A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 24, 2018 | Aug 22, 2018 |
| Amazon Linux Ami 2 | — | Upgrade samba-testUpgrade samba-krb5-printingUpgrade samba-test-libsUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-dc-libsUpgrade samba-vfs-glusterfsUpgrade samba-common-libsUpgrade samba-libsUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade samba-python-testUpgrade samba-dcUpgrade ctdb-testsUpgrade samba-winbindUpgrade samba-debuginfoUpgrade samba-client-libsUpgrade libsmbclient-develUpgrade ctdbUpgrade sambaUpgrade libsmbclientUpgrade samba-pidlUpgrade libwbclientUpgrade samba-develUpgrade libwbclient-develUpgrade samba-pythonUpgrade samba-winbind-modules | Apr 27, 2020 | Aug 22, 2018 |
| Amazon_linux | — | Upgrade samba | Jan 25, 2019 | Aug 14, 2018 |
| Centos_linux | — | Upgrade samba-libsUpgrade samba-krb5-printingUpgrade samba-client-libsUpgrade samba-clientUpgrade libwbclientUpgrade samba-winbind-krb5-locatorUpgrade libwbclient-develUpgrade samba-common-toolsUpgrade libsmbclient-develUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-pythonUpgrade libsmbclientUpgrade samba-pidlUpgrade samba-common-libsUpgrade samba-dcUpgrade samba-debuginfoUpgrade samba-testUpgrade samba-develUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-python-testUpgrade sambaUpgrade samba-vfs-glusterfsUpgrade samba-dc-libsUpgrade samba-test-libs | Aug 28, 2019 | Aug 22, 2018 |
| Debian | — | Upgrade samba | Aug 15, 2018 | Aug 14, 2018 |
| Freebsd | — | Upgrade samba46Upgrade samba48Upgrade samba47 | Aug 15, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Aug 22, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-libsUpgrade samba-commonUpgrade libwbclientUpgrade sambaUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba-common-toolsUpgrade samba-clientUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-common-libs | Apr 2, 2019 | Aug 22, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-common-toolsUpgrade samba-libsUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade libwbclientUpgrade samba-clientUpgrade samba-winbindUpgrade sambaUpgrade samba-client-libsUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-winbind-modules | May 7, 2019 | Aug 22, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-commonUpgrade libwbclientUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade samba-clientUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba | Apr 3, 2019 | Aug 22, 2018 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4Upgrade service/network/samba to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4 | Oct 19, 2018 | Aug 22, 2018 |
| Oracle_linux | — | Upgrade samba-pidlUpgrade samba-test-libsUpgrade samba-common-libsUpgrade samba-dcUpgrade samba-testUpgrade samba-vfs-glusterfsUpgrade samba-python-testUpgrade samba-commonUpgrade samba-dc-libsUpgrade libsmbclientUpgrade ctdbUpgrade libwbclient-develUpgrade libwbclientUpgrade samba-libsUpgrade sambaUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade samba-krb5-printingUpgrade libsmbclient-develUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade ctdb-testsUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-develUpgrade samba-winbind-clientsUpgrade samba-python | Nov 6, 2018 | Aug 16, 2018 |
| Redhat_linux | — | Upgrade samba-python-testUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade samba-dcUpgrade samba-client-libsUpgrade sambaUpgrade samba-common-libsUpgrade samba-vfs-glusterfsUpgrade libwbclient-develUpgrade samba-pidlUpgrade samba-develUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade libsmbclient-develUpgrade samba-debuginfoUpgrade libsmbclientUpgrade samba-krb5-printingUpgrade libwbclientUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-dc-libsUpgrade samba-test-libsUpgrade samba-testUpgrade samba-common-tools | Oct 31, 2018 | Aug 22, 2018 |
| Samba | — | Upgrade to Samba version 4.7.9Upgrade to Samba version 4.6.16Upgrade to Samba version 4.8.4 | Aug 15, 2018 | Aug 15, 2018 |
| Suse | — | Upgrade samba-krb-printingUpgrade libregistry0Upgrade libsamba-errors-develUpgrade samba-python3Upgrade libdcerpc0Upgrade libndr-standard0Upgrade libsmbconf-develUpgrade libndr-develUpgrade libndr-standard-develUpgrade libtevent-develUpgrade libndr-krb5pac0Upgrade libtdb1Upgrade libtdb1-x86Upgrade libsamdb0-32bitUpgrade libtalloc-develUpgrade libdcerpc-samr0Upgrade libtevent0-32bitUpgrade libsmbclient0-x86Upgrade samba-clientUpgrade libsamba-policy0-32bitUpgrade libsamba-passdb-develUpgrade samba-dsdb-modulesUpgrade libndr0-32bitUpgrade libsamba-policy0Upgrade libnetapi0-32bitUpgrade libdcerpc-binding0-32bitUpgrade samba-testUpgrade samba-winbind-x86Upgrade libsamba-credentials0Upgrade libtevent0-x86Upgrade libsmbclient-raw0-32bitUpgrade libndr1-32bitUpgrade libsmbldap0Upgrade samba-client-32bitUpgrade libsamba-passdb0Upgrade libsmbsharemodes-develUpgrade libsamdb-develUpgrade libtalloc2-32bitUpgrade libndr-nbt0-32bitUpgrade libdcerpc-atsvc0Upgrade libldb1Upgrade libsamba-policy-python3-develUpgrade samba-kdcUpgrade libgensec0-32bitUpgrade samba-libs-python3-32bitUpgrade libndr-krb5pac-develUpgrade libsamba-hostconfig-develUpgrade libwbclient0-32bitUpgrade libsamdb0Upgrade samba-libs-32bitUpgrade libsmbsharemodes0Upgrade libtalloc2Upgrade samba-winbindUpgrade samba-client-x86Upgrade libsmbconf0Upgrade libsamba-util0-32bitUpgrade samba-x86Upgrade samba-kdc-32bitUpgrade libndr-standard0-32bitUpgrade libsamba-credentials-develUpgrade libdcerpc-samr-develUpgrade sambaUpgrade samba-docUpgrade libtdb-develUpgrade samba-core-develUpgrade libwbclient0-x86Upgrade libtalloc2-x86Upgrade samba-develUpgrade libtevent0Upgrade libdcerpc-samr0-32bitUpgrade libndr0Upgrade libsmbclient0Upgrade libtevent-util0Upgrade libsamba-policy0-python3Upgrade samba-pythonUpgrade libsamba-errors0-32bitUpgrade ldapsmbUpgrade libndr-nbt-develUpgrade libsmbconf0-32bitUpgrade libtdb1-32bitUpgrade libsmbldap2-32bitUpgrade samba-winbind-32bitUpgrade libtevent-util-develUpgrade libdcerpc0-32bitUpgrade libnetapi0Upgrade libndr-krb5pac0-32bitUpgrade samba-cephUpgrade libdcerpc-binding0Upgrade samba-libsUpgrade ctdbUpgrade libsmbclient0-32bitUpgrade ctdb-testsUpgrade libdcerpc-develUpgrade libsamba-errors0Upgrade libndr-nbt0Upgrade libsamba-credentials0-32bitUpgrade libsmbldap2Upgrade libsamba-policy-develUpgrade libsmbclient-raw0Upgrade libldb-develUpgrade samba-32bitUpgrade samba-pidlUpgrade libwbclient0Upgrade libsmbclient-develUpgrade libwbclient-develUpgrade samba-libs-python3Upgrade libsamba-hostconfig0Upgrade ctdb-pcp-pmdaUpgrade libsamba-passdb0-32bitUpgrade libgensec0Upgrade libsmbldap0-32bitUpgrade libndr1Upgrade libsamba-util0Upgrade libsmbldap-develUpgrade libtevent-util0-32bitUpgrade libnetapi-develUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-util-devel | Aug 15, 2018 | Aug 14, 2018 |
| Ubuntu | — | Upgrade libsmbclientUpgrade samba | Aug 17, 2018 | Aug 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub