A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathname to the client with separators. This could allow the client to access files and folders outside of the SMB network pathnames. An attacker could use this vulnerability to create files outside of the current working directory using the privileges of the client user.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Nov 6, 2019 |
| Amazon Linux Ami 2 | — | Upgrade samba-libsUpgrade samba-debuginfoUpgrade samba-develUpgrade libsmbclient-develUpgrade samba-clientUpgrade samba-krb5-printingUpgrade samba-vfs-glusterfsUpgrade samba-pidlUpgrade libwbclientUpgrade samba-test-libsUpgrade samba-common-toolsUpgrade samba-commonUpgrade ctdbUpgrade samba-testUpgrade ctdb-testsUpgrade samba-python-testUpgrade samba-dcUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba-winbindUpgrade sambaUpgrade samba-common-libsUpgrade libwbclient-develUpgrade samba-winbind-modulesUpgrade samba-dc-libsUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clients | Jul 21, 2020 | Nov 6, 2019 |
| Amazon_linux | — | Upgrade samba | Sep 1, 2020 | Oct 30, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 6, 2019 |
| Centos_linux | — | Upgrade samba-clientUpgrade samba-krb5-printingUpgrade samba-libsUpgrade openchange-debuginfoUpgrade samba-vfs-glusterfsUpgrade samba-libs-debuginfoUpgrade samba-common-libs-debuginfoUpgrade python3-sambaUpgrade samba-pidlUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-testUpgrade samba-winbind-krb5-locator-debuginfoUpgrade openchange-client-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-commonUpgrade samba-test-libsUpgrade samba-test-debuginfoUpgrade samba-test-libs-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade libwbclient-develUpgrade samba-client-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-vfs-glusterfs-debuginfoUpgrade ctdb-debuginfoUpgrade ctdb-testsUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade openchange-debugsourceUpgrade samba-client-libs-debuginfoUpgrade sambaUpgrade samba-python-testUpgrade ctdbUpgrade samba-develUpgrade samba-dcUpgrade samba-debuginfoUpgrade samba-client-libsUpgrade python3-samba-testUpgrade openchangeUpgrade samba-common-libsUpgrade samba-winbind-clients-debuginfoUpgrade samba-winbind-modulesUpgrade samba-krb5-printing-debuginfoUpgrade ctdb-tests-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-winbindUpgrade samba-debugsourceUpgrade libsmbclient-debuginfoUpgrade libwbclient-debuginfoUpgrade libsmbclient-develUpgrade libsmbclient | Apr 1, 2020 | Nov 6, 2019 |
| Debian | — | Upgrade samba | May 31, 2021 | Nov 6, 2019 |
| Freebsd | — | Upgrade samba48Upgrade samba410Upgrade samba411 | Nov 1, 2019 | Oct 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-client-libsUpgrade samba-clientUpgrade sambaUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-libsUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-common-toolsUpgrade libwbclient | Sep 28, 2020 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-common-toolsUpgrade samba-winbindUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-libsUpgrade samba-client-libsUpgrade samba-commonUpgrade libwbclient | Dec 11, 2019 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-common-toolsUpgrade libwbclientUpgrade samba-clientUpgrade samba-client-libsUpgrade python3-sambaUpgrade ctdb-testsUpgrade libsmbclientUpgrade samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade python2-samba-testUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-test-libsUpgrade python3-samba-testUpgrade ctdbUpgrade sambaUpgrade samba-winbindUpgrade samba-pidlUpgrade samba-dc-libsUpgrade samba-krb5-printingUpgrade samba-libsUpgrade python2-sambaUpgrade samba-common | Jan 3, 2020 | Nov 6, 2019 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Nov 6, 2019 |
| Oracle_linux | — | Upgrade samba-develUpgrade samba-winbind-krb5-locatorUpgrade libsmbclient-develUpgrade samba-winbindUpgrade python3-samba-testUpgrade sambaUpgrade ctdb-testsUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade openchangeUpgrade samba-dc-libsUpgrade samba-client-libsUpgrade samba-vfs-glusterfsUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade samba-pythonUpgrade libwbclient-develUpgrade samba-common-toolsUpgrade ctdbUpgrade samba-clientUpgrade samba-test-libsUpgrade samba-pidlUpgrade samba-python-testUpgrade libwbclientUpgrade samba-testUpgrade python3-sambaUpgrade samba-dcUpgrade samba-krb5-printing | Oct 5, 2022 | Oct 29, 2019 |
| Redhat_linux | — | Upgrade samba-common-libsUpgrade samba-python-testNo solution existsUpgrade samba-winbind-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-test-debuginfoUpgrade libsmbclient-develUpgrade samba-winbind-krb5-locator-debuginfoUpgrade python3-samba-testUpgrade samba-common-toolsUpgrade samba-krb5-printingUpgrade samba-commonUpgrade samba-debugsourceUpgrade ctdb-tests-debuginfoUpgrade samba-debuginfoUpgrade samba-vfs-glusterfsUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba-develUpgrade samba-dc-libsUpgrade libwbclient-debuginfoUpgrade samba-libsUpgrade samba-common-tools-debuginfoUpgrade samba-dcUpgrade samba-client-debuginfoUpgrade samba-test-libsUpgrade samba-clientUpgrade ctdbUpgrade samba-testUpgrade samba-winbind-modules-debuginfoUpgrade python3-samba-debuginfoUpgrade openchangeUpgrade ctdb-debuginfoUpgrade sambaUpgrade openchange-debugsourceUpgrade samba-pythonUpgrade samba-client-libs-debuginfoUpgrade libwbclientUpgrade openchange-debuginfoUpgrade samba-common-libs-debuginfoUpgrade openchange-client-debuginfoUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade ctdb-testsUpgrade python3-sambaUpgrade libwbclient-develUpgrade samba-pidlUpgrade samba-winbind-clients-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-client-libs | Apr 1, 2020 | Nov 6, 2019 |
| Samba | — | Upgrade to Samba 4.10.10 or later.Upgrade to Samba 4.11.2 or later.Upgrade to Samba 4.9.15 or later. | Nov 6, 2019 | Nov 6, 2019 |
| Suse | — | Upgrade libnetapi-develUpgrade libtdb1-32bitUpgrade libdcerpc-binding0Upgrade libsmbclient0Upgrade samba-winbind-32bitUpgrade libsamba-policy-develUpgrade libsmbclient0-32bitUpgrade libsamba-policy0-python3-32bitUpgrade samba-kdc-32bitUpgrade libtalloc2-32bitUpgrade libsmbldap2Upgrade libndr-krb5pac0-32bitUpgrade libtevent-util0Upgrade libwbclient-develUpgrade libsamba-errors0Upgrade libdcerpc0-32bitUpgrade libsamba-credentials-develUpgrade libsmbconf-develUpgrade libndr-nbt0Upgrade libdcerpc-develUpgrade samba-krb-printingUpgrade libsmbldap2-32bitUpgrade libsamba-credentials0-32bitUpgrade samba-core-develUpgrade ldapsmbUpgrade libsmbldap0-32bitUpgrade libsmbldap0Upgrade libdcerpc-samr0-32bitUpgrade libsamba-errors0-32bitUpgrade sambaUpgrade libndr-krb5pac-develUpgrade libdcerpc-samr-develUpgrade libwbclient0-32bitUpgrade ctdb-pcp-pmdaUpgrade libndr-nbt-develUpgrade libregistry0Upgrade libsamba-util0Upgrade libtdb1Upgrade libndr0-32bitUpgrade libnetapi0Upgrade samba-clientUpgrade libsamdb0Upgrade samba-python3Upgrade libndr-krb5pac0Upgrade libtevent-util0-32bitUpgrade libsamba-passdb0-32bitUpgrade python-ldbUpgrade samba-pythonUpgrade samba-libs-32bitUpgrade libldb-develUpgrade libsamba-policy-python3-develUpgrade libsmbclient-develUpgrade libsamba-util-develUpgrade libldb1-32bitUpgrade libndr-standard0Upgrade samba-docUpgrade libwbclient0Upgrade samba-libs-python3Upgrade libsmbclient-raw0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-hostconfig0Upgrade samba-ad-dcUpgrade libnetapi0-32bitUpgrade samba-winbindUpgrade samba-ad-dc-32bitUpgrade libdcerpc-atsvc0Upgrade libsamba-passdb-develUpgrade python-ldb-develUpgrade samba-libsUpgrade samba-dsdb-modulesUpgrade ctdbUpgrade samba-32bitUpgrade libsmbconf0-32bitUpgrade libsamba-policy-python-develUpgrade libtalloc2Upgrade libdcerpc-samr0Upgrade libsamdb0-32bitUpgrade libsamba-policy0Upgrade samba-libs-pythonUpgrade libndr-standard-develUpgrade libsamba-policy0-32bitUpgrade libndr1Upgrade libndr-standard0-32bitUpgrade samba-libs-python-32bitUpgrade libsamba-policy0-python3Upgrade libldb1Upgrade libndr-develUpgrade libndr1-32bitUpgrade samba-libs-python3-32bitUpgrade libsmbldap-develUpgrade libsmbclient-raw0Upgrade libtevent0-32bitUpgrade libsamba-credentials0Upgrade libsmbconf0Upgrade libsamba-util0-32bitUpgrade ctdb-testsUpgrade libtevent0Upgrade libndr0Upgrade libdcerpc-binding0-32bitUpgrade libgensec0Upgrade samba-kdcUpgrade libsamba-hostconfig-develUpgrade samba-testUpgrade samba-cephUpgrade libsamdb-develUpgrade samba-client-32bitUpgrade libdcerpc0Upgrade libtevent-util-develUpgrade ldb-toolsUpgrade libsamba-passdb0Upgrade libsamba-errors-develUpgrade libgensec0-32bitUpgrade libndr-nbt0-32bitUpgrade samba-pidl | Oct 30, 2019 | Oct 29, 2019 |
| Ubuntu | — | Upgrade libsmbclientUpgrade samba (Ubuntu Pro)Upgrade libsmbclient (Ubuntu Pro)Upgrade samba | Oct 30, 2019 | Oct 29, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub