A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 24, 2018 | Aug 22, 2018 |
| Amazon Linux Ami 2 | — | Upgrade samba-common-toolsUpgrade samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-libsUpgrade samba-test-libsUpgrade samba-common-libsUpgrade samba-krb5-printingUpgrade samba-winbind-clientsUpgrade samba-python-testUpgrade samba-commonUpgrade samba-vfs-glusterfsUpgrade samba-clientUpgrade samba-dc-libsUpgrade ctdbUpgrade samba-dcUpgrade libsmbclient-develUpgrade sambaUpgrade libwbclientUpgrade libsmbclientUpgrade samba-pidlUpgrade samba-client-libsUpgrade libwbclient-develUpgrade samba-debuginfoUpgrade samba-winbind-modulesUpgrade samba-pythonUpgrade ctdb-testsUpgrade samba-winbindUpgrade samba-devel | Apr 27, 2020 | Aug 22, 2018 |
| Amazon_linux | — | Upgrade samba | Jan 25, 2019 | Aug 14, 2018 |
| Centos_linux | — | Upgrade samba-pythonUpgrade samba-pidlUpgrade samba-common-libsUpgrade samba-commonUpgrade sambaUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-dcUpgrade samba-test-libsUpgrade samba-develUpgrade samba-dc-libsUpgrade samba-debuginfoUpgrade samba-testUpgrade samba-winbind-modulesUpgrade samba-python-testUpgrade samba-vfs-glusterfsUpgrade samba-libsUpgrade libsmbclient-develUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade samba-common-toolsUpgrade libwbclientUpgrade libwbclient-develUpgrade samba-krb5-printingUpgrade samba-client-libs | Aug 28, 2019 | Aug 22, 2018 |
| Debian | — | Upgrade samba | Aug 15, 2018 | Aug 14, 2018 |
| Freebsd | — | Upgrade samba48Upgrade samba46Upgrade samba47 | Aug 15, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Aug 22, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-libsUpgrade samba-winbind-clientsUpgrade libwbclientUpgrade samba-commonUpgrade samba-winbindUpgrade sambaUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba-clientUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-winbind-modules | Apr 2, 2019 | Aug 22, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-client-libsUpgrade samba-winbindUpgrade samba-pythonUpgrade sambaUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade libwbclientUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-libsUpgrade samba-common-libs | May 7, 2019 | Aug 22, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libwbclientUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-pythonUpgrade sambaUpgrade samba-client-libs | Apr 3, 2019 | Aug 22, 2018 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4 | Oct 19, 2018 | Aug 22, 2018 |
| Oracle_linux | — | Upgrade samba-dcUpgrade samba-test-libsUpgrade samba-dc-libsUpgrade samba-pidlUpgrade samba-python-testUpgrade libwbclient-develUpgrade samba-common-libsUpgrade ctdbUpgrade samba-testUpgrade samba-vfs-glusterfsUpgrade samba-commonUpgrade libsmbclientUpgrade sambaUpgrade samba-clientUpgrade samba-develUpgrade samba-winbindUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade libsmbclient-develUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba-pythonUpgrade samba-krb5-printingUpgrade ctdb-testsUpgrade samba-libsUpgrade samba-common-tools | Nov 6, 2018 | Aug 16, 2018 |
| Redhat_linux | — | Upgrade libsmbclient-develUpgrade samba-pythonUpgrade samba-vfs-glusterfsUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-client-libsUpgrade samba-commonUpgrade samba-dcUpgrade samba-python-testUpgrade sambaUpgrade samba-libsUpgrade libwbclient-develUpgrade samba-debuginfoUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-pidlUpgrade samba-develUpgrade samba-dc-libsUpgrade samba-common-toolsUpgrade samba-testUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade libwbclientUpgrade samba-krb5-printing | Oct 31, 2018 | Aug 22, 2018 |
| Samba | — | Upgrade to Samba version 4.8.4Upgrade to Samba version 4.7.9Upgrade to Samba version 4.6.16 | Aug 15, 2018 | Aug 15, 2018 |
| Suse | — | Upgrade libsmbclient-develUpgrade libsmbsharemodes0Upgrade libldb-develUpgrade libwbclient-develUpgrade libwbclient0Upgrade libtevent-util-develUpgrade samba-client-x86Upgrade libsmbldap2-32bitUpgrade libsmbldap0-32bitUpgrade libtevent-util0Upgrade libsmbldap2Upgrade libsamba-errors0Upgrade samba-pidlUpgrade samba-pythonUpgrade ldapsmbUpgrade libsamba-hostconfig0Upgrade samba-winbind-32bitUpgrade libsamba-passdb0-32bitUpgrade libtalloc2Upgrade libsamba-errors0-32bitUpgrade ctdbUpgrade libndr0Upgrade samba-core-develUpgrade libtevent0Upgrade samba-kdc-32bitUpgrade libwbclient0-x86Upgrade libsamba-util0-32bitUpgrade libsamba-credentials-develUpgrade libsamba-policy0-python3Upgrade libtalloc2-x86Upgrade libsmbclient0Upgrade samba-develUpgrade samba-x86Upgrade libsmbconf0Upgrade libndr-standard0-32bitUpgrade samba-32bitUpgrade libdcerpc-samr0-32bitUpgrade samba-winbindUpgrade libndr1Upgrade libgensec0Upgrade libtdb-develUpgrade samba-docUpgrade libsamba-util0Upgrade libsmbclient0-32bitUpgrade libdcerpc-develUpgrade libsmbldap-develUpgrade libndr-krb5pac0-32bitUpgrade samba-cephUpgrade libsmbconf0-32bitUpgrade libdcerpc-samr-develUpgrade libsmbclient-raw0Upgrade samba-libs-32bitUpgrade sambaUpgrade libnetapi-develUpgrade libndr-nbt0Upgrade libsamdb0Upgrade libnetapi0Upgrade samba-libsUpgrade libdcerpc-binding0Upgrade libtevent-util0-32bitUpgrade libsamba-util-develUpgrade libdcerpc0-32bitUpgrade libsamba-policy-develUpgrade libtdb1-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-credentials0-32bitUpgrade libsmbsharemodes-develUpgrade libndr-nbt-develUpgrade ctdb-testsUpgrade samba-libs-python3Upgrade libsamba-policy0-32bitUpgrade libsamba-passdb-develUpgrade libsamdb-develUpgrade libndr0-32bitUpgrade libtalloc-develUpgrade libndr-krb5pac-develUpgrade samba-python3Upgrade ctdb-pcp-pmdaUpgrade libdcerpc-atsvc0Upgrade libsamba-policy-python3-develUpgrade libdcerpc0Upgrade libnetapi0-32bitUpgrade libtevent0-32bitUpgrade libdcerpc-samr0Upgrade samba-dsdb-modulesUpgrade libtdb1-x86Upgrade libsmbclient0-x86Upgrade samba-clientUpgrade libsamdb0-32bitUpgrade libtevent-develUpgrade libndr-krb5pac0Upgrade libndr-standard-develUpgrade libsamba-passdb0Upgrade libdcerpc-binding0-32bitUpgrade samba-winbind-x86Upgrade libndr1-32bitUpgrade libsamba-credentials0Upgrade libtevent0-x86Upgrade libregistry0Upgrade libldb1Upgrade libwbclient0-32bitUpgrade samba-libs-python3-32bitUpgrade samba-client-32bitUpgrade libsmbldap0Upgrade samba-testUpgrade libsamba-hostconfig-develUpgrade libndr-develUpgrade libtdb1Upgrade libsamba-errors-develUpgrade libndr-nbt0-32bitUpgrade samba-krb-printingUpgrade libtalloc2-32bitUpgrade libsmbconf-develUpgrade libgensec0-32bitUpgrade libndr-standard0Upgrade libsmbclient-raw0-32bitUpgrade samba-kdcUpgrade libsamba-policy0 | Aug 15, 2018 | Aug 14, 2018 |
| Ubuntu | — | Upgrade libsmbclientUpgrade samba | Aug 17, 2018 | Aug 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub