A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directories outside the share.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Nov 8, 2019 | Sep 3, 2019 |
| Amazon Linux Ami 2 | — | Upgrade samba-krb5-printingUpgrade samba-pidlUpgrade samba-testUpgrade samba-clientUpgrade samba-test-libsUpgrade libwbclientUpgrade samba-commonUpgrade samba-dcUpgrade samba-libsUpgrade samba-vfs-glusterfsUpgrade samba-dc-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-client-libsUpgrade sambaUpgrade ctdbUpgrade libwbclient-develUpgrade samba-debuginfoUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-python-testUpgrade samba-pythonUpgrade samba-winbindUpgrade libsmbclient-develUpgrade libsmbclientUpgrade ctdb-testsUpgrade samba-devel | Jul 21, 2020 | Sep 3, 2019 |
| Amazon_linux | — | Upgrade samba | Sep 1, 2020 | Sep 1, 2019 |
| Centos_linux | — | Upgrade samba-dcUpgrade libwbclient-develUpgrade openchangeUpgrade samba-test-libs-debuginfoUpgrade samba-libsUpgrade ctdbUpgrade ctdb-debuginfoUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade samba-commonUpgrade samba-client-libsUpgrade ctdb-testsUpgrade samba-libs-debuginfoUpgrade samba-debugsourceUpgrade libsmbclientUpgrade sambaUpgrade samba-winbind-modules-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-client-debuginfoUpgrade python3-samba-testUpgrade samba-winbindUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-vfs-glusterfsUpgrade samba-winbind-modulesUpgrade samba-develUpgrade libwbclient-debuginfoUpgrade samba-dc-libsUpgrade samba-debuginfoUpgrade samba-common-libsUpgrade libsmbclient-develUpgrade ctdb-tests-debuginfoUpgrade openchange-debugsourceUpgrade samba-winbind-debuginfoUpgrade samba-test-libsUpgrade libwbclientUpgrade samba-testUpgrade samba-common-tools-debuginfoUpgrade python3-sambaUpgrade samba-pidlUpgrade samba-krb5-printingUpgrade openchange-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libs-debuginfoUpgrade samba-python-testUpgrade samba-winbind-clients-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-clientUpgrade python3-samba-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-common-toolsUpgrade samba-test-debuginfoUpgrade openchange-client-debuginfo | Apr 1, 2020 | Sep 3, 2019 |
| Debian | — | Upgrade samba | Sep 5, 2019 | Sep 3, 2019 |
| Freebsd | — | Upgrade samba410 | Sep 4, 2019 | Sep 3, 2019 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Sep 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade python2-samba-testUpgrade samba-testUpgrade libsmbclientUpgrade samba-dc-libsUpgrade ctdb-testsUpgrade samba-pidlUpgrade samba-winbind-krb5-locatorUpgrade sambaUpgrade samba-commonUpgrade samba-krb5-printingUpgrade samba-test-libsUpgrade samba-client-libsUpgrade samba-winbindUpgrade python3-samba-testUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-libsUpgrade python2-sambaUpgrade ctdbUpgrade python3-sambaUpgrade samba-client | Nov 19, 2019 | Sep 3, 2019 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jun 16, 2021 | Sep 3, 2019 |
| Oracle_linux | — | Upgrade libsmbclientUpgrade samba-test-libsUpgrade samba-develUpgrade samba-clientUpgrade samba-libsUpgrade libwbclient-develUpgrade libsmbclient-develUpgrade samba-common-libsUpgrade samba-winbind-krb5-locatorUpgrade python3-samba-testUpgrade openchangeUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade samba-dc-libsUpgrade sambaUpgrade samba-python-testUpgrade samba-vfs-glusterfsUpgrade samba-testUpgrade samba-client-libsUpgrade samba-pidlUpgrade libwbclientUpgrade ctdbUpgrade samba-krb5-printingUpgrade ctdb-testsUpgrade samba-dcUpgrade samba-commonUpgrade python3-samba | Oct 5, 2022 | Sep 3, 2019 |
| Redhat_linux | — | Upgrade ctdb-tests-debuginfoUpgrade samba-test-libsUpgrade samba-winbind-modules-debuginfoUpgrade samba-libsUpgrade samba-pythonUpgrade openchangeUpgrade openchange-debugsourceUpgrade samba-krb5-printingUpgrade libwbclient-debuginfoUpgrade sambaUpgrade libsmbclient-debuginfoUpgrade samba-debuginfoUpgrade python3-samba-testUpgrade libwbclientUpgrade samba-libs-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-python-testUpgrade samba-dcUpgrade samba-commonUpgrade samba-test-debuginfoUpgrade samba-winbind-modulesUpgrade libsmbclient-develUpgrade samba-vfs-glusterfsUpgrade samba-test-libs-debuginfoUpgrade python3-sambaUpgrade samba-winbindUpgrade ctdbUpgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade ctdb-debuginfoUpgrade samba-pidlUpgrade samba-develUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-debugsourceUpgrade libwbclient-develUpgrade libsmbclientUpgrade samba-client-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-client-libs-debuginfoUpgrade openchange-client-debuginfoUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-common-tools-debuginfoUpgrade samba-client-libsUpgrade ctdb-testsUpgrade openchange-debuginfoUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade python3-samba-debuginfoUpgrade samba-test | Apr 1, 2020 | Sep 3, 2019 |
| Samba | — | Upgrade to Samba 4.10.8 or later.Upgrade to Samba 4.11.0 or later.Upgrade to Samba 4.9.13 or later. | Sep 6, 2019 | Sep 3, 2019 |
| Suse | — | Upgrade libdcerpc-binding0-32bitUpgrade libdcerpc-samr-develUpgrade libndr-develUpgrade samba-core-develUpgrade samba-ad-dc-32bitUpgrade libsamba-policy-develUpgrade libsamba-errors0Upgrade libndr1-32bitUpgrade libnetapi0-32bitUpgrade libldb1Upgrade libsamba-policy0Upgrade libndr-standard0-32bitUpgrade libsamba-policy0-32bitUpgrade libldb-develUpgrade libdcerpc-samr0Upgrade libndr-nbt0-32bitUpgrade libsmbclient0-32bitUpgrade samba-dsdb-modulesUpgrade samba-ad-dcUpgrade libsamba-policy-python3-develUpgrade samba-libs-python3-32bitUpgrade libndr-krb5pac0Upgrade libndr-krb5pac-develUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-passdb0-32bitUpgrade samba-clientUpgrade libsamba-passdb0Upgrade libdcerpc0Upgrade libwbclient0-32bitUpgrade ctdb-pcp-pmdaUpgrade libsamba-credentials-develUpgrade libtevent-util0-32bitUpgrade libdcerpc-binding0Upgrade libsamdb0Upgrade samba-python3Upgrade libndr-nbt-develUpgrade libsamdb0-32bitUpgrade ctdb-testsUpgrade libwbclient-develUpgrade libdcerpc0-32bitUpgrade libsmbconf-develUpgrade libsmbldap-develUpgrade libnetapi-develUpgrade samba-winbind-32bitUpgrade libndr-standard-develUpgrade samba-libs-python3Upgrade libtevent-util-develUpgrade libdcerpc-samr0-32bitUpgrade python-ldbUpgrade libndr-krb5pac0-32bitUpgrade libsmbldap2-32bitUpgrade libsamba-hostconfig0Upgrade samba-libsUpgrade samba-cephUpgrade libsmbclient0Upgrade samba-testUpgrade samba-docUpgrade samba-client-32bitUpgrade libsamba-util0-32bitUpgrade libwbclient0Upgrade libnetapi0Upgrade libsmbldap2Upgrade libsamba-policy0-python3-32bitUpgrade samba-libs-32bitUpgrade libldb1-32bitUpgrade libndr-standard0Upgrade libndr0Upgrade libtevent-util0Upgrade samba-winbindUpgrade libdcerpc-develUpgrade ldb-toolsUpgrade libsamba-hostconfig-develUpgrade libsmbconf0-32bitUpgrade samba-libs-pythonUpgrade libsamdb-develUpgrade python-ldb-develUpgrade libndr1Upgrade libsamba-credentials0-32bitUpgrade sambaUpgrade libsamba-policy-python-develUpgrade ctdbUpgrade samba-libs-python-32bitUpgrade libsamba-errors-develUpgrade libndr0-32bitUpgrade libsmbclient-develUpgrade libsamba-util0Upgrade samba-pidlUpgrade libndr-nbt0Upgrade libsamba-util-develUpgrade samba-pythonUpgrade libsamba-credentials0Upgrade libsamba-errors0-32bitUpgrade libsamba-passdb-develUpgrade libsmbconf0Upgrade libsamba-policy0-python3 | Sep 18, 2019 | Sep 1, 2019 |
| Ubuntu | — | Upgrade samba | Sep 4, 2019 | Sep 1, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub