A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directories outside the share.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Nov 8, 2019 | Sep 3, 2019 |
| Amazon Linux Ami 2 | — | Upgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade ctdb-testsUpgrade libsmbclient-develUpgrade samba-pythonUpgrade libsmbclientUpgrade sambaUpgrade samba-debuginfoUpgrade samba-develUpgrade samba-client-libsUpgrade samba-dc-libsUpgrade libwbclient-develUpgrade ctdbUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba-python-testUpgrade samba-commonUpgrade samba-krb5-printingUpgrade samba-libsUpgrade samba-dcUpgrade libwbclientUpgrade samba-vfs-glusterfsUpgrade samba-clientUpgrade samba-test-libsUpgrade samba-pidlUpgrade samba-test | Jul 21, 2020 | Sep 3, 2019 |
| Amazon_linux | — | Upgrade samba | Sep 1, 2020 | Sep 1, 2019 |
| Centos_linux | — | Upgrade openchange-client-debuginfoUpgrade samba-clientUpgrade samba-common-libs-debuginfoUpgrade samba-pidlUpgrade openchange-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-krb5-printingUpgrade samba-common-tools-debuginfoUpgrade libwbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-testUpgrade samba-test-libsUpgrade python3-sambaUpgrade samba-winbind-clients-debuginfoUpgrade samba-common-toolsUpgrade samba-test-debuginfoUpgrade samba-python-testUpgrade samba-winbind-krb5-locator-debuginfoUpgrade ctdb-debuginfoUpgrade samba-client-libsUpgrade samba-libs-debuginfoUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-winbind-modules-debuginfoUpgrade python3-samba-testUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade samba-winbind-debuginfoUpgrade samba-test-libs-debuginfoUpgrade ctdbUpgrade libwbclient-develUpgrade samba-vfs-glusterfsUpgrade samba-develUpgrade samba-commonUpgrade samba-dcUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-client-debuginfoUpgrade samba-client-libs-debuginfoUpgrade libsmbclient-develUpgrade openchange-debugsourceUpgrade samba-debuginfoUpgrade ctdb-testsUpgrade libsmbclient-debuginfoUpgrade openchangeUpgrade samba-debugsourceUpgrade ctdb-tests-debuginfoUpgrade samba-dc-libsUpgrade samba-pythonUpgrade libwbclient-debuginfoUpgrade samba-common-libs | Apr 1, 2020 | Sep 3, 2019 |
| Debian | — | Upgrade samba | Sep 5, 2019 | Sep 3, 2019 |
| Freebsd | — | Upgrade samba410 | Sep 4, 2019 | Sep 3, 2019 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Sep 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libwbclientUpgrade samba-libsUpgrade python3-samba-testUpgrade samba-krb5-printingUpgrade python3-sambaUpgrade python2-sambaUpgrade samba-commonUpgrade samba-client-libsUpgrade samba-test-libsUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade ctdbUpgrade samba-winbindUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade sambaUpgrade samba-dc-libsUpgrade libsmbclientUpgrade python2-samba-testUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-pidlUpgrade ctdb-testsUpgrade samba-test | Nov 19, 2019 | Sep 3, 2019 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jun 16, 2021 | Sep 3, 2019 |
| Oracle_linux | — | Upgrade samba-krb5-printingUpgrade ctdbUpgrade samba-client-libsUpgrade samba-dcUpgrade samba-pidlUpgrade python3-sambaUpgrade samba-vfs-glusterfsUpgrade libwbclientUpgrade samba-testUpgrade samba-commonUpgrade ctdb-testsUpgrade samba-python-testUpgrade samba-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libsUpgrade sambaUpgrade libsmbclient-develUpgrade samba-winbindUpgrade samba-common-toolsUpgrade python3-samba-testUpgrade samba-pythonUpgrade samba-test-libsUpgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade samba-develUpgrade libwbclient-develUpgrade openchangeUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade libsmbclient | Oct 5, 2022 | Sep 3, 2019 |
| Redhat_linux | — | Upgrade libwbclientUpgrade samba-develUpgrade samba-pythonUpgrade samba-vfs-glusterfsUpgrade samba-libs-debuginfoUpgrade samba-debugsourceUpgrade ctdbUpgrade libsmbclient-debuginfoUpgrade samba-pidlUpgrade ctdb-tests-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-dc-libsUpgrade samba-commonUpgrade samba-python-testUpgrade ctdb-debuginfoUpgrade samba-winbind-modulesUpgrade openchangeUpgrade samba-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-krb5-printingUpgrade sambaUpgrade samba-test-libsUpgrade samba-dcUpgrade samba-test-libs-debuginfoUpgrade samba-winbind-clientsUpgrade samba-test-debuginfoUpgrade python3-sambaUpgrade openchange-debugsourceUpgrade samba-winbind-debuginfoUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-winbindUpgrade samba-libsUpgrade python3-samba-testUpgrade libsmbclient-develUpgrade python3-samba-debuginfoUpgrade openchange-client-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-common-toolsUpgrade samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-common-tools-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade libwbclient-develUpgrade libsmbclientUpgrade samba-client-libsUpgrade openchange-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-common-libs-debuginfoUpgrade ctdb-testsUpgrade samba-winbind-clients-debuginfoUpgrade samba-client-debuginfoUpgrade samba-clientUpgrade samba-common-libs | Apr 1, 2020 | Sep 3, 2019 |
| Samba | — | Upgrade to Samba 4.11.0 or later.Upgrade to Samba 4.10.8 or later.Upgrade to Samba 4.9.13 or later. | Sep 6, 2019 | Sep 3, 2019 |
| Suse | — | Upgrade libdcerpc-binding0Upgrade libsamba-hostconfig0-32bitUpgrade samba-libs-python3-32bitUpgrade libsamba-policy-develUpgrade libdcerpc0Upgrade libndr-nbt-develUpgrade libldb-develUpgrade samba-core-develUpgrade libtevent-util0-32bitUpgrade libndr-krb5pac0Upgrade libsamba-passdb0Upgrade samba-dsdb-modulesUpgrade libdcerpc-samr-develUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc-samr0Upgrade samba-ad-dcUpgrade libsamba-policy0-32bitUpgrade libndr-nbt0-32bitUpgrade libsmbclient0-32bitUpgrade libldb1Upgrade libndr-krb5pac-develUpgrade libsamba-policy-python3-develUpgrade libndr-standard0-32bitUpgrade samba-clientUpgrade samba-ad-dc-32bitUpgrade libndr-develUpgrade libndr1-32bitUpgrade libwbclient0-32bitUpgrade libsamba-credentials-develUpgrade ctdb-pcp-pmdaUpgrade libsamba-errors0Upgrade samba-python3Upgrade libsamdb0-32bitUpgrade ctdb-testsUpgrade libsamba-policy0Upgrade libdcerpc0-32bitUpgrade libnetapi0-32bitUpgrade libsamba-passdb0-32bitUpgrade libsamdb0Upgrade libwbclient-develUpgrade samba-libsUpgrade libsmbldap2Upgrade libsamba-credentials0-32bitUpgrade libsamba-util0Upgrade samba-libs-python-32bitUpgrade samba-cephUpgrade libnetapi-develUpgrade ctdbUpgrade libndr-standard-develUpgrade libsmbclient0Upgrade ldb-toolsUpgrade samba-winbindUpgrade libndr0-32bitUpgrade libtevent-util0Upgrade samba-pidlUpgrade libsamba-hostconfig0Upgrade libwbclient0Upgrade libnetapi0Upgrade libndr-nbt0Upgrade libsamba-util-develUpgrade libndr1Upgrade python-ldbUpgrade libsmbclient-develUpgrade libsamba-errors-develUpgrade samba-client-32bitUpgrade libndr-krb5pac0-32bitUpgrade samba-libs-32bitUpgrade libldb1-32bitUpgrade libndr0Upgrade libndr-standard0Upgrade samba-pythonUpgrade libsmbldap2-32bitUpgrade samba-docUpgrade libsmbconf0-32bitUpgrade libsmbconf0Upgrade libtevent-util-develUpgrade samba-libs-python3Upgrade libsamba-policy0-python3Upgrade libdcerpc-samr0-32bitUpgrade python-ldb-develUpgrade libsamdb-develUpgrade sambaUpgrade samba-testUpgrade libsamba-policy0-python3-32bitUpgrade libsamba-util0-32bitUpgrade libsmbldap-develUpgrade libsmbconf-develUpgrade libsamba-errors0-32bitUpgrade libsamba-passdb-develUpgrade libsamba-hostconfig-develUpgrade libsamba-credentials0Upgrade samba-winbind-32bitUpgrade libdcerpc-develUpgrade samba-libs-pythonUpgrade libsamba-policy-python-devel | Sep 18, 2019 | Sep 1, 2019 |
| Ubuntu | — | Upgrade samba | Sep 4, 2019 | Sep 1, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub