A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 24, 2018 | Aug 22, 2018 |
| Amazon Linux Ami 2 | — | Upgrade libsmbclient-develUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade samba-debuginfoUpgrade ctdb-testsUpgrade samba-pidlUpgrade libwbclientUpgrade libsmbclientUpgrade ctdbUpgrade sambaUpgrade samba-dcUpgrade libwbclient-develUpgrade samba-winbindUpgrade samba-develUpgrade samba-pythonUpgrade samba-python-testUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-vfs-glusterfsUpgrade samba-libsUpgrade samba-commonUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-testUpgrade samba-dc-libsUpgrade samba-test-libsUpgrade samba-winbind-clientsUpgrade samba-krb5-printing | Apr 27, 2020 | Aug 22, 2018 |
| Amazon_linux | — | Upgrade samba | Jan 25, 2019 | Aug 14, 2018 |
| Centos_linux | — | Upgrade samba-dc-libsUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba-pythonUpgrade samba-test-libsUpgrade samba-dcUpgrade libsmbclientUpgrade samba-pidlUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-develUpgrade samba-testUpgrade samba-winbind-modulesUpgrade samba-vfs-glusterfsUpgrade sambaUpgrade samba-python-testUpgrade samba-debuginfoUpgrade libwbclientUpgrade libwbclient-develUpgrade samba-winbind-krb5-locatorUpgrade samba-krb5-printingUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-clientUpgrade libsmbclient-develUpgrade samba-common-tools | Aug 28, 2019 | Aug 22, 2018 |
| Debian | — | Upgrade samba | Aug 15, 2018 | Aug 14, 2018 |
| Freebsd | — | Upgrade samba48Upgrade samba46Upgrade samba47 | Aug 15, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Aug 22, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libwbclientUpgrade samba-commonUpgrade samba-libsUpgrade samba-pythonUpgrade sambaUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-winbind-modules | Apr 2, 2019 | Aug 22, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsmbclientUpgrade sambaUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-libsUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-clientUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-winbind-clients | May 7, 2019 | Aug 22, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-libsUpgrade samba-common-toolsUpgrade sambaUpgrade samba-common-libsUpgrade samba-pythonUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade libwbclient | Apr 3, 2019 | Aug 22, 2018 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4 | Oct 19, 2018 | Aug 22, 2018 |
| Oracle_linux | — | Upgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-develUpgrade samba-libsUpgrade samba-krb5-printingUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade ctdb-testsUpgrade libwbclientUpgrade libsmbclient-develUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade samba-pythonUpgrade sambaUpgrade ctdbUpgrade samba-dc-libsUpgrade samba-vfs-glusterfsUpgrade samba-python-testUpgrade samba-common-libsUpgrade samba-pidlUpgrade samba-testUpgrade samba-test-libsUpgrade samba-dcUpgrade samba-commonUpgrade libsmbclientUpgrade libwbclient-devel | Nov 6, 2018 | Aug 16, 2018 |
| Redhat_linux | — | Upgrade sambaUpgrade samba-commonUpgrade samba-debuginfoUpgrade samba-develUpgrade samba-pidlUpgrade samba-python-testUpgrade samba-winbindUpgrade samba-pythonUpgrade libsmbclient-develUpgrade samba-common-libsUpgrade libwbclient-develUpgrade libsmbclientUpgrade samba-vfs-glusterfsUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade samba-dcUpgrade samba-winbind-modulesUpgrade samba-krb5-printingUpgrade samba-clientUpgrade libwbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade samba-dc-libsUpgrade samba-common-toolsUpgrade samba-test | Oct 31, 2018 | Aug 22, 2018 |
| Samba | — | Upgrade to Samba version 4.8.4Upgrade to Samba version 4.6.16Upgrade to Samba version 4.7.9 | Aug 15, 2018 | Aug 15, 2018 |
| Suse | — | Upgrade libsamba-errors0-32bitUpgrade samba-winbind-32bitUpgrade libsamba-util0-32bitUpgrade ctdb-pcp-pmdaUpgrade libsamba-passdb0-32bitUpgrade samba-core-develUpgrade libwbclient0-x86Upgrade libndr-standard0-32bitUpgrade libndr-nbt-develUpgrade samba-libsUpgrade libsamba-policy0-python3Upgrade libsmbclient0Upgrade libtevent-util0Upgrade samba-pythonUpgrade libsamba-hostconfig0Upgrade samba-libs-python3Upgrade libndr0Upgrade libdcerpc-samr0-32bitUpgrade ctdb-testsUpgrade libdcerpc-develUpgrade libsamba-util-develUpgrade libsmbsharemodes0Upgrade libtalloc2-x86Upgrade samba-winbindUpgrade libsmbclient-develUpgrade libsmbldap2Upgrade libtevent0Upgrade libsamdb0Upgrade samba-develUpgrade libsamba-policy-develUpgrade libsmbldap0-32bitUpgrade samba-32bitUpgrade libndr1Upgrade samba-libs-32bitUpgrade libsmbldap-develUpgrade libsamba-util0Upgrade libwbclient0Upgrade libnetapi0Upgrade libdcerpc0-32bitUpgrade samba-pidlUpgrade libsmbconf0Upgrade samba-kdc-32bitUpgrade libtevent-util-develUpgrade libdcerpc-binding0Upgrade libldb-develUpgrade libsmbclient-raw0Upgrade libsmbldap2-32bitUpgrade libwbclient-develUpgrade libgensec0Upgrade libtevent-util0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade samba-docUpgrade libnetapi-develUpgrade libsamba-errors0Upgrade libndr-krb5pac0-32bitUpgrade libsamba-credentials-develUpgrade samba-client-x86Upgrade libtdb-develUpgrade samba-cephUpgrade samba-x86Upgrade libdcerpc-samr-develUpgrade ctdbUpgrade libsmbconf0-32bitUpgrade libtalloc2Upgrade libsamba-credentials0-32bitUpgrade sambaUpgrade ldapsmbUpgrade libtdb1-32bitUpgrade libndr-nbt0Upgrade libsmbclient0-32bitUpgrade samba-kdcUpgrade libndr-develUpgrade libtdb1-x86Upgrade samba-client-32bitUpgrade samba-testUpgrade libsamba-hostconfig-develUpgrade libwbclient0-32bitUpgrade samba-libs-python3-32bitUpgrade libsmbldap0Upgrade libndr-krb5pac0Upgrade libsamba-policy-python3-develUpgrade libnetapi0-32bitUpgrade libdcerpc-atsvc0Upgrade libsamba-policy0Upgrade libsamdb-develUpgrade libndr-standard-develUpgrade libndr0-32bitUpgrade samba-clientUpgrade libtalloc2-32bitUpgrade samba-krb-printingUpgrade libsmbconf-develUpgrade libndr-nbt0-32bitUpgrade libsamba-passdb-develUpgrade libndr-standard0Upgrade samba-python3Upgrade libtdb1Upgrade libsamba-errors-develUpgrade libsamdb0-32bitUpgrade libsamba-policy0-32bitUpgrade libgensec0-32bitUpgrade libtalloc-develUpgrade libsmbclient-raw0-32bitUpgrade libsmbsharemodes-develUpgrade libdcerpc-samr0Upgrade libsamba-passdb0Upgrade libtevent0-x86Upgrade libldb1Upgrade libsamba-credentials0Upgrade libdcerpc-binding0-32bitUpgrade libndr1-32bitUpgrade samba-winbind-x86Upgrade libdcerpc0Upgrade libregistry0Upgrade libndr-krb5pac-develUpgrade libsmbclient0-x86Upgrade libtevent0-32bitUpgrade libtevent-develUpgrade samba-dsdb-modules | Aug 15, 2018 | Aug 14, 2018 |
| Ubuntu | — | Upgrade sambaUpgrade libsmbclient | Aug 17, 2018 | Aug 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub