A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathname to the client with separators. This could allow the client to access files and folders outside of the SMB network pathnames. An attacker could use this vulnerability to create files outside of the current working directory using the privileges of the client user.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
- CVSS 3.0 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | May 8, 2020 | Nov 6, 2019 |
| Amazon Linux Ami 2 | — | Upgrade samba-pythonUpgrade samba-python-testUpgrade ctdb-testsUpgrade sambaUpgrade samba-dcUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade libwbclient-develUpgrade samba-common-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-client-libsUpgrade libsmbclientUpgrade samba-dc-libsUpgrade samba-libsUpgrade samba-commonUpgrade samba-test-libsUpgrade samba-krb5-printingUpgrade samba-develUpgrade samba-debuginfoUpgrade samba-clientUpgrade ctdbUpgrade samba-testUpgrade libsmbclient-develUpgrade samba-common-toolsUpgrade samba-vfs-glusterfsUpgrade samba-pidlUpgrade libwbclient | Jul 21, 2020 | Nov 6, 2019 |
| Amazon_linux | — | Upgrade samba | Sep 1, 2020 | Oct 30, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 6, 2019 |
| Centos_linux | — | Upgrade samba-test-libs-debuginfoUpgrade samba-common-toolsUpgrade samba-test-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-krb5-printingUpgrade samba-libs-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-pidlUpgrade samba-vfs-glusterfsUpgrade samba-commonUpgrade samba-libsUpgrade samba-testUpgrade openchange-client-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-test-libsUpgrade samba-clientUpgrade openchange-debuginfoUpgrade python3-sambaUpgrade libwbclientUpgrade sambaUpgrade samba-debugsourceUpgrade samba-pythonUpgrade samba-krb5-printing-debuginfoUpgrade ctdbUpgrade openchange-debugsourceUpgrade samba-winbind-modules-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-python-testUpgrade samba-develUpgrade samba-winbind-modulesUpgrade ctdb-tests-debuginfoUpgrade libwbclient-develUpgrade samba-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-winbindUpgrade libsmbclient-develUpgrade samba-dc-libsUpgrade libsmbclientUpgrade samba-client-debuginfoUpgrade samba-dcUpgrade ctdb-testsUpgrade samba-winbind-krb5-locatorUpgrade samba-vfs-glusterfs-debuginfoUpgrade openchangeUpgrade python3-samba-testUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade ctdb-debuginfoUpgrade samba-common-libs | Apr 1, 2020 | Nov 6, 2019 |
| Debian | — | Upgrade samba | May 31, 2021 | Nov 6, 2019 |
| Freebsd | — | Upgrade samba410Upgrade samba411Upgrade samba48 | Nov 1, 2019 | Oct 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-libsUpgrade samba-pythonUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade sambaUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-commonUpgrade samba-clientUpgrade samba-client-libs | Sep 28, 2020 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libwbclientUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-common-toolsUpgrade sambaUpgrade samba-winbind | Dec 11, 2019 | Nov 6, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-client-libsUpgrade libwbclientUpgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade ctdb-testsUpgrade samba-clientUpgrade samba-common-toolsUpgrade python2-samba-testUpgrade samba-testUpgrade python3-sambaUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade sambaUpgrade samba-dc-libsUpgrade samba-pidlUpgrade ctdbUpgrade samba-libsUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-test-libsUpgrade python2-sambaUpgrade samba-krb5-printingUpgrade python3-samba-testUpgrade samba-winbind | Jan 3, 2020 | Nov 6, 2019 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.11.6-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Nov 6, 2019 |
| Oracle_linux | — | Upgrade samba-libsUpgrade openchangeUpgrade samba-common-toolsUpgrade ctdbUpgrade samba-pythonUpgrade python3-samba-testUpgrade samba-commonUpgrade samba-winbindUpgrade samba-vfs-glusterfsUpgrade libsmbclient-develUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-develUpgrade samba-winbind-modulesUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade ctdb-testsUpgrade libwbclient-develUpgrade samba-client-libsUpgrade sambaUpgrade samba-test-libsUpgrade samba-testUpgrade libwbclientUpgrade python3-sambaUpgrade samba-clientUpgrade samba-krb5-printingUpgrade samba-python-testUpgrade samba-pidlUpgrade samba-dc | Oct 5, 2022 | Oct 29, 2019 |
| Redhat_linux | — | Upgrade openchange-debuginfoUpgrade libwbclientUpgrade openchangeUpgrade python3-sambaUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade ctdb-testsUpgrade libwbclient-develUpgrade samba-common-libs-debuginfoUpgrade ctdb-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade sambaUpgrade samba-pythonUpgrade libsmbclient-debuginfoUpgrade openchange-client-debuginfoUpgrade openchange-debugsourceUpgrade samba-winbindUpgrade samba-winbind-clients-debuginfoUpgrade samba-pidlUpgrade samba-winbind-modules-debuginfoUpgrade samba-test-libsUpgrade samba-winbind-clientsUpgrade samba-common-tools-debuginfoUpgrade samba-vfs-glusterfsUpgrade libsmbclient-develUpgrade samba-libsUpgrade samba-commonUpgrade samba-vfs-glusterfs-debuginfoUpgrade ctdb-tests-debuginfoUpgrade samba-testUpgrade libwbclient-debuginfoUpgrade samba-krb5-printingUpgrade python3-samba-testUpgrade samba-dc-libsUpgrade samba-debugsourceUpgrade samba-debuginfoNo solution existsUpgrade samba-winbind-debuginfoUpgrade samba-common-toolsUpgrade samba-libs-debuginfoUpgrade samba-develUpgrade samba-common-libsUpgrade samba-python-testUpgrade python3-samba-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-dcUpgrade ctdbUpgrade samba-test-libs-debuginfoUpgrade samba-client-debuginfoUpgrade samba-clientUpgrade samba-test-debuginfoUpgrade samba-winbind-krb5-locator-debuginfo | Apr 1, 2020 | Nov 6, 2019 |
| Samba | — | Upgrade to Samba 4.11.2 or later.Upgrade to Samba 4.10.10 or later.Upgrade to Samba 4.9.15 or later. | Nov 6, 2019 | Nov 6, 2019 |
| Suse | — | Upgrade libsamba-policy-python3-develUpgrade samba-kdc-32bitUpgrade libndr-krb5pac-develUpgrade ldapsmbUpgrade samba-pythonUpgrade libsmbclient-develUpgrade libndr-krb5pac0Upgrade libdcerpc-samr0-32bitUpgrade libsmbldap2-32bitUpgrade libsamba-credentials0-32bitUpgrade libsamba-passdb0-32bitUpgrade libnetapi0-32bitUpgrade libldb-develUpgrade libregistry0Upgrade libsmbclient-raw0-32bitUpgrade samba-python3Upgrade libsamba-hostconfig0-32bitUpgrade libsamba-util-develUpgrade libwbclient0-32bitUpgrade libsamba-util0Upgrade libndr-standard0Upgrade samba-docUpgrade libsamba-credentials-develUpgrade libtdb1Upgrade libwbclient-develUpgrade libsmbconf-develUpgrade libdcerpc0-32bitUpgrade libldb1-32bitUpgrade libtevent-util0Upgrade samba-libs-32bitUpgrade libsamba-errors0Upgrade python-ldbUpgrade libsamdb0Upgrade libndr0-32bitUpgrade libsmbldap0-32bitUpgrade libtevent-util0-32bitUpgrade samba-clientUpgrade libndr-nbt-develUpgrade samba-krb-printingUpgrade libsamba-errors0-32bitUpgrade libnetapi-develUpgrade libndr-krb5pac0-32bitUpgrade libsamba-hostconfig0Upgrade libsmbldap2Upgrade samba-ad-dc-32bitUpgrade libsamba-policy-develUpgrade samba-ad-dcUpgrade libdcerpc-atsvc0Upgrade samba-libs-python3Upgrade libsmbclient0-32bitUpgrade libsamba-policy0-python3-32bitUpgrade libtalloc2-32bitUpgrade samba-winbindUpgrade libdcerpc-binding0Upgrade libtdb1-32bitUpgrade libsmbclient0Upgrade libndr-nbt0Upgrade libwbclient0Upgrade samba-winbind-32bitUpgrade ctdb-pcp-pmdaUpgrade libdcerpc-samr-develUpgrade libnetapi0Upgrade sambaUpgrade libsmbldap0Upgrade samba-core-develUpgrade libdcerpc-develUpgrade libndr-standard0-32bitUpgrade samba-libsUpgrade ctdbUpgrade samba-pidlUpgrade libndr0Upgrade libsmbconf0Upgrade libsamba-passdb0Upgrade samba-testUpgrade libgensec0Upgrade libsamba-credentials0Upgrade ctdb-testsUpgrade libtevent0Upgrade libndr-standard-develUpgrade libsamba-errors-develUpgrade libsamba-policy-python-develUpgrade libtevent0-32bitUpgrade libsamba-passdb-develUpgrade samba-libs-python3-32bitUpgrade libsamdb0-32bitUpgrade libsmbconf0-32bitUpgrade libtalloc2Upgrade libtevent-util-develUpgrade samba-libs-pythonUpgrade libdcerpc-samr0Upgrade libldb1Upgrade libsamba-policy0Upgrade samba-32bitUpgrade libndr1-32bitUpgrade libndr1Upgrade libsamba-util0-32bitUpgrade libsamba-policy0-32bitUpgrade samba-dsdb-modulesUpgrade libsamdb-develUpgrade ldb-toolsUpgrade libndr-develUpgrade python-ldb-develUpgrade libndr-nbt0-32bitUpgrade samba-client-32bitUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc0Upgrade libsamba-hostconfig-develUpgrade samba-cephUpgrade libgensec0-32bitUpgrade libsmbclient-raw0Upgrade libsmbldap-develUpgrade samba-kdcUpgrade libsamba-policy0-python3Upgrade samba-libs-python-32bit | Oct 30, 2019 | Oct 29, 2019 |
| Ubuntu | — | Upgrade sambaUpgrade libsmbclient (Ubuntu Pro)Upgrade libsmbclientUpgrade samba (Ubuntu Pro) | Oct 30, 2019 | Oct 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub