A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share. Versions before 4.8.11, 4.9.6 and 4.10.2 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)
- CVSS 3.0 Base Score: 4.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Apr 22, 2019 | Apr 9, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libsmbclientUpgrade samba-winbind-clientsUpgrade libsmbclient-develUpgrade samba-winbindUpgrade sambaUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-dc-libsUpgrade libwbclient-develUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade samba-python-testUpgrade samba-pythonUpgrade ctdbUpgrade samba-commonUpgrade samba-client-libsUpgrade samba-krb5-printingUpgrade samba-testUpgrade samba-debuginfoUpgrade samba-pidlUpgrade libwbclientUpgrade samba-develUpgrade samba-vfs-glusterfsUpgrade ctdb-testsUpgrade samba-dc | Apr 27, 2020 | Apr 9, 2019 |
| Amazon_linux | — | Upgrade samba | Dec 20, 2019 | Apr 9, 2019 |
| Centos_linux | — | Upgrade samba-libs-debuginfoUpgrade samba-pythonUpgrade samba-winbind-krb5-locatorUpgrade samba-krb5-printingUpgrade ctdbUpgrade samba-debugsourceUpgrade libsmbclient-develUpgrade samba-debuginfoUpgrade samba-vfs-glusterfsUpgrade samba-develUpgrade samba-test-libs-debuginfoUpgrade samba-commonUpgrade ctdb-tests-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-testUpgrade libwbclientUpgrade samba-client-debuginfoUpgrade samba-test-libsUpgrade python3-sambaUpgrade sambaUpgrade samba-winbind-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-test-debuginfoUpgrade samba-clientUpgrade samba-libsUpgrade samba-dcUpgrade python3-samba-debuginfoUpgrade samba-pidlUpgrade samba-winbind-modulesUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-common-toolsUpgrade samba-client-libs-debuginfoUpgrade python3-samba-testUpgrade samba-common-libsUpgrade samba-krb5-printing-debuginfoUpgrade libwbclient-develUpgrade samba-winbind-clients-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-client-libsUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade ctdb-testsUpgrade samba-common-tools-debuginfoUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-dc-libsUpgrade samba-python-testUpgrade ctdb-debuginfo | Aug 28, 2019 | Apr 9, 2019 |
| Debian | — | Upgrade samba | Apr 8, 2019 | Apr 8, 2019 |
| Freebsd | — | Upgrade samba46Upgrade samba49Upgrade samba410Upgrade samba48Upgrade samba47 | May 18, 2019 | May 14, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-winbindUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-pythonUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade sambaUpgrade samba-libsUpgrade samba-client | Jul 23, 2019 | Apr 9, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-commonUpgrade sambaUpgrade samba-libsUpgrade libwbclientUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-common-tools | Sep 25, 2019 | Apr 9, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-winbindUpgrade samba-pythonUpgrade samba-common-toolsUpgrade sambaUpgrade libwbclientUpgrade samba-libsUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-client | Jul 2, 2019 | Apr 9, 2019 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4Upgrade service/network/samba to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Apr 9, 2019 |
| Oracle_linux | — | Upgrade samba-clientUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade python3-samba-testUpgrade samba-dc-libsUpgrade samba-python-testUpgrade samba-common-libsUpgrade samba-test-libsUpgrade libsmbclient-develUpgrade samba-common-toolsUpgrade samba-krb5-printingUpgrade libwbclient-develUpgrade samba-dcUpgrade samba-pidlUpgrade samba-vfs-glusterfsUpgrade samba-develUpgrade ctdb-testsUpgrade ctdbUpgrade sambaUpgrade samba-winbindUpgrade samba-libsUpgrade samba-client-libsUpgrade samba-pythonUpgrade libwbclientUpgrade samba-testUpgrade python3-samba | Jul 21, 2020 | Apr 9, 2019 |
| Redhat_linux | — | Upgrade samba-testUpgrade samba-winbind-modulesUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-debugsourceUpgrade ctdb-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-vfs-glusterfsUpgrade samba-dc-libsUpgrade ctdb-testsUpgrade samba-common-libsUpgrade samba-test-libs-debuginfoUpgrade samba-common-libs-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-vfs-glusterfs-debuginfoUpgrade ctdb-tests-debuginfoUpgrade libwbclient-develUpgrade libsmbclientUpgrade samba-python-testUpgrade samba-dcUpgrade ctdbUpgrade samba-pidlUpgrade samba-client-libs-debuginfoNo solution existsUpgrade samba-winbind-clientsUpgrade samba-test-libsUpgrade samba-winbind-clients-debuginfoUpgrade samba-winbindUpgrade samba-winbind-modules-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade python3-samba-testUpgrade libsmbclient-debuginfoUpgrade samba-debuginfoUpgrade samba-clientUpgrade samba-develUpgrade samba-test-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-client-libsUpgrade samba-commonUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-pythonUpgrade libsmbclient-develUpgrade samba-client-debuginfoUpgrade libwbclientUpgrade python3-sambaUpgrade samba-krb5-printingUpgrade samba-winbind-debuginfoUpgrade sambaUpgrade samba-libs-debuginfoUpgrade samba-winbind-krb5-locator | Aug 7, 2019 | Apr 9, 2019 |
| Samba | — | Upgrade to Samba version 4.9.6Upgrade to Samba version 4.8.11Upgrade to Samba version 4.10.2 | Apr 30, 2019 | Apr 9, 2019 |
| Suse | — | Upgrade libgamin-1-0Upgrade libtasn1-develUpgrade python3-ldb-32bitUpgrade python3-talloc-develUpgrade libsamba-passdb-develUpgrade libsamba-policy-python3-develUpgrade libregistry0Upgrade libnettle6-32bitUpgrade gnutlsUpgrade libsamba-policy0-32bitUpgrade libsmbclient0Upgrade libsmbconf-develUpgrade libavahi-ui-gtk3-0Upgrade samba-krb-printingUpgrade libsamba-util0Upgrade libndr-nbt-develUpgrade libhowl0Upgrade libndr0Upgrade libtdb1Upgrade libsamba-hostconfig0Upgrade libndr-standard-develUpgrade libavahi-glib-develUpgrade samba-client-32bitUpgrade libdcerpc-binding0-32bitUpgrade libndr-standard0Upgrade samba-kdcUpgrade libtevent0-32bitUpgrade python-ldbUpgrade libnettle-develUpgrade libldb1Upgrade libnetapi-develUpgrade libsamdb0-32bitUpgrade cupsUpgrade libsamba-util-develUpgrade libsamba-util0-32bitUpgrade libp11-kit0-32bitUpgrade libsmbclient-develUpgrade libtasn1Upgrade libdcerpc0Upgrade libgensec0Upgrade libtdb-develUpgrade python-avahiUpgrade ctdbUpgrade libavahi-client3-32bitUpgrade avahi-compat-mDNSResponder-develUpgrade libavahi-common3-32bitUpgrade libcups2Upgrade cups-clientUpgrade libtevent-util-develUpgrade libsamba-credentials-develUpgrade libsmbclient0-32bitUpgrade avahi-autoipdUpgrade python-ldb-develUpgrade libdcerpc0-32bitUpgrade samba-testUpgrade samba-libs-32bitUpgrade libsamdb-develUpgrade libsamba-errors0-32bitUpgrade libsamba-policy0-python3Upgrade tevent-manUpgrade libndr-krb5pac0-32bitUpgrade libwbclient0Upgrade libavahi-client3Upgrade cups-ddkUpgrade libsamba-credentials0-32bitUpgrade libp11-kit0Upgrade avahiUpgrade libsamba-errors-develUpgrade libhogweed4Upgrade libdns_sdUpgrade libnetapi0-32bitUpgrade avahi-utils-gtkUpgrade libcupsppdc1Upgrade libsmbldap0Upgrade cups-configUpgrade libndr1Upgrade libsmbldap0-32bitUpgrade libsmbldap2Upgrade samba-libsUpgrade typelib-1_0-Avahi-0_6Upgrade python3-ldbUpgrade libcupscgi1Upgrade libsamba-policy-develUpgrade libavahi-common3Upgrade p11-kitUpgrade libndr0-32bitUpgrade ldb-toolsUpgrade avahi-compat-howl-develUpgrade libsamba-credentials0Upgrade libsmbclient-raw0Upgrade libdcerpc-samr-develUpgrade samba-clientUpgrade p11-kit-nss-trustUpgrade samba-kdc-32bitUpgrade libcupsmime1Upgrade samba-winbind-32bitUpgrade libgnutls30-32bitUpgrade python3-tallocUpgrade libsmbclient-raw0-32bitUpgrade libavahi-ui0Upgrade samba-dsdb-modulesUpgrade avahi-langUpgrade libsmbldap-develUpgrade python-ldb-32bitUpgrade libsamba-hostconfig-develUpgrade samba-winbindUpgrade libsamdb0Upgrade libtevent-util0-32bitUpgrade samba-libs-python3Upgrade libwbclient-develUpgrade python-tallocUpgrade libtalloc-develUpgrade python3-ldb-develUpgrade libsamba-errors0Upgrade libndr-develUpgrade libavahi-glib1Upgrade samba-pythonUpgrade ctdb-testsUpgrade libtalloc2Upgrade libhogweed4-32bitUpgrade samba-pidlUpgrade libgnutls-develUpgrade samba-cephUpgrade libndr-nbt0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libavahi-develUpgrade libnettle6Upgrade libavahi-gobject-develUpgrade libavahi-core7Upgrade avahi-utilsUpgrade samba-32bitUpgrade libndr-nbt0Upgrade p11-kit-toolsUpgrade sambaUpgrade samba-core-develUpgrade samba-docUpgrade ldapsmbUpgrade libdcerpc-samr0Upgrade libgensec0-32bitUpgrade ctdb-pcp-pmdaUpgrade libdcerpc-atsvc0Upgrade libsmbconf0Upgrade libtasn1-6-32bitUpgrade libgnutlsxx-develUpgrade libgnutls30Upgrade libdcerpc-samr0-32bitUpgrade libcupsimage2Upgrade cups-develUpgrade samba-python3Upgrade libavahi-gobject0Upgrade libfam0-gaminUpgrade libsmbldap2-32bitUpgrade libsamba-passdb0Upgrade samba-libs-python3-32bitUpgrade libndr-krb5pac-develUpgrade libsamba-policy0Upgrade libfam0-gamin-32bitUpgrade libgnutlsxx28Upgrade python-talloc-develUpgrade libdcerpc-binding0Upgrade p11-kit-develUpgrade libndr-standard0-32bitUpgrade libsmbconf0-32bitUpgrade libtalloc2-32bitUpgrade libtasn1-6Upgrade talloc-manUpgrade libwbclient0-32bitUpgrade libtevent-develUpgrade tdb-toolsUpgrade libsamba-passdb0-32bitUpgrade libldb1-32bitUpgrade libdcerpc-develUpgrade libcups2-32bitUpgrade libndr-krb5pac0Upgrade libtdb1-32bitUpgrade libldb-develUpgrade libtevent0Upgrade gamin-develUpgrade libnetapi0Upgrade libtevent-util0Upgrade libndr1-32bit | Apr 11, 2019 | Apr 9, 2019 |
| Ubuntu | — | Upgrade sambaUpgrade libsmbclient | Apr 11, 2019 | Apr 8, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub