A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directories outside the share.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Nov 8, 2019 | Sep 3, 2019 |
| Amazon Linux Ami 2 | — | Upgrade samba-winbind-clientsUpgrade samba-python-testUpgrade ctdbUpgrade samba-winbindUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-modulesUpgrade samba-dc-libsUpgrade libsmbclientUpgrade samba-pythonUpgrade ctdb-testsUpgrade libsmbclient-develUpgrade libwbclient-develUpgrade sambaUpgrade samba-debuginfoUpgrade samba-common-toolsUpgrade samba-develUpgrade samba-client-libsUpgrade samba-common-libsUpgrade samba-libsUpgrade libwbclientUpgrade samba-vfs-glusterfsUpgrade samba-testUpgrade samba-clientUpgrade samba-test-libsUpgrade samba-krb5-printingUpgrade samba-commonUpgrade samba-pidlUpgrade samba-dc | Jul 21, 2020 | Sep 3, 2019 |
| Amazon_linux | — | Upgrade samba | Sep 1, 2020 | Sep 1, 2019 |
| Centos_linux | — | Upgrade samba-pythonUpgrade samba-client-libs-debuginfoUpgrade ctdb-tests-debuginfoUpgrade ctdb-debuginfoUpgrade samba-dcUpgrade openchange-debugsourceUpgrade samba-vfs-glusterfsUpgrade libsmbclientUpgrade sambaUpgrade python3-samba-testUpgrade samba-commonUpgrade samba-winbind-debuginfoUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade openchangeUpgrade samba-client-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-winbindUpgrade samba-libs-debuginfoUpgrade samba-libsUpgrade libwbclient-debuginfoUpgrade samba-common-libsUpgrade libsmbclient-develUpgrade libsmbclient-debuginfoUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-debugsourceUpgrade ctdb-testsUpgrade samba-debuginfoUpgrade samba-dc-libsUpgrade samba-winbind-modules-debuginfoUpgrade ctdbUpgrade samba-winbind-modulesUpgrade samba-develUpgrade libwbclient-develUpgrade python3-samba-debuginfoUpgrade samba-pidlUpgrade samba-test-libsUpgrade samba-common-toolsUpgrade samba-common-libs-debuginfoUpgrade libwbclientUpgrade openchange-client-debuginfoUpgrade samba-common-tools-debuginfoUpgrade openchange-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-test-debuginfoUpgrade samba-krb5-printingUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade python3-sambaUpgrade samba-testUpgrade samba-python-testUpgrade samba-winbind-clients-debuginfoUpgrade samba-winbind-krb5-locator-debuginfo | Apr 1, 2020 | Sep 3, 2019 |
| Debian | — | Upgrade samba | Sep 5, 2019 | Sep 3, 2019 |
| Freebsd | — | Upgrade samba410 | Sep 4, 2019 | Sep 3, 2019 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Sep 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade ctdb-testsUpgrade samba-testUpgrade samba-dc-libsUpgrade python2-samba-testUpgrade samba-pidlUpgrade python2-sambaUpgrade samba-krb5-printingUpgrade samba-commonUpgrade samba-libsUpgrade libwbclientUpgrade samba-winbindUpgrade python3-samba-testUpgrade ctdbUpgrade python3-sambaUpgrade samba-winbind-clientsUpgrade samba-test-libsUpgrade samba-clientUpgrade sambaUpgrade samba-winbind-krb5-locatorUpgrade samba-client-libsUpgrade samba-common-tools | Nov 19, 2019 | Sep 3, 2019 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jun 16, 2021 | Sep 3, 2019 |
| Oracle_linux | — | Upgrade samba-winbind-krb5-locatorUpgrade samba-common-libsUpgrade samba-dc-libsUpgrade libwbclient-develUpgrade libsmbclient-develUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade openchangeUpgrade samba-develUpgrade samba-libsUpgrade sambaUpgrade samba-test-libsUpgrade samba-clientUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade python3-samba-testUpgrade ctdbUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-commonUpgrade samba-krb5-printingUpgrade samba-python-testUpgrade samba-pidlUpgrade samba-testUpgrade samba-vfs-glusterfsUpgrade samba-dcUpgrade ctdb-testsUpgrade python3-samba | Oct 5, 2022 | Sep 3, 2019 |
| Redhat_linux | — | Upgrade libwbclient-develUpgrade samba-common-libs-debuginfoUpgrade samba-common-libsUpgrade samba-krb5-printing-debuginfoUpgrade libsmbclientUpgrade openchange-client-debuginfoUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade python3-samba-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-client-libs-debuginfoUpgrade ctdb-testsUpgrade openchange-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-client-debuginfoUpgrade samba-testUpgrade samba-test-libsUpgrade samba-pidlUpgrade ctdb-tests-debuginfoUpgrade samba-winbind-clientsUpgrade samba-test-libs-debuginfoUpgrade libsmbclient-develUpgrade samba-winbind-modules-debuginfoUpgrade samba-develUpgrade libsmbclient-debuginfoUpgrade samba-libsUpgrade libwbclient-debuginfoUpgrade samba-dc-libsUpgrade samba-winbindUpgrade samba-pythonUpgrade samba-dcUpgrade samba-vfs-glusterfsUpgrade samba-libs-debuginfoUpgrade samba-krb5-printingUpgrade openchangeUpgrade samba-test-debuginfoUpgrade libwbclientUpgrade samba-winbind-debuginfoUpgrade samba-vfs-glusterfs-debuginfoUpgrade ctdb-debuginfoUpgrade ctdbUpgrade sambaUpgrade samba-debuginfoUpgrade openchange-debugsourceUpgrade samba-debugsourceUpgrade python3-samba-testUpgrade samba-commonUpgrade python3-sambaUpgrade samba-python-testUpgrade samba-winbind-modules | Apr 1, 2020 | Sep 3, 2019 |
| Samba | — | Upgrade to Samba 4.11.0 or later.Upgrade to Samba 4.9.13 or later.Upgrade to Samba 4.10.8 or later. | Sep 6, 2019 | Sep 3, 2019 |
| Suse | — | Upgrade samba-clientUpgrade libndr-krb5pac-develUpgrade libndr-krb5pac0Upgrade samba-ad-dcUpgrade libdcerpc-binding0Upgrade libsamba-passdb0Upgrade libdcerpc0Upgrade samba-libs-python3-32bitUpgrade samba-core-develUpgrade libldb-develUpgrade libndr-nbt-develUpgrade libtevent-util0-32bitUpgrade libsamba-errors0Upgrade libsamba-policy-develUpgrade libndr-develUpgrade libndr1-32bitUpgrade libsamba-policy0-32bitUpgrade samba-dsdb-modulesUpgrade libdcerpc-samr-develUpgrade libdcerpc-samr0Upgrade libsamba-hostconfig0-32bitUpgrade libsamba-passdb0-32bitUpgrade libndr-nbt0-32bitUpgrade libwbclient0-32bitUpgrade libldb1Upgrade ctdb-pcp-pmdaUpgrade libsamba-credentials-develUpgrade libsamba-policy-python3-develUpgrade libndr-standard0-32bitUpgrade ctdb-testsUpgrade libnetapi0-32bitUpgrade libsamdb0Upgrade libsamba-policy0Upgrade libdcerpc-binding0-32bitUpgrade samba-python3Upgrade libdcerpc0-32bitUpgrade libsamdb0-32bitUpgrade libsmbclient0-32bitUpgrade libwbclient-develUpgrade samba-ad-dc-32bitUpgrade python-ldbUpgrade libsamba-errors0-32bitUpgrade libndr0Upgrade samba-libs-pythonUpgrade libsamdb-develUpgrade libsamba-policy-python-develUpgrade libsmbconf0Upgrade libtevent-util-develUpgrade ldb-toolsUpgrade libsamba-passdb-develUpgrade samba-pidlUpgrade samba-winbindUpgrade libsamba-hostconfig-develUpgrade sambaUpgrade libsamba-policy0-python3-32bitUpgrade samba-cephUpgrade libsmbldap-develUpgrade libsmbclient0Upgrade libldb1-32bitUpgrade python-ldb-develUpgrade libnetapi-develUpgrade libdcerpc-develUpgrade libsmbldap2Upgrade libsamba-policy0-python3Upgrade libnetapi0Upgrade samba-libs-python3Upgrade libndr-krb5pac0-32bitUpgrade libsamba-errors-develUpgrade libndr0-32bitUpgrade samba-libs-python-32bitUpgrade samba-docUpgrade libsmbclient-develUpgrade samba-client-32bitUpgrade libsmbldap2-32bitUpgrade libsamba-util0Upgrade ctdbUpgrade libndr-standard0Upgrade samba-libs-32bitUpgrade libtevent-util0Upgrade samba-testUpgrade libsmbconf0-32bitUpgrade libdcerpc-samr0-32bitUpgrade libwbclient0Upgrade samba-libsUpgrade libsamba-util-develUpgrade libsamba-hostconfig0Upgrade libndr-nbt0Upgrade libsamba-credentials0-32bitUpgrade libndr1Upgrade libsmbconf-develUpgrade samba-winbind-32bitUpgrade samba-pythonUpgrade libsamba-util0-32bitUpgrade libsamba-credentials0Upgrade libndr-standard-devel | Sep 18, 2019 | Sep 1, 2019 |
| Ubuntu | — | Upgrade samba | Sep 4, 2019 | Sep 1, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub