A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share. Versions before 4.8.11, 4.9.6 and 4.10.2 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)
- CVSS 3.0 Base Score: 4.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Apr 22, 2019 | Apr 9, 2019 |
| Amazon Linux Ami 2 | — | Upgrade samba-commonUpgrade samba-krb5-printingUpgrade ctdb-testsUpgrade libwbclientUpgrade ctdbUpgrade samba-pythonUpgrade samba-python-testUpgrade samba-client-libsUpgrade samba-vfs-glusterfsUpgrade samba-testUpgrade samba-debuginfoUpgrade samba-dcUpgrade samba-develUpgrade samba-pidlUpgrade libwbclient-develUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-dc-libsUpgrade libsmbclient-develUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba | Apr 27, 2020 | Apr 9, 2019 |
| Amazon_linux | — | Upgrade samba | Dec 20, 2019 | Apr 9, 2019 |
| Centos_linux | — | Upgrade samba-develUpgrade libsmbclient-debuginfoUpgrade samba-vfs-glusterfsUpgrade samba-dcUpgrade samba-testUpgrade samba-debuginfoUpgrade sambaUpgrade samba-pythonUpgrade samba-winbind-krb5-locatorUpgrade libwbclientUpgrade ctdbUpgrade samba-krb5-printingUpgrade samba-client-debuginfoUpgrade ctdb-tests-debuginfoUpgrade samba-test-libsUpgrade samba-commonUpgrade libsmbclient-develUpgrade python3-sambaUpgrade samba-clientUpgrade samba-winbind-modules-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-libsUpgrade samba-libs-debuginfoUpgrade samba-test-debuginfoUpgrade samba-test-libs-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-debugsourceUpgrade samba-winbindUpgrade samba-winbind-krb5-locator-debuginfoUpgrade python3-samba-testUpgrade samba-client-libs-debuginfoUpgrade python3-samba-debuginfoUpgrade ctdb-debuginfoUpgrade samba-python-testUpgrade samba-winbind-clients-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade libwbclient-develUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-client-libsUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-common-libs-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-pidlUpgrade samba-common-toolsUpgrade samba-vfs-glusterfs-debuginfoUpgrade ctdb-testsUpgrade samba-dc-libs | Aug 28, 2019 | Apr 9, 2019 |
| Debian | — | Upgrade samba | Apr 8, 2019 | Apr 8, 2019 |
| Freebsd | — | Upgrade samba48Upgrade samba47Upgrade samba410Upgrade samba46Upgrade samba49 | May 18, 2019 | May 14, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-libsUpgrade sambaUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba-pythonUpgrade libwbclient | Jul 23, 2019 | Apr 9, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-common-libsUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade samba-commonUpgrade samba-libsUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade samba | Sep 25, 2019 | Apr 9, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-pythonUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-winbindUpgrade sambaUpgrade samba-common-toolsUpgrade samba-libsUpgrade samba-clientUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-common-libs | Jul 2, 2019 | Apr 9, 2019 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Apr 9, 2019 |
| Oracle_linux | — | Upgrade samba-vfs-glusterfsUpgrade samba-client-libsUpgrade samba-testUpgrade samba-pidlUpgrade libwbclient-develUpgrade python3-sambaUpgrade samba-pythonUpgrade libwbclientUpgrade sambaUpgrade ctdbUpgrade samba-krb5-printingUpgrade ctdb-testsUpgrade samba-develUpgrade samba-dcUpgrade samba-winbindUpgrade samba-libsUpgrade samba-dc-libsUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade python3-samba-testUpgrade samba-commonUpgrade libsmbclient-develUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-test-libsUpgrade samba-python-test | Jul 21, 2020 | Apr 9, 2019 |
| Redhat_linux | — | Upgrade samba-testUpgrade ctdb-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-python-testUpgrade samba-common-tools-debuginfoUpgrade ctdbUpgrade samba-dc-libsUpgrade samba-vfs-glusterfsUpgrade samba-common-libs-debuginfoUpgrade samba-vfs-glusterfs-debuginfoUpgrade ctdb-testsUpgrade samba-client-libs-debuginfoUpgrade ctdb-tests-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-debugsourceUpgrade samba-test-libs-debuginfoUpgrade samba-winbind-modulesUpgrade samba-dcUpgrade samba-pidlUpgrade libwbclient-develUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade libsmbclientNo solution existsUpgrade libwbclientUpgrade samba-libs-debuginfoUpgrade sambaUpgrade samba-krb5-printingUpgrade samba-debuginfoUpgrade samba-test-debuginfoUpgrade samba-client-debuginfoUpgrade samba-common-toolsUpgrade python3-samba-debuginfoUpgrade samba-test-libsUpgrade libsmbclient-debuginfoUpgrade samba-winbindUpgrade samba-winbind-krb5-locatorUpgrade samba-krb5-printing-debuginfoUpgrade samba-commonUpgrade samba-clientUpgrade samba-winbind-debuginfoUpgrade samba-develUpgrade samba-libsUpgrade samba-client-libsUpgrade python3-sambaUpgrade python3-samba-testUpgrade libsmbclient-develUpgrade samba-winbind-clients-debuginfoUpgrade samba-pythonUpgrade samba-winbind-modules-debuginfo | Aug 7, 2019 | Apr 9, 2019 |
| Samba | — | Upgrade to Samba version 4.9.6Upgrade to Samba version 4.10.2Upgrade to Samba version 4.8.11 | Apr 30, 2019 | Apr 9, 2019 |
| Suse | — | Upgrade libsamba-hostconfig-develUpgrade libnettle6Upgrade libcups2-32bitUpgrade libwbclient0-32bitUpgrade samba-python3Upgrade libtevent0Upgrade gamin-develUpgrade libavahi-ui0Upgrade libsmbclient-raw0-32bitUpgrade python-ldb-32bitUpgrade libgnutls30-32bitUpgrade cups-develUpgrade samba-dsdb-modulesUpgrade libsmbconf0Upgrade samba-kdc-32bitUpgrade libgnutlsxx-develUpgrade libavahi-gobject0Upgrade libtevent-util0-32bitUpgrade libcupsmime1Upgrade libdcerpc-atsvc0Upgrade libfam0-gaminUpgrade libcupsimage2Upgrade libgnutls30Upgrade libdcerpc-samr0-32bitUpgrade samba-winbind-32bitUpgrade avahi-langUpgrade python3-tallocUpgrade libndr1-32bitUpgrade samba-32bitUpgrade libdcerpc-develUpgrade libsmbldap-develUpgrade libndr-krb5pac0Upgrade libtasn1-6Upgrade libdcerpc-binding0Upgrade libsamdb0Upgrade samba-cephUpgrade libndr-nbt0Upgrade python-talloc-develUpgrade libgnutls-develUpgrade ldapsmbUpgrade libsamba-passdb0Upgrade libndr-nbt0-32bitUpgrade libavahi-develUpgrade samba-docUpgrade p11-kit-toolsUpgrade sambaUpgrade libdcerpc-samr0Upgrade libavahi-gobject-develUpgrade libnetapi0Upgrade libtevent-util0Upgrade libldb-develUpgrade libfam0-gamin-32bitUpgrade libtasn1-6-32bitUpgrade talloc-manUpgrade libavahi-core7Upgrade libsmbconf0-32bitUpgrade libsamba-passdb0-32bitUpgrade libndr-standard0-32bitUpgrade libndr-krb5pac-develUpgrade samba-winbindUpgrade avahi-utilsUpgrade samba-core-develUpgrade libgensec0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libsmbldap2-32bitUpgrade libtdb1-32bitUpgrade libsamba-policy0Upgrade python-tallocUpgrade ctdb-pcp-pmdaUpgrade libtalloc2-32bitUpgrade libldb1-32bitUpgrade libhogweed4-32bitUpgrade ctdb-testsUpgrade libndr-develUpgrade libtalloc2Upgrade libtalloc-develUpgrade libavahi-glib1Upgrade tdb-toolsUpgrade samba-pidlUpgrade samba-pythonUpgrade libgnutlsxx28Upgrade p11-kit-develUpgrade libtevent-develUpgrade libwbclient-develUpgrade libsamba-errors0Upgrade python3-ldb-develUpgrade samba-libs-python3Upgrade samba-libs-python3-32bitUpgrade cups-configUpgrade python-avahiUpgrade libsamba-util-develUpgrade libsamba-util0-32bitUpgrade typelib-1_0-Avahi-0_6Upgrade libndr0-32bitUpgrade libcupscgi1Upgrade p11-kit-nss-trustUpgrade ldb-toolsUpgrade libavahi-common3Upgrade libsamba-policy-develUpgrade avahi-compat-howl-develUpgrade python3-ldbUpgrade libsmbclient-raw0Upgrade samba-libsUpgrade libdcerpc-samr-develUpgrade samba-clientUpgrade libsamba-credentials-develUpgrade libavahi-client3Upgrade python-ldb-develUpgrade libndr0Upgrade libavahi-ui-gtk3-0Upgrade samba-krb-printingUpgrade libldb1Upgrade libsmbclient0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libndr1Upgrade libsamba-hostconfig0Upgrade libdcerpc0-32bitUpgrade libavahi-common3-32bitUpgrade cups-clientUpgrade libsmbclient-develUpgrade libcups2Upgrade avahi-autoipdUpgrade libsamba-errors-develUpgrade libsamba-passdb-develUpgrade cupsUpgrade libtasn1-develUpgrade ctdbUpgrade libwbclient0Upgrade python-ldbUpgrade libdcerpc0Upgrade libsamba-policy0-python3Upgrade libsamba-errors0-32bitUpgrade samba-kdcUpgrade libp11-kit0-32bitUpgrade tevent-manUpgrade libsamba-policy0-32bitUpgrade libsamba-policy-python3-develUpgrade libgensec0Upgrade libsamba-credentials0-32bitUpgrade libavahi-client3-32bitUpgrade libnettle-develUpgrade cups-ddkUpgrade libp11-kit0Upgrade libhogweed4Upgrade samba-client-32bitUpgrade avahi-utils-gtkUpgrade libsamdb0-32bitUpgrade samba-testUpgrade libnetapi0-32bitUpgrade libtdb-develUpgrade libdns_sdUpgrade libndr-nbt-develUpgrade libdcerpc-binding0-32bitUpgrade libsamba-credentials0Upgrade libsmbldap0-32bitUpgrade libtdb1Upgrade libtasn1Upgrade libnetapi-develUpgrade avahiUpgrade libsmbldap2Upgrade libcupsppdc1Upgrade libndr-standard0Upgrade python3-ldb-32bitUpgrade gnutlsUpgrade p11-kitUpgrade libgamin-1-0Upgrade python3-talloc-develUpgrade libsamba-util0Upgrade libtevent-util-develUpgrade libsmbldap0Upgrade libnettle6-32bitUpgrade libsmbclient0Upgrade libavahi-glib-develUpgrade libhowl0Upgrade libregistry0Upgrade libtevent0-32bitUpgrade libsamdb-develUpgrade libsmbconf-develUpgrade libndr-standard-develUpgrade samba-libs-32bitUpgrade avahi-compat-mDNSResponder-devel | Apr 11, 2019 | Apr 9, 2019 |
| Ubuntu | — | Upgrade libsmbclientUpgrade samba | Apr 11, 2019 | Apr 8, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub