmbclient-raw0-32bitUpgrade libsmbclient0-x86Upgrade samba-dsdb-modulesUpgrade libtevent0-32bitUpgrade libndr1-32bitUpgrade libndr0-32bitUpgrade libndr-develUpgrade libtalloc-develUpgrade libtevent-develUpgrade libsamba-passdb-develUpgrade libsamba-policy0-32bitUpgrade samba-kdcUpgrade libsamdb0-32bitUpgrade samba-python3Upgrade libndr-krb5pac-develUpgrade libsamba-policy-python3-develUpgrade samba-krb-printingUpgrade libndr-nbt0-32bitUpgrade libndr-standard0Upgrade libsamba-policy0Upgrade libdcerpc-atsvc0Upgrade libnetapi0-32bitUpgrade libsmbconf-develUpgrade libsamdb-develUpgrade samba-winbindUpgrade libsmbldap2-32bitUpgrade libdcerpc-samr0-32bitUpgrade samba-winbind-32bitUpgrade samba-libs-python3Upgrade libtevent-util0Upgrade libndr0Upgrade libsmbclient-develUpgrade samba-pythonUpgrade samba-develUpgrade libsamba-util0Upgrade libwbclient-develUpgrade ldapsmbUpgrade libsamba-policy-develUpgrade libdcerpc-samr-develUpgrade libsamdb0Upgrade libsamba-credentials-develUpgrade samba-32bitUpgrade samba-core-develUpgrade libndr-nbt0Upgrade libnetapi-develUpgrade libwbclient0-x86Upgrade samba-cephUpgrade libsamba-policy0-python3Upgrade samba-pidlUpgrade libdcerpc-binding0Upgrade libndr-krb5pac0-32bitUpgrade libsmbldap-develUpgrade libgensec0Upgrade libndr1Upgrade libsmbclient-raw0Upgrade ctdbUpgrade libnetapi0Upgrade libsamba-credentials0-32bitUpgrade libsamba-util-develUpgrade libndr-nbt-develUpgrade ctdb-testsUpgrade libsmbclient0-32bitUpgrade libtdb1-32bitUpgrade libdcerpc-develUpgrade libtdb-develUpgrade samba-docUpgrade libtalloc2Upgrade libsamba-errors0Upgrade libtevent-util0-32bitUpgrade libdcerpc0-32bitUpgrade libsmbldap0-32bitUpgrade samba-libsUpgrade samba-client-x86Upgrade sambaUpgrade libsamba-hostconfig0-32bitUpgrade libsmbconf0-32bitUpgrade libsmbconf0Upgrade libtalloc2-x86Upgrade samba-libs-32bitUpgrade libtevent0Upgrade libsmbldap2Upgrade libsmbclient0Upgrade libtevent-util-develUpgrade libwbclient0Upgrade libldb-develUpgrade libsmbsharemodes0Upgrade samba-kdc-32bitUpgrade libsamba-util0-32bitUpgrade libndr-standard0-32bitUpgrade samba-x86Upgrade libsamba-errors0-32bitUpgrade libsamba-passdb0-32bitUpgrade ctdb-pcp-pmdaUpgrade libsamba-hostconfig0 | Aug 15, 2018 | Aug 14, 2018 |
| Ubuntu | — | Upgrade libsmbclientUpgrade samba | Aug 17, 2018 | Aug 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub