The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathname to the client with separators. This could allow the client to access files and folders outside of the SMB network pathnames. An attacker could use this vulnerability to create files outside of the current working directory using the privileges of the client user.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Nov 6, 2019 |
| Amazon Linux Ami 2 | — | Upgrade samba-testUpgrade samba-commonUpgrade samba-vfs-glusterfsUpgrade samba-common-toolsUpgrade ctdbUpgrade samba-pidlUpgrade samba-develUpgrade samba-libsUpgrade samba-debuginfoUpgrade samba-clientUpgrade samba-test-libsUpgrade samba-krb5-printingUpgrade libwbclientUpgrade libsmbclient-develUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-pythonUpgrade ctdb-testsUpgrade samba-dc-libsUpgrade libwbclient-develUpgrade samba-winbindUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-python-testUpgrade samba-winbind-modulesUpgrade samba-dcUpgrade samba-client-libsUpgrade samba-winbind-krb5-locator | Jul 21, 2020 | Nov 6, 2019 |
| Amazon_linux | — | Upgrade samba | Sep 1, 2020 | Oct 30, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 6, 2019 |
| Centos_linux | — | Upgrade samba-krb5-printingUpgrade python3-samba-debuginfoUpgrade samba-libsUpgrade samba-test-libs-debuginfoUpgrade samba-test-debuginfoUpgrade samba-test-libsUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-pidlUpgrade samba-commonUpgrade libwbclientUpgrade samba-common-libs-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-testUpgrade samba-common-tools-debuginfoUpgrade python3-sambaUpgrade openchange-client-debuginfoUpgrade samba-vfs-glusterfsUpgrade openchange-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-debugsourceUpgrade samba-winbind-krb5-locatorUpgrade samba-vfs-glusterfs-debuginfoUpgrade sambaUpgrade ctdb-testsUpgrade samba-pythonUpgrade samba-winbind-clients-debuginfoUpgrade ctdb-tests-debuginfoUpgrade libsmbclientUpgrade openchange-debugsourceUpgrade libwbclient-develUpgrade libsmbclient-develUpgrade libsmbclient-debuginfoUpgrade samba-debuginfoUpgrade samba-dc-libsUpgrade openchangeUpgrade samba-python-testUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-winbind-modules-debuginfoUpgrade ctdb-debuginfoUpgrade samba-winbind-modulesUpgrade samba-client-debuginfoUpgrade samba-develUpgrade samba-winbindUpgrade samba-dcUpgrade samba-krb5-printing-debuginfoUpgrade python3-samba-testUpgrade libwbclient-debuginfoUpgrade samba-client-libsUpgrade ctdbUpgrade samba-winbind-debuginfoUpgrade samba-client-libs-debuginfo | Apr 1, 2020 | Nov 6, 2019 |
| Debian | — | Upgrade samba | May 31, 2021 | Nov 6, 2019 |
| Freebsd | — | Upgrade samba410Upgrade samba48Upgrade samba411 | Nov 1, 2019 | Oct 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-clientUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-libsUpgrade samba-common-libsUpgrade samba-winbindUpgrade libwbclientUpgrade sambaUpgrade samba-common-toolsUpgrade samba-common | Sep 28, 2020 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-pythonUpgrade samba-common-libsUpgrade sambaUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade libwbclient | Dec 11, 2019 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ctdb-testsUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade libsmbclientUpgrade libwbclientUpgrade samba-clientUpgrade python3-sambaUpgrade samba-client-libsUpgrade python2-samba-testUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-testUpgrade ctdbUpgrade python3-samba-testUpgrade samba-common-libsUpgrade sambaUpgrade samba-pidlUpgrade samba-dc-libsUpgrade samba-winbindUpgrade samba-krb5-printingUpgrade python2-sambaUpgrade samba-test-libsUpgrade samba-commonUpgrade samba-libs | Jan 3, 2020 | Nov 6, 2019 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Nov 6, 2019 |
| Oracle_linux | — | Upgrade samba-pidlUpgrade samba-test-libsUpgrade samba-dcUpgrade samba-krb5-printingUpgrade libwbclientUpgrade samba-clientUpgrade python3-sambaUpgrade samba-testUpgrade samba-python-testUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade ctdbUpgrade samba-winbind-krb5-locatorUpgrade samba-winbindUpgrade libsmbclient-develUpgrade samba-develUpgrade samba-pythonUpgrade libsmbclientUpgrade ctdb-testsUpgrade samba-client-libsUpgrade python3-samba-testUpgrade openchangeUpgrade samba-vfs-glusterfsUpgrade samba-common-libsUpgrade libwbclient-develUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-dc-libs | Oct 5, 2022 | Oct 29, 2019 |
| Redhat_linux | — | Upgrade samba-pythonUpgrade samba-client-libsUpgrade samba-winbind-clients-debuginfoUpgrade samba-client-libs-debuginfoUpgrade openchange-debugsourceUpgrade openchange-client-debuginfoUpgrade samba-winbindUpgrade libwbclient-develUpgrade libsmbclient-debuginfoUpgrade openchangeUpgrade sambaUpgrade python3-sambaUpgrade samba-krb5-printing-debuginfoUpgrade ctdb-debuginfoUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-pidlUpgrade samba-common-libs-debuginfoUpgrade openchange-debuginfoUpgrade ctdb-testsUpgrade libwbclientUpgrade samba-testUpgrade samba-krb5-printingUpgrade samba-common-tools-debuginfoUpgrade libsmbclient-develUpgrade samba-develUpgrade samba-test-libs-debuginfoUpgrade samba-test-libsUpgrade samba-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-vfs-glusterfsUpgrade samba-debuginfoUpgrade samba-debugsourceUpgrade samba-winbind-debuginfoUpgrade samba-common-toolsUpgrade ctdbUpgrade samba-libs-debuginfoUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-python-testUpgrade python3-samba-debuginfoUpgrade samba-client-debuginfoNo solution existsUpgrade libwbclient-debuginfoUpgrade samba-dcUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-dc-libsUpgrade python3-samba-testUpgrade samba-commonUpgrade ctdb-tests-debuginfoUpgrade samba-test-debuginfoUpgrade samba-clientUpgrade samba-winbind-modules-debuginfo | Apr 1, 2020 | Nov 6, 2019 |
| Samba | — | Upgrade to Samba 4.9.15 or later.Upgrade to Samba 4.10.10 or later.Upgrade to Samba 4.11.2 or later. | Nov 6, 2019 | Nov 6, 2019 |
| Suse | — | Upgrade samba-testUpgrade libsamba-hostconfig-develUpgrade libdcerpc-binding0-32bitUpgrade samba-libs-pythonUpgrade libdcerpc-samr0Upgrade libsamba-policy0Upgrade libtalloc2Upgrade libsamba-policy-python-develUpgrade samba-cephUpgrade libsamba-passdb-develUpgrade samba-kdcUpgrade libgensec0Upgrade samba-client-32bitUpgrade libsamdb-develUpgrade libsamba-errors-develUpgrade libtevent0Upgrade libsmbconf0-32bitUpgrade libdcerpc0Upgrade samba-dsdb-modulesUpgrade samba-libsUpgrade libsamba-passdb0Upgrade ctdbUpgrade samba-pidlUpgrade libndr0Upgrade libsamba-credentials0Upgrade libndr-develUpgrade libsmbclient-raw0Upgrade samba-32bitUpgrade libndr1Upgrade libgensec0-32bitUpgrade ldb-toolsUpgrade libldb1Upgrade libsamdb0-32bitUpgrade libndr-standard0-32bitUpgrade libsamba-util0-32bitUpgrade libndr-standard-develUpgrade libsamba-policy0-32bitUpgrade ctdb-testsUpgrade libsmbconf0Upgrade python-ldb-develUpgrade libndr1-32bitUpgrade libtevent-util-develUpgrade libsmbldap-develUpgrade libtevent0-32bitUpgrade samba-libs-python3-32bitUpgrade samba-libs-python-32bitUpgrade libsamba-policy0-python3Upgrade libndr-nbt0-32bitUpgrade samba-libs-32bitUpgrade ldapsmbUpgrade libsamba-hostconfig0-32bitUpgrade libtevent-util0-32bitUpgrade libsamdb0Upgrade libsmbldap0Upgrade libtevent-util0Upgrade libsamba-credentials-develUpgrade libsmbconf-develUpgrade libdcerpc0-32bitUpgrade libsamba-errors0Upgrade libwbclient-develUpgrade samba-core-develUpgrade libdcerpc-develUpgrade sambaUpgrade libsamba-errors0-32bitUpgrade samba-krb-printingUpgrade libndr-krb5pac-develUpgrade libdcerpc-samr0-32bitUpgrade libnetapi0Upgrade libldb1-32bitUpgrade libndr-krb5pac0-32bitUpgrade samba-ad-dcUpgrade ctdb-pcp-pmdaUpgrade libsmbclient0Upgrade samba-winbind-32bitUpgrade libnetapi-develUpgrade libndr-nbt0Upgrade libsmbldap2Upgrade libndr0-32bitUpgrade libndr-nbt-develUpgrade samba-clientUpgrade libndr-standard0Upgrade libwbclient0-32bitUpgrade samba-python3Upgrade samba-docUpgrade libsamba-credentials0-32bitUpgrade samba-pythonUpgrade libndr-krb5pac0Upgrade python-ldbUpgrade libnetapi0-32bitUpgrade libsamba-passdb0-32bitUpgrade libtalloc2-32bitUpgrade libdcerpc-atsvc0Upgrade libsmbclient0-32bitUpgrade samba-libs-python3Upgrade samba-kdc-32bitUpgrade samba-winbindUpgrade libsamba-policy0-python3-32bitUpgrade samba-ad-dc-32bitUpgrade libtdb1-32bitUpgrade libsmbldap2-32bitUpgrade libsamba-util0Upgrade libsmbldap0-32bitUpgrade libsamba-policy-python3-develUpgrade libsmbclient-develUpgrade libtdb1Upgrade libldb-develUpgrade libsmbclient-raw0-32bitUpgrade libdcerpc-binding0Upgrade libsamba-util-develUpgrade libwbclient0Upgrade libsamba-hostconfig0Upgrade libsamba-policy-develUpgrade libdcerpc-samr-develUpgrade libregistry0 | Oct 30, 2019 | Oct 29, 2019 |
| Ubuntu | — | Upgrade samba (Ubuntu Pro)Upgrade libsmbclientUpgrade libsmbclient (Ubuntu Pro)Upgrade samba | Oct 30, 2019 | Oct 29, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub