A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directories outside the share.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-samba | Nov 8, 2019 | Sep 3, 2019 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-ctdbamazon-linux-ami-2-upgrade-ctdb-testsamazon-linux-ami-2-upgrade-libsmbclientamazon-linux-ami-2-upgrade-libsmbclient-develamazon-linux-ami-2-upgrade-libwbclientamazon-linux-ami-2-upgrade-libwbclient-develamazon-linux-ami-2-upgrade-sambaamazon-linux-ami-2-upgrade-samba-clientamazon-linux-ami-2-upgrade-samba-client-libsamazon-linux-ami-2-upgrade-samba-commonamazon-linux-ami-2-upgrade-samba-common-libsamazon-linux-ami-2-upgrade-samba-common-toolsamazon-linux-ami-2-upgrade-samba-dcamazon-linux-ami-2-upgrade-samba-dc-libsamazon-linux-ami-2-upgrade-samba-debuginfoamazon-linux-ami-2-upgrade-samba-develamazon-linux-ami-2-upgrade-samba-krb5-printingamazon-linux-ami-2-upgrade-samba-libsamazon-linux-ami-2-upgrade-samba-pidlamazon-linux-ami-2-upgrade-samba-pythonamazon-linux-ami-2-upgrade-samba-python-testamazon-linux-ami-2-upgrade-samba-testamazon-linux-ami-2-upgrade-samba-test-libsamazon-linux-ami-2-upgrade-samba-vfs-glusterfsamazon-linux-ami-2-upgrade-samba-winbindamazon-linux-ami-2-upgrade-samba-winbind-clientsamazon-linux-ami-2-upgrade-samba-winbind-krb5-locatoramazon-linux-ami-2-upgrade-samba-winbind-modules | Jul 21, 2020 | Sep 3, 2019 | |
| Amazon_linux | — | amazon-linux-upgrade-samba | Sep 1, 2020 | Sep 1, 2019 |
| Centos_linux | — | centos-upgrade-ctdbcentos-upgrade-ctdb-debuginfocentos-upgrade-ctdb-testscentos-upgrade-ctdb-tests-debuginfocentos-upgrade-libsmbclientcentos-upgrade-libsmbclient-debuginfocentos-upgrade-libsmbclient-develcentos-upgrade-libwbclientcentos-upgrade-libwbclient-debuginfocentos-upgrade-libwbclient-develcentos-upgrade-openchangecentos-upgrade-openchange-client-debuginfocentos-upgrade-openchange-debuginfocentos-upgrade-openchange-debugsourcecentos-upgrade-python3-sambacentos-upgrade-python3-samba-debuginfocentos-upgrade-python3-samba-testcentos-upgrade-sambacentos-upgrade-samba-clientcentos-upgrade-samba-client-debuginfocentos-upgrade-samba-client-libscentos-upgrade-samba-client-libs-debuginfocentos-upgrade-samba-commoncentos-upgrade-samba-common-libscentos-upgrade-samba-common-libs-debuginfocentos-upgrade-samba-common-toolscentos-upgrade-samba-common-tools-debuginfocentos-upgrade-samba-dccentos-upgrade-samba-dc-libscentos-upgrade-samba-debuginfocentos-upgrade-samba-debugsourcecentos-upgrade-samba-develcentos-upgrade-samba-krb5-printingcentos-upgrade-samba-krb5-printing-debuginfocentos-upgrade-samba-libscentos-upgrade-samba-libs-debuginfocentos-upgrade-samba-pidlcentos-upgrade-samba-pythoncentos-upgrade-samba-python-testcentos-upgrade-samba-testcentos-upgrade-samba-test-debuginfocentos-upgrade-samba-test-libscentos-upgrade-samba-test-libs-debuginfocentos-upgrade-samba-vfs-glusterfscentos-upgrade-samba-vfs-glusterfs-debuginfocentos-upgrade-samba-winbindcentos-upgrade-samba-winbind-clientscentos-upgrade-samba-winbind-clients-debuginfocentos-upgrade-samba-winbind-debuginfocentos-upgrade-samba-winbind-krb5-locatorcentos-upgrade-samba-winbind-krb5-locator-debuginfocentos-upgrade-samba-winbind-modulescentos-upgrade-samba-winbind-modules-debuginfo | Apr 1, 2020 | Sep 3, 2019 |
| Debian | debian-upgrade-samba | Sep 5, 2019 | Sep 3, 2019 | |
| Freebsd | freebsd-upgrade-package-samba410 | Sep 4, 2019 | Sep 3, 2019 | |
| Gentoo Linux | gentoo-linux-upgrade-net-fs-samba | Mar 27, 2020 | Sep 3, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-ctdbhuawei-euleros-2_0_sp8-upgrade-ctdb-testshuawei-euleros-2_0_sp8-upgrade-libsmbclienthuawei-euleros-2_0_sp8-upgrade-libwbclienthuawei-euleros-2_0_sp8-upgrade-python2-sambahuawei-euleros-2_0_sp8-upgrade-python2-samba-testhuawei-euleros-2_0_sp8-upgrade-python3-sambahuawei-euleros-2_0_sp8-upgrade-python3-samba-testhuawei-euleros-2_0_sp8-upgrade-sambahuawei-euleros-2_0_sp8-upgrade-samba-clienthuawei-euleros-2_0_sp8-upgrade-samba-client-libshuawei-euleros-2_0_sp8-upgrade-samba-commonhuawei-euleros-2_0_sp8-upgrade-samba-common-libshuawei-euleros-2_0_sp8-upgrade-samba-common-toolshuawei-euleros-2_0_sp8-upgrade-samba-dc-libshuawei-euleros-2_0_sp8-upgrade-samba-krb5-printinghuawei-euleros-2_0_sp8-upgrade-samba-libshuawei-euleros-2_0_sp8-upgrade-samba-pidlhuawei-euleros-2_0_sp8-upgrade-samba-testhuawei-euleros-2_0_sp8-upgrade-samba-test-libshuawei-euleros-2_0_sp8-upgrade-samba-winbindhuawei-euleros-2_0_sp8-upgrade-samba-winbind-clientshuawei-euleros-2_0_sp8-upgrade-samba-winbind-krb5-locatorhuawei-euleros-2_0_sp8-upgrade-samba-winbind-modules | Nov 19, 2019 | Sep 3, 2019 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-library-samba-libsmbclient-4-11-6-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-service-network-samba-4-11-6-11-4-21-0-1-69-0 | Jun 16, 2021 | Sep 3, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-ctdboracle-linux-upgrade-ctdb-testsoracle-linux-upgrade-libsmbclientoracle-linux-upgrade-libsmbclient-develoracle-linux-upgrade-libwbclientoracle-linux-upgrade-libwbclient-develoracle-linux-upgrade-openchangeoracle-linux-upgrade-python3-sambaoracle-linux-upgrade-python3-samba-testoracle-linux-upgrade-sambaoracle-linux-upgrade-samba-clientoracle-linux-upgrade-samba-client-libsoracle-linux-upgrade-samba-commonoracle-linux-upgrade-samba-common-libsoracle-linux-upgrade-samba-common-toolsoracle-linux-upgrade-samba-dcoracle-linux-upgrade-samba-dc-libsoracle-linux-upgrade-samba-develoracle-linux-upgrade-samba-krb5-printingoracle-linux-upgrade-samba-libsoracle-linux-upgrade-samba-pidloracle-linux-upgrade-samba-pythonoracle-linux-upgrade-samba-python-testoracle-linux-upgrade-samba-testoracle-linux-upgrade-samba-test-libsoracle-linux-upgrade-samba-vfs-glusterfsoracle-linux-upgrade-samba-winbindoracle-linux-upgrade-samba-winbind-clientsoracle-linux-upgrade-samba-winbind-krb5-locatororacle-linux-upgrade-samba-winbind-modules | Oct 5, 2022 | Sep 3, 2019 |
| Redhat_linux | redhat-upgrade-ctdbredhat-upgrade-ctdb-debuginforedhat-upgrade-ctdb-testsredhat-upgrade-ctdb-tests-debuginforedhat-upgrade-libsmbclientredhat-upgrade-libsmbclient-debuginforedhat-upgrade-libsmbclient-develredhat-upgrade-libwbclientredhat-upgrade-libwbclient-debuginforedhat-upgrade-libwbclient-develredhat-upgrade-openchangeredhat-upgrade-openchange-client-debuginforedhat-upgrade-openchange-debuginforedhat-upgrade-openchange-debugsourceredhat-upgrade-python3-sambaredhat-upgrade-python3-samba-debuginforedhat-upgrade-python3-samba-testredhat-upgrade-sambaredhat-upgrade-samba-clientredhat-upgrade-samba-client-debuginforedhat-upgrade-samba-client-libsredhat-upgrade-samba-client-libs-debuginforedhat-upgrade-samba-commonredhat-upgrade-samba-common-libsredhat-upgrade-samba-common-libs-debuginforedhat-upgrade-samba-common-toolsredhat-upgrade-samba-common-tools-debuginforedhat-upgrade-samba-dcredhat-upgrade-samba-dc-libsredhat-upgrade-samba-debuginforedhat-upgrade-samba-debugsourceredhat-upgrade-samba-develredhat-upgrade-samba-krb5-printingredhat-upgrade-samba-krb5-printing-debuginforedhat-upgrade-samba-libsredhat-upgrade-samba-libs-debuginforedhat-upgrade-samba-pidlredhat-upgrade-samba-pythonredhat-upgrade-samba-python-testredhat-upgrade-samba-testredhat-upgrade-samba-test-debuginforedhat-upgrade-samba-test-libsredhat-upgrade-samba-test-libs-debuginforedhat-upgrade-samba-vfs-glusterfsredhat-upgrade-samba-vfs-glusterfs-debuginforedhat-upgrade-samba-winbindredhat-upgrade-samba-winbind-clientsredhat-upgrade-samba-winbind-clients-debuginforedhat-upgrade-samba-winbind-debuginforedhat-upgrade-samba-winbind-krb5-locatorredhat-upgrade-samba-winbind-krb5-locator-debuginforedhat-upgrade-samba-winbind-modulesredhat-upgrade-samba-winbind-modules-debuginfo | Apr 1, 2020 | Sep 3, 2019 | |
| Samba | samba-upgrade-4_9_13samba-upgrade-4_10_8samba-upgrade-4_11_0 | Sep 6, 2019 | Sep 3, 2019 | |
| Suse | — | suse-upgrade-ctdbsuse-upgrade-ctdb-pcp-pmdasuse-upgrade-ctdb-testssuse-upgrade-ldb-toolssuse-upgrade-libdcerpc-binding0suse-upgrade-libdcerpc-binding0-32bitsuse-upgrade-libdcerpc-develsuse-upgrade-libdcerpc-samr-develsuse-upgrade-libdcerpc-samr0suse-upgrade-libdcerpc-samr0-32bitsuse-upgrade-libdcerpc0suse-upgrade-libdcerpc0-32bitsuse-upgrade-libldb-develsuse-upgrade-libldb1suse-upgrade-libldb1-32bitsuse-upgrade-libndr-develsuse-upgrade-libndr-krb5pac-develsuse-upgrade-libndr-krb5pac0suse-upgrade-libndr-krb5pac0-32bitsuse-upgrade-libndr-nbt-develsuse-upgrade-libndr-nbt0suse-upgrade-libndr-nbt0-32bitsuse-upgrade-libndr-standard-develsuse-upgrade-libndr-standard0suse-upgrade-libndr-standard0-32bitsuse-upgrade-libndr0suse-upgrade-libndr0-32bitsuse-upgrade-libndr1suse-upgrade-libndr1-32bitsuse-upgrade-libnetapi-develsuse-upgrade-libnetapi0suse-upgrade-libnetapi0-32bitsuse-upgrade-libsamba-credentials-develsuse-upgrade-libsamba-credentials0suse-upgrade-libsamba-credentials0-32bitsuse-upgrade-libsamba-errors-develsuse-upgrade-libsamba-errors0suse-upgrade-libsamba-errors0-32bitsuse-upgrade-libsamba-hostconfig-develsuse-upgrade-libsamba-hostconfig0suse-upgrade-libsamba-hostconfig0-32bitsuse-upgrade-libsamba-passdb-develsuse-upgrade-libsamba-passdb0suse-upgrade-libsamba-passdb0-32bitsuse-upgrade-libsamba-policy-develsuse-upgrade-libsamba-policy-python-develsuse-upgrade-libsamba-policy-python3-develsuse-upgrade-libsamba-policy0suse-upgrade-libsamba-policy0-32bitsuse-upgrade-libsamba-policy0-python3suse-upgrade-libsamba-policy0-python3-32bitsuse-upgrade-libsamba-util-develsuse-upgrade-libsamba-util0suse-upgrade-libsamba-util0-32bitsuse-upgrade-libsamdb-develsuse-upgrade-libsamdb0suse-upgrade-libsamdb0-32bitsuse-upgrade-libsmbclient-develsuse-upgrade-libsmbclient0suse-upgrade-libsmbclient0-32bitsuse-upgrade-libsmbconf-develsuse-upgrade-libsmbconf0suse-upgrade-libsmbconf0-32bitsuse-upgrade-libsmbldap-develsuse-upgrade-libsmbldap2suse-upgrade-libsmbldap2-32bitsuse-upgrade-libtevent-util-develsuse-upgrade-libtevent-util0suse-upgrade-libtevent-util0-32bitsuse-upgrade-libwbclient-develsuse-upgrade-libwbclient0suse-upgrade-libwbclient0-32bitsuse-upgrade-python-ldbsuse-upgrade-python-ldb-develsuse-upgrade-sambasuse-upgrade-samba-ad-dcsuse-upgrade-samba-ad-dc-32bitsuse-upgrade-samba-cephsuse-upgrade-samba-clientsuse-upgrade-samba-client-32bitsuse-upgrade-samba-core-develsuse-upgrade-samba-docsuse-upgrade-samba-dsdb-modulessuse-upgrade-samba-libssuse-upgrade-samba-libs-32bitsuse-upgrade-samba-libs-pythonsuse-upgrade-samba-libs-python-32bitsuse-upgrade-samba-libs-python3suse-upgrade-samba-libs-python3-32bitsuse-upgrade-samba-pidlsuse-upgrade-samba-pythonsuse-upgrade-samba-python3suse-upgrade-samba-testsuse-upgrade-samba-winbindsuse-upgrade-samba-winbind-32bit | Sep 18, 2019 | Sep 1, 2019 |
| Ubuntu | ubuntu-upgrade-samba | Sep 4, 2019 | Sep 1, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub