A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share. Versions before 4.8.11, 4.9.6 and 4.10.2 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)
- CVSS 3.0 Base Score: 4.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Apr 22, 2019 | Apr 9, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libsmbclient-develUpgrade samba-test-libsUpgrade samba-dc-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbindUpgrade samba-common-libsUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade libwbclient-develUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-libsUpgrade samba-debuginfoUpgrade samba-pythonUpgrade samba-python-testUpgrade libwbclientUpgrade samba-pidlUpgrade ctdbUpgrade samba-develUpgrade samba-vfs-glusterfsUpgrade samba-dcUpgrade samba-commonUpgrade samba-testUpgrade ctdb-testsUpgrade samba-client-libsUpgrade samba-krb5-printing | Apr 27, 2020 | Apr 9, 2019 |
| Amazon_linux | — | Upgrade samba | Dec 20, 2019 | Apr 9, 2019 |
| Centos_linux | — | Upgrade samba-common-toolsUpgrade python3-samba-testUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade libsmbclientUpgrade samba-common-libsUpgrade ctdb-debuginfoUpgrade samba-common-tools-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-dc-libsUpgrade samba-pidlUpgrade samba-winbind-clientsUpgrade samba-krb5-printing-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-modulesUpgrade ctdb-testsUpgrade libwbclient-develUpgrade samba-winbindUpgrade samba-python-testUpgrade samba-winbind-clients-debuginfoUpgrade samba-client-libsUpgrade samba-common-libs-debuginfoUpgrade sambaUpgrade ctdbUpgrade samba-clientUpgrade libwbclientUpgrade samba-vfs-glusterfsUpgrade samba-debuginfoUpgrade samba-test-libsUpgrade samba-testUpgrade python3-sambaUpgrade samba-pythonUpgrade samba-winbind-krb5-locatorUpgrade samba-libsUpgrade samba-dcUpgrade samba-client-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-krb5-printingUpgrade libsmbclient-develUpgrade samba-test-debuginfoUpgrade ctdb-tests-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-commonUpgrade libwbclient-debuginfoUpgrade samba-develUpgrade samba-debugsourceUpgrade samba-winbind-debuginfoUpgrade samba-libs-debuginfo | Aug 28, 2019 | Apr 9, 2019 |
| Debian | — | Upgrade samba | Apr 8, 2019 | Apr 8, 2019 |
| Freebsd | — | Upgrade samba49Upgrade samba46Upgrade samba410Upgrade samba48Upgrade samba47 | May 18, 2019 | May 14, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-libsUpgrade samba-commonUpgrade samba-clientUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-client-libsUpgrade libwbclient | Jul 23, 2019 | Apr 9, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-libsUpgrade libwbclientUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade sambaUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-common-libsUpgrade samba-common-tools | Sep 25, 2019 | Apr 9, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-commonUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade libwbclientUpgrade sambaUpgrade samba-pythonUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-client-libs | Jul 2, 2019 | Apr 9, 2019 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4Upgrade service/network/samba to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Apr 9, 2019 |
| Oracle_linux | — | Upgrade samba-pidlUpgrade sambaUpgrade samba-libsUpgrade samba-dcUpgrade ctdbUpgrade samba-winbindUpgrade samba-pythonUpgrade samba-testUpgrade samba-vfs-glusterfsUpgrade libwbclientUpgrade samba-client-libsUpgrade libwbclient-develUpgrade ctdb-testsUpgrade samba-develUpgrade samba-krb5-printingUpgrade python3-sambaUpgrade samba-commonUpgrade samba-python-testUpgrade samba-winbind-clientsUpgrade python3-samba-testUpgrade samba-test-libsUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade libsmbclient-develUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-dc-libsUpgrade libsmbclientUpgrade samba-winbind-krb5-locator | Jul 21, 2020 | Apr 9, 2019 |
| Redhat_linux | — | Upgrade libwbclient-develUpgrade samba-common-tools-debuginfoUpgrade samba-dc-libsUpgrade samba-pidlUpgrade ctdb-tests-debuginfoNo solution existsUpgrade samba-common-libs-debuginfoUpgrade samba-dcUpgrade samba-test-libs-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-clientsUpgrade samba-python-testUpgrade samba-testUpgrade samba-debugsourceUpgrade samba-winbind-krb5-locator-debuginfoUpgrade ctdb-testsUpgrade libwbclient-debuginfoUpgrade libsmbclientUpgrade samba-vfs-glusterfsUpgrade ctdbUpgrade samba-vfs-glusterfs-debuginfoUpgrade ctdb-debuginfoUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-krb5-printingUpgrade samba-test-debuginfoUpgrade python3-samba-debuginfoUpgrade python3-sambaUpgrade libsmbclient-debuginfoUpgrade samba-develUpgrade python3-samba-testUpgrade samba-client-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-debuginfoUpgrade samba-winbind-debuginfoUpgrade libsmbclient-develUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-pythonUpgrade samba-winbind-modules-debuginfoUpgrade samba-client-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbindUpgrade samba-winbind-clients-debuginfoUpgrade sambaUpgrade samba-test-libsUpgrade samba-libsUpgrade libwbclientUpgrade samba-commonUpgrade samba-libs-debuginfo | Aug 7, 2019 | Apr 9, 2019 |
| Samba | — | Upgrade to Samba version 4.9.6Upgrade to Samba version 4.10.2Upgrade to Samba version 4.8.11 | Apr 30, 2019 | Apr 9, 2019 |
| Suse | — | Upgrade libndr-standard0Upgrade ldb-toolsUpgrade cups-configUpgrade libcupsppdc1Upgrade libdcerpc-binding0-32bitUpgrade libndr1Upgrade libtdb1Upgrade p11-kitUpgrade libsamba-credentials0Upgrade samba-client-32bitUpgrade libsamba-util-develUpgrade libhowl0Upgrade libp11-kit0-32bitUpgrade libndr-nbt-develUpgrade libsmbldap0-32bitUpgrade libnetapi-develUpgrade libsamba-policy-python3-develUpgrade libsamba-errors-develUpgrade libsmbconf-develUpgrade libtdb-develUpgrade libdcerpc0-32bitUpgrade python-ldbUpgrade libavahi-client3Upgrade libsmbclient0-32bitUpgrade samba-libs-32bitUpgrade samba-kdcUpgrade libavahi-common3-32bitUpgrade python-avahiUpgrade libsmbldap0Upgrade avahi-autoipdUpgrade libsamba-credentials0-32bitUpgrade cups-ddkUpgrade cups-clientUpgrade libtevent0-32bitUpgrade cupsUpgrade avahi-compat-mDNSResponder-develUpgrade libsamdb0-32bitUpgrade libsmbclient-develUpgrade libsamba-util0-32bitUpgrade ctdbUpgrade libnettle-develUpgrade libcups2Upgrade tevent-manUpgrade libndr-standard-develUpgrade python3-talloc-develUpgrade libwbclient0Upgrade libsamba-policy-develUpgrade libdns_sdUpgrade libsamba-credentials-develUpgrade libsamba-errors0-32bitUpgrade typelib-1_0-Avahi-0_6Upgrade libsamdb-develUpgrade libcupscgi1Upgrade libndr-krb5pac0-32bitUpgrade python3-ldbUpgrade p11-kit-nss-trustUpgrade samba-clientUpgrade libavahi-glib-develUpgrade libsmbclient-raw0Upgrade samba-libsUpgrade libndr0-32bitUpgrade avahi-compat-howl-develUpgrade libp11-kit0Upgrade libtasn1Upgrade libavahi-common3Upgrade python-ldb-develUpgrade libsamba-hostconfig0Upgrade libsamba-passdb-develUpgrade libnettle6-32bitUpgrade libsamba-util0Upgrade libavahi-ui-gtk3-0Upgrade gnutlsUpgrade libldb1Upgrade libndr0Upgrade libhogweed4Upgrade samba-krb-printingUpgrade samba-testUpgrade libtevent-util-develUpgrade libnetapi0-32bitUpgrade libregistry0Upgrade libavahi-client3-32bitUpgrade libsamba-policy0-python3Upgrade libdcerpc-samr-develUpgrade libdcerpc0Upgrade libtasn1-develUpgrade libgensec0Upgrade libsmbldap2Upgrade libsmbclient0Upgrade avahiUpgrade avahi-utils-gtkUpgrade libgamin-1-0Upgrade python3-ldb-32bitUpgrade libsamba-policy0-32bitUpgrade samba-pythonUpgrade samba-32bitUpgrade libgensec0-32bitUpgrade samba-dsdb-modulesUpgrade python3-ldb-develUpgrade libdcerpc-binding0Upgrade samba-libs-python3Upgrade libsamdb0Upgrade libtevent-develUpgrade libtevent-util0-32bitUpgrade libsmbldap-develUpgrade samba-winbind-32bitUpgrade ldapsmbUpgrade avahi-langUpgrade libgnutls-develUpgrade libndr-nbt0Upgrade libndr-nbt0-32bitUpgrade python3-tallocUpgrade libavahi-ui0Upgrade samba-kdc-32bitUpgrade libgnutls30-32bitUpgrade samba-libs-python3-32bitUpgrade libsamba-errors0Upgrade libwbclient-develUpgrade libhogweed4-32bitUpgrade libgnutlsxx-develUpgrade libfam0-gaminUpgrade samba-python3Upgrade libsmbconf0Upgrade libgnutls30Upgrade libdcerpc-samr0-32bitUpgrade libdcerpc-atsvc0Upgrade libcupsimage2Upgrade cups-develUpgrade libavahi-gobject0Upgrade libtasn1-6-32bitUpgrade ctdb-pcp-pmdaUpgrade avahi-utilsUpgrade libgnutlsxx28Upgrade libavahi-core7Upgrade libnettle6Upgrade sambaUpgrade p11-kit-toolsUpgrade libsamba-hostconfig0-32bitUpgrade libdcerpc-samr0Upgrade libnetapi0Upgrade python-talloc-develUpgrade libtevent-util0Upgrade libndr-krb5pac0Upgrade gamin-develUpgrade libcupsmime1Upgrade libndr1-32bitUpgrade libtevent0Upgrade libldb-develUpgrade libtalloc2Upgrade libavahi-gobject-develUpgrade libavahi-glib1Upgrade libsmbldap2-32bitUpgrade libsamba-policy0Upgrade libndr-standard0-32bitUpgrade libndr-krb5pac-develUpgrade libfam0-gamin-32bitUpgrade libcups2-32bitUpgrade libdcerpc-develUpgrade libtalloc2-32bitUpgrade libldb1-32bitUpgrade talloc-manUpgrade samba-winbindUpgrade libtdb1-32bitUpgrade libwbclient0-32bitUpgrade libsmbconf0-32bitUpgrade python-tallocUpgrade libsamba-passdb0-32bitUpgrade libtasn1-6Upgrade p11-kit-develUpgrade libsamba-hostconfig-develUpgrade libtalloc-develUpgrade libsmbclient-raw0-32bitUpgrade libndr-develUpgrade ctdb-testsUpgrade samba-cephUpgrade libsamba-passdb0Upgrade python-ldb-32bitUpgrade samba-docUpgrade tdb-toolsUpgrade samba-core-develUpgrade libavahi-develUpgrade samba-pidl | Apr 11, 2019 | Apr 9, 2019 |
| Ubuntu | — | Upgrade libsmbclientUpgrade samba | Apr 11, 2019 | Apr 8, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub