A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directories outside the share.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Nov 8, 2019 | Sep 3, 2019 |
| Amazon Linux Ami 2 | — | Upgrade samba-libsUpgrade samba-dcUpgrade samba-krb5-printingUpgrade samba-pidlUpgrade samba-testUpgrade libwbclientUpgrade samba-test-libsUpgrade samba-commonUpgrade samba-clientUpgrade samba-vfs-glusterfsUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-develUpgrade ctdb-testsUpgrade samba-winbind-modulesUpgrade samba-python-testUpgrade libsmbclientUpgrade samba-client-libsUpgrade ctdbUpgrade samba-pythonUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libsUpgrade samba-winbindUpgrade libsmbclient-develUpgrade libwbclient-develUpgrade samba-dc-libsUpgrade samba-debuginfo | Jul 21, 2020 | Sep 3, 2019 |
| Amazon_linux | — | Upgrade samba | Sep 1, 2020 | Sep 1, 2019 |
| Centos_linux | — | Upgrade libsmbclient-develUpgrade samba-libsUpgrade openchange-debugsourceUpgrade sambaUpgrade samba-winbind-debuginfoUpgrade ctdbUpgrade samba-test-libs-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-common-libsUpgrade libwbclient-debuginfoUpgrade samba-dc-libsUpgrade libsmbclient-debuginfoUpgrade ctdb-testsUpgrade samba-client-libs-debuginfoUpgrade ctdb-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade samba-commonUpgrade samba-dcUpgrade samba-client-libsUpgrade ctdb-tests-debuginfoUpgrade samba-debuginfoUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-debugsourceUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-vfs-glusterfsUpgrade python3-samba-testUpgrade samba-develUpgrade libwbclient-develUpgrade samba-client-debuginfoUpgrade openchangeUpgrade python3-samba-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade python3-sambaUpgrade samba-clientUpgrade samba-testUpgrade samba-common-libs-debuginfoUpgrade samba-krb5-printingUpgrade libwbclientUpgrade openchange-client-debuginfoUpgrade openchange-debuginfoUpgrade samba-common-toolsUpgrade samba-pidlUpgrade samba-winbind-clients-debuginfoUpgrade samba-test-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-python-testUpgrade samba-winbind-krb5-locator-debuginfo | Apr 1, 2020 | Sep 3, 2019 |
| Debian | — | Upgrade samba | Sep 5, 2019 | Sep 3, 2019 |
| Freebsd | — | Upgrade samba410 | Sep 4, 2019 | Sep 3, 2019 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Sep 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-common-toolsUpgrade libwbclientUpgrade samba-winbind-clientsUpgrade python3-samba-testUpgrade samba-winbindUpgrade samba-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-test-libsUpgrade python3-sambaUpgrade python2-sambaUpgrade ctdbUpgrade samba-krb5-printingUpgrade sambaUpgrade samba-commonUpgrade samba-dc-libsUpgrade samba-testUpgrade samba-common-libsUpgrade libsmbclientUpgrade ctdb-testsUpgrade samba-winbind-modulesUpgrade samba-pidlUpgrade python2-samba-test | Nov 19, 2019 | Sep 3, 2019 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jun 16, 2021 | Sep 3, 2019 |
| Oracle_linux | — | Upgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade samba-pythonUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade python3-samba-testUpgrade samba-winbind-modulesUpgrade samba-dc-libsUpgrade sambaUpgrade libsmbclient-develUpgrade samba-test-libsUpgrade openchangeUpgrade samba-develUpgrade samba-clientUpgrade samba-libsUpgrade samba-winbindUpgrade libwbclient-develUpgrade samba-krb5-printingUpgrade samba-testUpgrade samba-vfs-glusterfsUpgrade samba-python-testUpgrade samba-dcUpgrade libwbclientUpgrade samba-pidlUpgrade samba-client-libsUpgrade ctdbUpgrade ctdb-testsUpgrade samba-commonUpgrade python3-samba | Oct 5, 2022 | Sep 3, 2019 |
| Redhat_linux | — | Upgrade samba-common-libs-debuginfoUpgrade samba-client-libsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade openchange-debuginfoUpgrade libsmbclientUpgrade samba-common-tools-debuginfoUpgrade libwbclient-develUpgrade openchange-client-debuginfoUpgrade ctdb-testsUpgrade python3-samba-debuginfoUpgrade samba-clientUpgrade samba-winbind-clients-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libsUpgrade samba-client-debuginfoUpgrade samba-testUpgrade samba-common-toolsUpgrade samba-debugsourceUpgrade samba-krb5-printingUpgrade ctdb-tests-debuginfoUpgrade libsmbclient-develUpgrade samba-pythonUpgrade samba-pidlUpgrade samba-test-libsUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-develUpgrade libwbclient-debuginfoUpgrade openchangeUpgrade samba-winbind-modules-debuginfoUpgrade samba-dcUpgrade openchange-debugsourceUpgrade python3-samba-testUpgrade samba-test-debuginfoUpgrade samba-commonUpgrade samba-libsUpgrade samba-debuginfoUpgrade samba-vfs-glusterfsUpgrade samba-python-testUpgrade samba-libs-debuginfoUpgrade samba-dc-libsUpgrade python3-sambaUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-winbind-modulesUpgrade samba-winbind-debuginfoUpgrade libsmbclient-debuginfoUpgrade libwbclientUpgrade ctdbUpgrade samba-test-libs-debuginfoUpgrade ctdb-debuginfoUpgrade samba | Apr 1, 2020 | Sep 3, 2019 |
| Samba | — | Upgrade to Samba 4.9.13 or later.Upgrade to Samba 4.10.8 or later.Upgrade to Samba 4.11.0 or later. | Sep 6, 2019 | Sep 3, 2019 |
| Suse | — | Upgrade libtevent-util0-32bitUpgrade libndr-krb5pac-develUpgrade libndr-nbt0-32bitUpgrade libldb1Upgrade libsamba-policy-develUpgrade libsmbclient0-32bitUpgrade libdcerpc-binding0Upgrade libsamba-policy-python3-develUpgrade libsamba-errors0Upgrade libndr-develUpgrade libndr-standard0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade samba-ad-dcUpgrade samba-dsdb-modulesUpgrade libwbclient0-32bitUpgrade ctdb-pcp-pmdaUpgrade samba-libs-python3-32bitUpgrade libndr-nbt-develUpgrade libdcerpc0Upgrade libsamba-credentials-develUpgrade libndr-krb5pac0Upgrade ctdb-testsUpgrade samba-python3Upgrade libsamba-policy0Upgrade libwbclient-develUpgrade libsamdb0-32bitUpgrade libsamba-passdb0-32bitUpgrade libsamba-passdb0Upgrade libsamba-policy0-32bitUpgrade libldb-develUpgrade libndr1-32bitUpgrade samba-core-develUpgrade libdcerpc0-32bitUpgrade samba-clientUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc-samr0Upgrade libsamdb0Upgrade libdcerpc-samr-develUpgrade libnetapi0-32bitUpgrade samba-ad-dc-32bitUpgrade libtevent-util-develUpgrade libsamba-credentials0-32bitUpgrade samba-libs-pythonUpgrade samba-libsUpgrade libdcerpc-develUpgrade libsamba-hostconfig-develUpgrade libsmbconf0-32bitUpgrade libndr-nbt0Upgrade libsamba-util-develUpgrade python-ldbUpgrade ldb-toolsUpgrade samba-winbindUpgrade libwbclient0Upgrade samba-libs-python3Upgrade libsmbconf0Upgrade libsamba-policy0-python3Upgrade libndr-krb5pac0-32bitUpgrade libdcerpc-samr0-32bitUpgrade libsamdb-develUpgrade libsamba-policy-python-develUpgrade libndr1Upgrade samba-pidlUpgrade libsamba-errors0-32bitUpgrade libsamba-errors-develUpgrade libsamba-util0Upgrade samba-libs-python-32bitUpgrade libsmbldap2-32bitUpgrade samba-docUpgrade samba-client-32bitUpgrade libndr0-32bitUpgrade libsmbclient-develUpgrade libsmbconf-develUpgrade libndr-standard-develUpgrade samba-winbind-32bitUpgrade libsamba-util0-32bitUpgrade samba-pythonUpgrade libsamba-passdb-develUpgrade libsamba-credentials0Upgrade samba-libs-32bitUpgrade libndr0Upgrade libndr-standard0Upgrade libldb1-32bitUpgrade libtevent-util0Upgrade libnetapi-develUpgrade samba-testUpgrade samba-cephUpgrade libsmbclient0Upgrade ctdbUpgrade libsmbldap-develUpgrade sambaUpgrade python-ldb-develUpgrade libsamba-policy0-python3-32bitUpgrade libsamba-hostconfig0Upgrade libsmbldap2Upgrade libnetapi0 | Sep 18, 2019 | Sep 1, 2019 |
| Ubuntu | — | Upgrade samba | Sep 4, 2019 | Sep 1, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub