A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directories outside the share.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Nov 8, 2019 | Sep 3, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libsmbclient-develUpgrade samba-common-toolsUpgrade samba-winbindUpgrade libwbclient-develUpgrade ctdbUpgrade sambaUpgrade samba-python-testUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-debuginfoUpgrade samba-dc-libsUpgrade ctdb-testsUpgrade samba-develUpgrade samba-client-libsUpgrade samba-clientUpgrade libwbclientUpgrade samba-commonUpgrade samba-testUpgrade samba-pidlUpgrade samba-libsUpgrade samba-vfs-glusterfsUpgrade samba-dcUpgrade samba-test-libsUpgrade samba-krb5-printing | Jul 21, 2020 | Sep 3, 2019 |
| Amazon_linux | — | Upgrade samba | Sep 1, 2020 | Sep 1, 2019 |
| Centos_linux | — | Upgrade openchangeUpgrade samba-winbind-modules-debuginfoUpgrade samba-client-libsUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-vfs-glusterfsUpgrade sambaUpgrade samba-client-debuginfoUpgrade samba-common-libsUpgrade libwbclient-debuginfoUpgrade libsmbclient-debuginfoUpgrade libwbclient-develUpgrade ctdb-testsUpgrade samba-commonUpgrade samba-debugsourceUpgrade samba-winbindUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-debuginfoUpgrade ctdb-tests-debuginfoUpgrade samba-libsUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade openchange-debugsourceUpgrade samba-test-libs-debuginfoUpgrade libsmbclient-develUpgrade samba-dc-libsUpgrade samba-winbind-debuginfoUpgrade samba-libs-debuginfoUpgrade ctdbUpgrade samba-develUpgrade python3-samba-testUpgrade samba-dcUpgrade ctdb-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-test-libsUpgrade samba-testUpgrade samba-common-libs-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-clientUpgrade python3-samba-debuginfoUpgrade samba-common-toolsUpgrade samba-common-tools-debuginfoUpgrade openchange-debuginfoUpgrade samba-test-debuginfoUpgrade python3-sambaUpgrade samba-krb5-printing-debuginfoUpgrade openchange-client-debuginfoUpgrade samba-pidlUpgrade samba-krb5-printingUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clients-debuginfoUpgrade samba-python-testUpgrade libwbclient | Apr 1, 2020 | Sep 3, 2019 |
| Debian | — | Upgrade samba | Sep 5, 2019 | Sep 3, 2019 |
| Freebsd | — | Upgrade samba410 | Sep 4, 2019 | Sep 3, 2019 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Sep 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-winbind-modulesUpgrade samba-dc-libsUpgrade samba-pidlUpgrade python2-samba-testUpgrade ctdb-testsUpgrade samba-testUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-commonUpgrade python3-samba-testUpgrade ctdbUpgrade samba-krb5-printingUpgrade sambaUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade samba-libsUpgrade libwbclientUpgrade samba-test-libsUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-winbindUpgrade python3-sambaUpgrade python2-samba | Nov 19, 2019 | Sep 3, 2019 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jun 16, 2021 | Sep 3, 2019 |
| Oracle_linux | — | Upgrade samba-common-toolsUpgrade libsmbclient-develUpgrade python3-samba-testUpgrade samba-winbindUpgrade samba-develUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-test-libsUpgrade samba-pythonUpgrade libwbclient-develUpgrade samba-winbind-modulesUpgrade samba-winbind-krb5-locatorUpgrade samba-libsUpgrade openchangeUpgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade samba-clientUpgrade sambaUpgrade samba-testUpgrade samba-dcUpgrade ctdb-testsUpgrade samba-vfs-glusterfsUpgrade python3-sambaUpgrade samba-commonUpgrade samba-pidlUpgrade samba-krb5-printingUpgrade ctdbUpgrade libwbclientUpgrade samba-python-testUpgrade samba-client-libs | Oct 5, 2022 | Sep 3, 2019 |
| Redhat_linux | — | Upgrade samba-client-libsUpgrade samba-krb5-printing-debuginfoUpgrade libwbclient-develUpgrade openchange-client-debuginfoUpgrade samba-common-tools-debuginfoUpgrade libsmbclientUpgrade openchange-debuginfoUpgrade samba-client-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-clientUpgrade ctdb-testsUpgrade python3-samba-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-common-toolsUpgrade samba-testUpgrade samba-winbind-clients-debuginfoUpgrade samba-common-libsUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade openchangeUpgrade samba-libs-debuginfoUpgrade samba-pidlUpgrade sambaUpgrade openchange-debugsourceUpgrade samba-winbind-debuginfoUpgrade samba-test-debuginfoUpgrade libsmbclient-develUpgrade samba-vfs-glusterfs-debuginfoUpgrade ctdb-debuginfoUpgrade samba-vfs-glusterfsUpgrade samba-dcUpgrade ctdbUpgrade libsmbclient-debuginfoUpgrade samba-dc-libsUpgrade libwbclientUpgrade samba-winbind-modules-debuginfoUpgrade python3-samba-testUpgrade samba-debuginfoUpgrade python3-sambaUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade samba-test-libsUpgrade samba-python-testUpgrade samba-libsUpgrade ctdb-tests-debuginfoUpgrade samba-test-libs-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-develUpgrade samba-krb5-printingUpgrade samba-debugsource | Apr 1, 2020 | Sep 3, 2019 |
| Samba | — | Upgrade to Samba 4.9.13 or later.Upgrade to Samba 4.10.8 or later.Upgrade to Samba 4.11.0 or later. | Sep 6, 2019 | Sep 3, 2019 |
| Suse | — | Upgrade python-ldb-develUpgrade libsamba-util0-32bitUpgrade libsamba-policy-python-develUpgrade libtevent-util-develUpgrade samba-libsUpgrade libsamba-util-develUpgrade samba-libs-pythonUpgrade libsamdb-develUpgrade samba-winbindUpgrade libwbclient0Upgrade libldb1-32bitUpgrade libsmbconf0-32bitUpgrade libtevent-util0Upgrade libnetapi0Upgrade samba-libs-32bitUpgrade libsamba-hostconfig-develUpgrade libndr-standard0Upgrade libdcerpc-develUpgrade libndr-standard-develUpgrade libdcerpc-samr0-32bitUpgrade libndr0Upgrade libsamba-hostconfig0Upgrade libsmbconf-develUpgrade libsmbldap2Upgrade samba-winbind-32bitUpgrade samba-pythonUpgrade libsmbldap-develUpgrade sambaUpgrade samba-libs-python3Upgrade libsmbconf0Upgrade libnetapi-develUpgrade samba-cephUpgrade ctdbUpgrade libsmbclient0Upgrade libsamba-policy0-python3Upgrade libsamba-policy0-python3-32bitUpgrade libsamba-credentials0Upgrade libndr-nbt0Upgrade libsmbldap2-32bitUpgrade samba-client-32bitUpgrade libsmbclient-develUpgrade samba-libs-python-32bitUpgrade libsamba-errors-develUpgrade libsamba-util0Upgrade samba-docUpgrade libndr0-32bitUpgrade libndr-krb5pac0-32bitUpgrade samba-pidlUpgrade python-ldbUpgrade samba-testUpgrade libsamba-errors0-32bitUpgrade ldb-toolsUpgrade libsamba-credentials0-32bitUpgrade libsamba-passdb-develUpgrade libndr1Upgrade samba-libs-python3-32bitUpgrade samba-ad-dc-32bitUpgrade libndr-standard0-32bitUpgrade samba-clientUpgrade libwbclient0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-errors0Upgrade libsamba-policy0-32bitUpgrade libndr-krb5pac0Upgrade ctdb-pcp-pmdaUpgrade libndr-nbt-develUpgrade samba-dsdb-modulesUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc0Upgrade libsamba-passdb0-32bitUpgrade libsamba-passdb0Upgrade libdcerpc-binding0Upgrade libtevent-util0-32bitUpgrade libwbclient-develUpgrade libsamdb0-32bitUpgrade libdcerpc0-32bitUpgrade samba-python3Upgrade ctdb-testsUpgrade libnetapi0-32bitUpgrade libsamdb0Upgrade libsamba-policy0Upgrade samba-core-develUpgrade samba-ad-dcUpgrade libndr1-32bitUpgrade libsamba-policy-python3-develUpgrade libndr-nbt0-32bitUpgrade libsmbclient0-32bitUpgrade libndr-krb5pac-develUpgrade libldb1Upgrade libdcerpc-samr0Upgrade libldb-develUpgrade libdcerpc-samr-develUpgrade libsamba-credentials-develUpgrade libndr-develUpgrade libsamba-policy-devel | Sep 18, 2019 | Sep 1, 2019 |
| Ubuntu | — | Upgrade samba | Sep 4, 2019 | Sep 1, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub