A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share. Versions before 4.8.11, 4.9.6 and 4.10.2 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)
- CVSS 3.0 Base Score: 4.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Apr 22, 2019 | Apr 9, 2019 |
| Amazon Linux Ami 2 | — | Upgrade samba-testUpgrade samba-client-libsUpgrade samba-vfs-glusterfsUpgrade ctdbUpgrade samba-krb5-printingUpgrade ctdb-testsUpgrade samba-dcUpgrade samba-commonUpgrade libwbclientUpgrade samba-pythonUpgrade samba-python-testUpgrade samba-debuginfoUpgrade samba-develUpgrade samba-pidlUpgrade samba-winbind-clientsUpgrade sambaUpgrade libsmbclient-develUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-libsUpgrade samba-common-libsUpgrade samba-dc-libsUpgrade libwbclient-develUpgrade samba-test-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-winbind-modules | Apr 27, 2020 | Apr 9, 2019 |
| Amazon_linux | — | Upgrade samba | Dec 20, 2019 | Apr 9, 2019 |
| Centos_linux | — | Upgrade samba-libsUpgrade samba-vfs-glusterfsUpgrade libsmbclient-debuginfoUpgrade python3-sambaUpgrade ctdbUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade samba-commonUpgrade samba-dcUpgrade samba-pythonUpgrade samba-debugsourceUpgrade libwbclientUpgrade samba-test-libsUpgrade samba-debuginfoUpgrade ctdb-tests-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-testUpgrade libwbclient-debuginfoUpgrade samba-develUpgrade samba-krb5-printingUpgrade samba-libs-debuginfoUpgrade libsmbclient-develUpgrade samba-winbind-modules-debuginfoUpgrade samba-test-libs-debuginfoUpgrade sambaUpgrade samba-test-debuginfoUpgrade samba-client-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade ctdb-debuginfoUpgrade samba-winbindUpgrade samba-common-libs-debuginfoUpgrade libsmbclientUpgrade samba-krb5-printing-debuginfoUpgrade ctdb-testsUpgrade samba-winbind-modulesUpgrade libwbclient-develUpgrade samba-python-testUpgrade samba-common-tools-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-pidlUpgrade samba-common-toolsUpgrade samba-vfs-glusterfs-debuginfoUpgrade python3-samba-testUpgrade samba-common-libsUpgrade python3-samba-debuginfoUpgrade samba-dc-libsUpgrade samba-client-libsUpgrade samba-winbind-clients | Aug 28, 2019 | Apr 9, 2019 |
| Debian | — | Upgrade samba | Apr 8, 2019 | Apr 8, 2019 |
| Freebsd | — | Upgrade samba49Upgrade samba46Upgrade samba47Upgrade samba410Upgrade samba48 | May 18, 2019 | May 14, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-pythonUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade samba-commonUpgrade samba | Jul 23, 2019 | Apr 9, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-client-libsUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade sambaUpgrade libwbclientUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-libsUpgrade samba-python | Sep 25, 2019 | Apr 9, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-libsUpgrade samba-pythonUpgrade sambaUpgrade samba-common-toolsUpgrade samba-winbindUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade samba-winbind-clients | Jul 2, 2019 | Apr 9, 2019 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Apr 9, 2019 |
| Oracle_linux | — | Upgrade libsmbclient-develUpgrade samba-common-libsUpgrade samba-test-libsUpgrade libsmbclientUpgrade samba-python-testUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade python3-samba-testUpgrade samba-vfs-glusterfsUpgrade samba-testUpgrade samba-pidlUpgrade samba-krb5-printingUpgrade samba-develUpgrade libwbclientUpgrade samba-client-libsUpgrade python3-sambaUpgrade samba-dcUpgrade sambaUpgrade libwbclient-develUpgrade ctdb-testsUpgrade samba-pythonUpgrade ctdbUpgrade samba-winbindUpgrade samba-libs | Jul 21, 2020 | Apr 9, 2019 |
| Redhat_linux | — | Upgrade samba-krb5-printingUpgrade samba-libs-debuginfoUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-client-debuginfoUpgrade samba-pythonUpgrade samba-common-toolsUpgrade samba-winbind-modules-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-develUpgrade sambaUpgrade samba-winbind-clients-debuginfoUpgrade samba-commonUpgrade samba-winbindUpgrade samba-debuginfoUpgrade python3-sambaUpgrade samba-client-libsUpgrade python3-samba-testUpgrade libwbclientUpgrade samba-libsUpgrade python3-samba-debuginfoUpgrade samba-test-debuginfoUpgrade samba-test-libsUpgrade libsmbclient-develUpgrade samba-krb5-printing-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-python-testUpgrade libsmbclientUpgrade ctdb-debuginfoUpgrade ctdb-testsUpgrade samba-dcUpgrade samba-debugsourceUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-common-libs-debuginfoUpgrade ctdb-tests-debuginfoUpgrade samba-winbind-clientsNo solution existsUpgrade samba-vfs-glusterfsUpgrade samba-common-tools-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-dc-libsUpgrade ctdbUpgrade samba-client-libs-debuginfoUpgrade libwbclient-develUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-pidlUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-testUpgrade libsmbclient-debuginfo | Aug 7, 2019 | Apr 9, 2019 |
| Samba | — | Upgrade to Samba version 4.9.6Upgrade to Samba version 4.10.2Upgrade to Samba version 4.8.11 | Apr 30, 2019 | Apr 9, 2019 |
| Suse | — | Upgrade libndr-krb5pac0Upgrade libcupsmime1Upgrade gamin-develUpgrade libldb-develUpgrade libnetapi0Upgrade libtevent0Upgrade libavahi-glib1Upgrade libtalloc-develUpgrade libsmbclient-raw0-32bitUpgrade libsmbldap2-32bitUpgrade libndr1-32bitUpgrade samba-dsdb-modulesUpgrade libtevent-util0Upgrade samba-winbindUpgrade libsamba-policy0Upgrade libdcerpc-develUpgrade talloc-manUpgrade libndr-krb5pac-develUpgrade libtalloc2-32bitUpgrade libtasn1-6-32bitUpgrade libwbclient0-32bitUpgrade cups-develUpgrade libtdb1-32bitUpgrade libcups2-32bitUpgrade libcupsimage2Upgrade libfam0-gamin-32bitUpgrade libsmbconf0-32bitUpgrade libgnutls30Upgrade libdcerpc-samr0-32bitUpgrade libgnutlsxx-develUpgrade libsamba-hostconfig0-32bitUpgrade libnettle6Upgrade ctdb-pcp-pmdaUpgrade sambaUpgrade samba-winbind-32bitUpgrade python-ldb-32bitUpgrade libdcerpc-samr0Upgrade samba-libs-python3-32bitUpgrade p11-kit-toolsUpgrade libsamba-hostconfig-develUpgrade samba-core-develUpgrade libavahi-ui0Upgrade libndr-standard0-32bitUpgrade libdcerpc-atsvc0Upgrade avahi-utilsUpgrade libavahi-develUpgrade libavahi-gobject-develUpgrade python-tallocUpgrade libgnutlsxx28Upgrade libsamdb0Upgrade tdb-toolsUpgrade libtasn1-6Upgrade samba-libs-python3Upgrade ldapsmbUpgrade samba-python3Upgrade libtevent-util0-32bitUpgrade p11-kit-develUpgrade libgnutls-develUpgrade libdcerpc-binding0Upgrade libndr-nbt0Upgrade libsmbldap-develUpgrade libndr-nbt0-32bitUpgrade libtevent-develUpgrade avahi-langUpgrade libavahi-gobject0Upgrade libfam0-gaminUpgrade libsamba-passdb0Upgrade python-talloc-develUpgrade samba-cephUpgrade samba-docUpgrade libsamba-passdb0-32bitUpgrade libavahi-core7Upgrade samba-kdc-32bitUpgrade samba-pythonUpgrade libsmbconf0Upgrade samba-32bitUpgrade libldb1-32bitUpgrade libgnutls30-32bitUpgrade libgensec0-32bitUpgrade libwbclient-develUpgrade libhogweed4-32bitUpgrade python3-tallocUpgrade libndr-develUpgrade ctdb-testsUpgrade samba-pidlUpgrade libtalloc2Upgrade python3-ldb-develUpgrade libsamba-errors0Upgrade libavahi-ui-gtk3-0Upgrade libwbclient0Upgrade libcups2Upgrade python-ldbUpgrade libsamba-util-develUpgrade libndr-standard0Upgrade samba-kdcUpgrade libldb1Upgrade libregistry0Upgrade libnettle6-32bitUpgrade libsamba-hostconfig0Upgrade typelib-1_0-Avahi-0_6Upgrade libndr-standard-develUpgrade libsmbclient-develUpgrade ctdbUpgrade libavahi-client3Upgrade libndr0Upgrade avahi-autoipdUpgrade libsamdb-develUpgrade libavahi-glib-develUpgrade python-ldb-develUpgrade avahiUpgrade samba-libs-32bitUpgrade libsmbclient0-32bitUpgrade libhogweed4Upgrade libndr-krb5pac0-32bitUpgrade libsamba-policy0-python3Upgrade samba-testUpgrade libsamba-credentials-develUpgrade libnetapi0-32bitUpgrade python3-ldb-32bitUpgrade libgamin-1-0Upgrade avahi-utils-gtkUpgrade libsmbldap2Upgrade libsmbldap0Upgrade libsamba-policy0-32bitUpgrade libsmbclient0Upgrade libsmbconf-develUpgrade libsamba-policy-python3-develUpgrade libp11-kit0Upgrade libsamba-errors-develUpgrade libdns_sdUpgrade cups-ddkUpgrade python3-talloc-develUpgrade libtasn1-develUpgrade libsamba-credentials0-32bitUpgrade libsamba-util0Upgrade libtasn1Upgrade libtevent0-32bitUpgrade libdcerpc0-32bitUpgrade python3-ldbUpgrade p11-kit-nss-trustUpgrade libsmbclient-raw0Upgrade libdcerpc-samr-develUpgrade libcupscgi1Upgrade libsamba-policy-develUpgrade libavahi-common3Upgrade samba-clientUpgrade samba-libsUpgrade ldb-toolsUpgrade libnetapi-develUpgrade libsamdb0-32bitUpgrade libtevent-util-develUpgrade cups-clientUpgrade libavahi-client3-32bitUpgrade samba-krb-printingUpgrade cupsUpgrade avahi-compat-mDNSResponder-develUpgrade python-avahiUpgrade libavahi-common3-32bitUpgrade libnettle-develUpgrade libsamba-util0-32bitUpgrade libp11-kit0-32bitUpgrade libtdb-develUpgrade libdcerpc0Upgrade libgensec0Upgrade libndr0-32bitUpgrade avahi-compat-howl-develUpgrade libsamba-errors0-32bitUpgrade tevent-manUpgrade libsamba-passdb-develUpgrade libndr1Upgrade libsamba-credentials0Upgrade p11-kitUpgrade libndr-nbt-develUpgrade libdcerpc-binding0-32bitUpgrade libhowl0Upgrade libcupsppdc1Upgrade libtdb1Upgrade gnutlsUpgrade libsmbldap0-32bitUpgrade cups-configUpgrade samba-client-32bit | Apr 11, 2019 | Apr 9, 2019 |
| Ubuntu | — | Upgrade libsmbclientUpgrade samba | Apr 11, 2019 | Apr 8, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub