A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or modify share metadata, to perform this operation outside of the share.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade samba-testUpgrade samba-common-libsUpgrade libsmbclient-develUpgrade samba-winbind-krb5-locatorUpgrade samba-krb5-printingUpgrade samba-develUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade python3-samba-testUpgrade ctdbUpgrade samba-clientUpgrade samba-winexeUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-test-libsUpgrade sambaUpgrade samba-winbindUpgrade samba-client-libsUpgrade libsmbclientUpgrade libwbclient-develUpgrade samba-pidlUpgrade libwbclientUpgrade samba-vfs-iouringUpgrade python3-sambaUpgrade samba-winbind-modules | May 13, 2022 | May 10, 2022 |
| Alpine Linux | — | Upgrade samba | Mar 21, 2024 | Aug 23, 2022 |
| Amazon_linux_2023 | — | Upgrade samba-common-tools-debuginfoUpgrade libwbclientUpgrade python3-sambaUpgrade python3-samba-develUpgrade libwbclient-debuginfoUpgrade samba-usersharesUpgrade libnetapi-develUpgrade samba-test-libs-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-krb5-printingUpgrade samba-pidlUpgrade samba-develUpgrade libnetapi-debuginfoUpgrade samba-client-libsUpgrade samba-commonUpgrade samba-vfs-iouringUpgrade samba-winbindUpgrade libsmbclient-debuginfoUpgrade sambaUpgrade samba-common-libs-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade samba-debuginfoUpgrade samba-debugsourceUpgrade samba-testUpgrade samba-test-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade samba-dcerpc-debuginfoUpgrade libsmbclientUpgrade samba-vfs-iouring-debuginfoUpgrade libnetapiUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-common-libsUpgrade samba-test-libsUpgrade python3-samba-debuginfoUpgrade samba-client-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-winbind-clientsUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-clientUpgrade samba-libsUpgrade python3-samba-testUpgrade libwbclient-develUpgrade samba-winbind-clients-debuginfoUpgrade samba-dcerpcUpgrade samba-dc-libsUpgrade libsmbclient-develUpgrade samba-winbind-debuginfoUpgrade samba-ldb-ldap-modules | Feb 17, 2025 | Jan 10, 2022 |
| Centos_linux | — | Upgrade samba-commonUpgrade samba-winbind-modules-debuginfoUpgrade ctdb-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-winbind-debuginfoUpgrade libsmbclientUpgrade python3-samba-testUpgrade sambaUpgrade samba-pidlUpgrade samba-winbind-clientsUpgrade samba-debugsourceUpgrade samba-winbind-modulesUpgrade samba-libs-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-vfs-iouringUpgrade samba-winbindUpgrade samba-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-common-libsUpgrade ctdbUpgrade samba-client-libsUpgrade samba-winbind-krb5-locatorUpgrade python3-sambaUpgrade libwbclientUpgrade samba-winbind-clients-debuginfoUpgrade samba-common-toolsUpgrade samba-common-libs-debuginfoUpgrade samba-clientUpgrade samba-krb5-printingUpgrade samba-common-tools-debuginfoUpgrade samba-test-libsUpgrade samba-libsUpgrade python3-samba-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-test-debuginfoUpgrade samba-testUpgrade samba-krb5-printing-debuginfoUpgrade samba-client-debuginfo | May 13, 2022 | May 10, 2022 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Aug 23, 2022 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Aug 23, 2022 |
| Oracle_linux | — | Upgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-winexeUpgrade samba-client-libsUpgrade samba-vfs-iouringUpgrade samba-common-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade python3-samba-testUpgrade libwbclient-develUpgrade samba-winbindUpgrade samba-pidlUpgrade libsmbclient-develUpgrade samba-commonUpgrade samba-krb5-printingUpgrade samba-test-libsUpgrade samba-clientUpgrade sambaUpgrade ctdbUpgrade samba-develUpgrade libwbclientUpgrade python3-sambaUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-test | May 18, 2022 | Jan 10, 2022 |
| Redhat_linux | — | Upgrade python3-samba-debuginfoUpgrade samba-testUpgrade samba-test-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade samba-krb5-printingUpgrade samba-common-tools-debuginfoNo solution existsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-common-toolsUpgrade samba-common-libs-debuginfoUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-winexeUpgrade samba-winbind-clients-debuginfoUpgrade samba-test-libsUpgrade samba-client-debuginfoUpgrade libwbclientUpgrade samba-libsUpgrade samba-winexe-debuginfoUpgrade libsmbclientUpgrade samba-debugsourceUpgrade samba-client-libsUpgrade sambaUpgrade samba-develUpgrade samba-vfs-iouringUpgrade samba-test-libs-debuginfoUpgrade samba-commonUpgrade samba-winbindUpgrade samba-client-libs-debuginfoUpgrade libsmbclient-develUpgrade samba-libs-debuginfoUpgrade python3-sambaUpgrade libwbclient-develUpgrade ctdbUpgrade samba-winbind-modules-debuginfoUpgrade samba-winbind-modulesUpgrade samba-debuginfoUpgrade ctdb-debuginfoUpgrade python3-samba-testUpgrade samba-pidlUpgrade libsmbclient-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-vfs-iouring-debuginfo | May 13, 2022 | May 10, 2022 |
| Rocky_linux | — | Upgrade samba-winbind-debuginfoUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-winexe-debuginfoUpgrade samba-winbind-clientsUpgrade samba-vfs-iouringUpgrade samba-winbind-clients-debuginfoUpgrade python3-samba-testUpgrade samba-client-libs-debuginfoUpgrade libsmbclientUpgrade ctdb-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade libwbclient-develUpgrade samba-common-libs-debuginfoUpgrade samba-client-libsUpgrade samba-client-debuginfoUpgrade samba-winbindUpgrade samba-krb5-printing-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-common-tools-debuginfoUpgrade libsmbclient-develUpgrade samba-krb5-printingUpgrade libsmbclient-debuginfoUpgrade sambaUpgrade samba-test-libs-debuginfoUpgrade samba-clientUpgrade samba-test-libsUpgrade samba-libsUpgrade samba-winexeUpgrade samba-winbind-modules-debuginfoUpgrade python3-sambaUpgrade samba-winbind-krb5-locatorUpgrade libwbclient-debuginfoUpgrade samba-debugsourceUpgrade libwbclientUpgrade samba-testUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-test-debuginfoUpgrade samba-develUpgrade samba-debuginfoUpgrade samba-common-toolsUpgrade ctdbUpgrade samba-libs-debuginfo | May 20, 2022 | May 18, 2022 |
| Suse | — | Upgrade ruby-apparmorUpgrade ldb-toolsUpgrade libtdb1Upgrade tevent-manUpgrade krb5-plugin-kdb-ldapUpgrade sssd-wbclient-develUpgrade python-sssd-configUpgrade sssd-krb5Upgrade krb5-develUpgrade apparmor-parserUpgrade libhogweed4Upgrade python3-teventUpgrade sssdUpgrade libsss_nss_idmap0Upgrade krb5-mini-develUpgrade python3-ldbUpgrade libp11-kit0Upgrade ca-certificatesUpgrade python3-tallocUpgrade krb5-miniUpgrade samba-toolUpgrade samba-client-32bitUpgrade libsamba-policy0-python3-64bitUpgrade libsss_idmap0Upgrade ctdbUpgrade samba-clientUpgrade libtdb-develUpgrade libnettle6-32bitUpgrade libsamba-policy0-python3-32bitUpgrade sssd-ldapUpgrade libsss_certmap0Upgrade apparmor-abstractionsUpgrade libipa_hbac-develUpgrade python3-apparmorUpgrade libsss_simpleifp0Upgrade pam_apparmorUpgrade p11-kitUpgrade samba-client-libs-32bitUpgrade samba-devel-32bitUpgrade pam_apparmor-32bitUpgrade libsamba-policy0-python3Upgrade libsamba-policy-develUpgrade libldb2Upgrade krb5-serverUpgrade p11-kit-nss-trustUpgrade krb5-devel-32bitUpgrade libtdb1-32bitUpgrade samba-develUpgrade perl-apparmorUpgrade python3-talloc-32bitUpgrade apparmor-utils-langUpgrade samba-client-64bitUpgrade p11-kit-develUpgrade python3-sssd-configUpgrade apparmor-docsUpgrade python3-ldb-32bitUpgrade libsss_certmap-develUpgrade samba-gpupdateUpgrade libp11-kit0-32bitUpgrade libsamba-policy-python3-develUpgrade libtevent0-32bitUpgrade python3-talloc-develUpgrade samba-libs-32bitUpgrade apparmor-profilesUpgrade python3-tdb-32bitUpgrade krb5-plugin-preauth-otpUpgrade libapparmor1-32bitUpgrade samba-libs-python3-32bitUpgrade yast2-samba-clientUpgrade libgnutls30Upgrade krb5-32bitUpgrade sssd-winbind-idmapUpgrade apparmor-parser-langUpgrade libldb2-32bitUpgrade libtalloc-develUpgrade samba-dsdb-modulesUpgrade samba-winbind-libs-32bitUpgrade libnfsidmap-sssUpgrade samba-client-libsUpgrade krb5Upgrade python3-sss-murmurUpgrade samba-docUpgrade sssd-ipaUpgrade libnettle6Upgrade samba-libs-python3-64bitUpgrade sssd-toolsUpgrade samba-winbind-libsUpgrade libtevent-develUpgrade apache2-mod_apparmorUpgrade libldb-develUpgrade libtevent0Upgrade sssd-proxyUpgrade libapparmor1Upgrade libsss_simpleifp-develUpgrade sssd-wbclientUpgrade samba-cephUpgrade libtalloc2Upgrade python3-sss_nss_idmapUpgrade python3-ldb-develUpgrade samba-winbindUpgrade samba-libsUpgrade krb5-plugin-preauth-spakeUpgrade samba-ad-dcUpgrade python3-tdbUpgrade samba-ad-dc-libsUpgrade libapparmor-develUpgrade sssd-commonUpgrade libtalloc2-32bitUpgrade tdb-toolsUpgrade libgnutls30-32bitUpgrade krb5-clientUpgrade ctdb-pcp-pmdaUpgrade sssd-adUpgrade p11-kit-32bitUpgrade samba-ad-dc-libs-32bitUpgrade samba-libs-python3Upgrade libsss_nss_idmap-develUpgrade libipa_hbac0Upgrade sssd-krb5-commonUpgrade sssd-dbusUpgrade samba-python3Upgrade python3-tevent-32bitUpgrade libsss_idmap-develUpgrade krb5-plugin-preauth-pkinitUpgrade libhogweed4-32bitUpgrade python3-ipa_hbacUpgrade apparmor-utilsUpgrade p11-kit-toolsUpgrade samba-testUpgrade talloc-manUpgrade samba-libs-64bitUpgrade samba-ldb-ldapUpgrade samba | Feb 2, 2022 | Feb 1, 2022 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Aug 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub