A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 24, 2018 | Aug 22, 2018 |
| Amazon Linux Ami 2 | — | Upgrade samba-pidlUpgrade libsmbclientUpgrade ctdbUpgrade libwbclientUpgrade samba-client-libsUpgrade sambaUpgrade samba-pythonUpgrade samba-develUpgrade samba-debuginfoUpgrade libwbclient-develUpgrade samba-winbindUpgrade libsmbclient-develUpgrade samba-dcUpgrade ctdb-testsUpgrade samba-winbind-modulesUpgrade samba-krb5-printingUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-vfs-glusterfsUpgrade samba-common-toolsUpgrade samba-libsUpgrade samba-test-libsUpgrade samba-dc-libsUpgrade samba-testUpgrade samba-python-testUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libs | Apr 27, 2020 | Aug 22, 2018 |
| Amazon_linux | — | Upgrade samba | Jan 25, 2019 | Aug 14, 2018 |
| Centos_linux | — | Upgrade libwbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-libsUpgrade libwbclient-develUpgrade samba-common-toolsUpgrade samba-krb5-printingUpgrade libsmbclient-develUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-dcUpgrade samba-dc-libsUpgrade samba-testUpgrade samba-commonUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-winbindUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-python-testUpgrade samba-pythonUpgrade samba-develUpgrade samba-debuginfoUpgrade samba-vfs-glusterfsUpgrade samba-pidlUpgrade samba-test-libs | Aug 28, 2019 | Aug 22, 2018 |
| Debian | — | Upgrade samba | Aug 15, 2018 | Aug 14, 2018 |
| Freebsd | — | Upgrade samba48Upgrade samba47Upgrade samba46 | Aug 15, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Aug 22, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-winbind-clientsUpgrade sambaUpgrade samba-winbindUpgrade samba-commonUpgrade samba-pythonUpgrade samba-libs | Apr 2, 2019 | Aug 22, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-commonUpgrade samba-libsUpgrade libwbclientUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade libsmbclientUpgrade samba-pythonUpgrade sambaUpgrade samba-winbind | May 7, 2019 | Aug 22, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsmbclientUpgrade samba-libsUpgrade samba-winbindUpgrade samba-common-libsUpgrade sambaUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade samba-common | Apr 3, 2019 | Aug 22, 2018 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4 | Oct 19, 2018 | Aug 22, 2018 |
| Oracle_linux | — | Upgrade samba-libsUpgrade samba-winbindUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-krb5-printingUpgrade ctdb-testsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade sambaUpgrade samba-develUpgrade libwbclientUpgrade libsmbclient-develUpgrade samba-vfs-glusterfsUpgrade libsmbclientUpgrade samba-test-libsUpgrade samba-commonUpgrade libwbclient-develUpgrade ctdbUpgrade samba-python-testUpgrade samba-testUpgrade samba-pidlUpgrade samba-common-libsUpgrade samba-dc-libsUpgrade samba-dc | Nov 6, 2018 | Aug 16, 2018 |
| Redhat_linux | — | Upgrade samba-commonUpgrade samba-common-libsUpgrade samba-develUpgrade samba-pidlUpgrade libsmbclientUpgrade samba-vfs-glusterfsUpgrade samba-debuginfoUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade sambaUpgrade libwbclient-develUpgrade samba-libsUpgrade samba-pythonUpgrade libsmbclient-develUpgrade samba-winbindUpgrade samba-python-testUpgrade samba-client-libsUpgrade samba-dcUpgrade samba-krb5-printingUpgrade samba-testUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade samba-dc-libsUpgrade libwbclientUpgrade samba-client | Oct 31, 2018 | Aug 22, 2018 |
| Samba | — | Upgrade to Samba version 4.8.4Upgrade to Samba version 4.6.16Upgrade to Samba version 4.7.9 | Aug 15, 2018 | Aug 15, 2018 |
| Suse | — | Upgrade libsmbldap-develUpgrade libsamba-util0-32bitUpgrade sambaUpgrade libsmbconf0Upgrade libsamba-hostconfig0-32bitUpgrade ldapsmbUpgrade libtalloc2-x86Upgrade libtevent-util0Upgrade libsmbclient0Upgrade samba-pythonUpgrade samba-develUpgrade libdcerpc-samr0-32bitUpgrade libsamdb0Upgrade samba-core-develUpgrade libsamba-policy-develUpgrade libsamba-util0Upgrade samba-kdc-32bitUpgrade samba-x86Upgrade libdcerpc-samr-develUpgrade libnetapi-develUpgrade libndr-nbt0Upgrade libndr-standard0-32bitUpgrade libsamba-credentials-develUpgrade libndr1Upgrade libsmbclient0-32bitUpgrade samba-winbindUpgrade libdcerpc-develUpgrade libtevent0Upgrade libtdb1-32bitUpgrade libndr-nbt-develUpgrade samba-libs-32bitUpgrade samba-32bitUpgrade libsamba-errors0Upgrade libtalloc2Upgrade libtevent-util0-32bitUpgrade samba-client-x86Upgrade libdcerpc0-32bitUpgrade samba-libsUpgrade libsamba-credentials0-32bitUpgrade libsamba-errors0-32bitUpgrade libsmbconf0-32bitUpgrade libnetapi0Upgrade libsmbldap0-32bitUpgrade libndr-krb5pac0-32bitUpgrade samba-winbind-32bitUpgrade libsamba-passdb0-32bitUpgrade libtdb-develUpgrade samba-docUpgrade samba-cephUpgrade libsmbclient-raw0Upgrade ctdb-testsUpgrade libsamba-util-develUpgrade libgensec0Upgrade libtevent-util-develUpgrade libdcerpc-binding0Upgrade samba-pidlUpgrade libwbclient0Upgrade libwbclient-develUpgrade libsmbclient-develUpgrade libsmbldap2-32bitUpgrade libsmbsharemodes0Upgrade libsmbldap2Upgrade libndr0Upgrade ctdbUpgrade libsamba-policy0-python3Upgrade libwbclient0-x86Upgrade libsamdb-develUpgrade libldb-develUpgrade samba-libs-python3Upgrade ctdb-pcp-pmdaUpgrade libtevent0-x86Upgrade libregistry0Upgrade libnetapi0-32bitUpgrade libndr-standard-develUpgrade libtdb1Upgrade libsamba-credentials0Upgrade samba-winbind-x86Upgrade libsamba-hostconfig0Upgrade libndr0-32bitUpgrade libsamba-passdb0Upgrade samba-python3Upgrade libsmbsharemodes-develUpgrade libwbclient0-32bitUpgrade samba-client-32bitUpgrade libsmbldap0Upgrade samba-testUpgrade libsamba-hostconfig-develUpgrade samba-libs-python3-32bitUpgrade libtevent0-32bitUpgrade libsamba-policy0Upgrade libndr-krb5pac0Upgrade libtalloc-develUpgrade libndr-develUpgrade libldb1Upgrade samba-kdcUpgrade libsmbclient0-x86Upgrade libtdb1-x86Upgrade samba-dsdb-modulesUpgrade libdcerpc-atsvc0Upgrade libdcerpc0Upgrade libdcerpc-binding0-32bitUpgrade libndr1-32bitUpgrade samba-krb-printingUpgrade libsamba-policy-python3-develUpgrade libsamba-policy0-32bitUpgrade libndr-nbt0-32bitUpgrade libsamba-errors-develUpgrade libtalloc2-32bitUpgrade libndr-krb5pac-develUpgrade samba-clientUpgrade libdcerpc-samr0Upgrade libsmbclient-raw0-32bitUpgrade libndr-standard0Upgrade libtevent-develUpgrade libsamba-passdb-develUpgrade libsamdb0-32bitUpgrade libsmbconf-develUpgrade libgensec0-32bit | Aug 15, 2018 | Aug 14, 2018 |
| Ubuntu | — | Upgrade sambaUpgrade libsmbclient | Aug 17, 2018 | Aug 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub