A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or modify share metadata, to perform this operation outside of the share.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade samba-vfs-iouringUpgrade samba-pidlUpgrade sambaUpgrade libwbclientUpgrade samba-winbindUpgrade python3-sambaUpgrade libwbclient-develUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade samba-develUpgrade samba-commonUpgrade samba-clientUpgrade libsmbclient-develUpgrade samba-common-toolsUpgrade ctdbUpgrade samba-testUpgrade python3-samba-testUpgrade samba-krb5-printingUpgrade samba-test-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-winexe | May 13, 2022 | May 10, 2022 |
| Alpine Linux | — | Upgrade samba | Mar 21, 2024 | Aug 23, 2022 |
| Amazon_linux_2023 | — | Upgrade samba-vfs-iouring-debuginfoUpgrade samba-ldb-ldap-modules-debuginfoUpgrade libsmbclient-develUpgrade samba-winbind-debuginfoUpgrade samba-client-libs-debuginfoUpgrade libnetapiUpgrade samba-dcerpc-debuginfoUpgrade samba-libsUpgrade samba-ldb-ldap-modulesUpgrade samba-test-libsUpgrade samba-winbind-modulesUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-clientsUpgrade libwbclient-develUpgrade python3-samba-testUpgrade samba-winbind-clients-debuginfoUpgrade python3-samba-debuginfoUpgrade libsmbclientUpgrade samba-dc-libsUpgrade samba-dcerpcUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-libs-debuginfoUpgrade samba-client-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-common-toolsUpgrade samba-debugsourceUpgrade samba-pidlUpgrade samba-client-libsUpgrade sambaUpgrade libsmbclient-debuginfoUpgrade samba-vfs-iouringUpgrade samba-common-libs-debuginfoUpgrade libwbclientUpgrade samba-common-tools-debuginfoUpgrade libnetapi-develUpgrade samba-usersharesUpgrade samba-test-libs-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-develUpgrade python3-sambaUpgrade samba-test-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade python3-samba-develUpgrade samba-debuginfoUpgrade libnetapi-debuginfoUpgrade samba-krb5-printingUpgrade samba-testUpgrade samba-commonUpgrade samba-winbind | Feb 17, 2025 | Jan 10, 2022 |
| Centos_linux | — | Upgrade libsmbclientUpgrade samba-test-libs-debuginfoUpgrade samba-pidlUpgrade samba-winbind-modules-debuginfoUpgrade samba-winbind-debuginfoUpgrade ctdbUpgrade samba-debugsourceUpgrade ctdb-debuginfoUpgrade samba-client-libsUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade libsmbclient-debuginfoUpgrade python3-samba-testUpgrade sambaUpgrade libwbclient-debuginfoUpgrade samba-winbind-modulesUpgrade samba-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-winbindUpgrade samba-vfs-iouringUpgrade samba-commonUpgrade samba-testUpgrade samba-client-debuginfoUpgrade samba-clientUpgrade samba-common-tools-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-krb5-printing-debuginfoUpgrade samba-test-debuginfoUpgrade samba-test-libsUpgrade samba-krb5-printingUpgrade samba-libsUpgrade python3-sambaUpgrade libwbclientUpgrade python3-samba-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-common-tools | May 13, 2022 | May 10, 2022 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Aug 23, 2022 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Aug 23, 2022 |
| Oracle_linux | — | Upgrade samba-winbindUpgrade python3-samba-testUpgrade samba-winbind-modulesUpgrade samba-pidlUpgrade samba-winbind-clientsUpgrade samba-vfs-iouringUpgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba-common-libsUpgrade samba-winexeUpgrade libwbclient-develUpgrade libsmbclient-develUpgrade samba-krb5-printingUpgrade python3-sambaUpgrade samba-clientUpgrade samba-testUpgrade samba-commonUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-libsUpgrade ctdbUpgrade samba-develUpgrade samba-test-libsUpgrade samba | May 18, 2022 | Jan 10, 2022 |
| Redhat_linux | — | Upgrade samba-common-libsUpgrade samba-winbind-clients-debuginfoUpgrade samba-testUpgrade samba-winbind-debuginfoUpgrade samba-test-libsUpgrade samba-winbind-clientsUpgrade samba-test-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-client-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-common-tools-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoNo solution existsUpgrade python3-samba-debuginfoUpgrade samba-krb5-printingUpgrade samba-winexeUpgrade python3-samba-testUpgrade samba-debugsourceUpgrade libwbclient-debuginfoUpgrade samba-winbind-modulesUpgrade samba-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade python3-sambaUpgrade samba-client-libsUpgrade samba-test-libs-debuginfoUpgrade ctdbUpgrade libwbclient-develUpgrade samba-winexe-debuginfoUpgrade ctdb-debuginfoUpgrade sambaUpgrade samba-develUpgrade samba-pidlUpgrade samba-commonUpgrade samba-winbind-modules-debuginfoUpgrade samba-winbindUpgrade samba-libs-debuginfoUpgrade libwbclientUpgrade libsmbclientUpgrade samba-vfs-iouringUpgrade samba-client-libs-debuginfoUpgrade samba-libsUpgrade libsmbclient-develUpgrade libsmbclient-debuginfo | May 13, 2022 | May 10, 2022 |
| Rocky_linux | — | Upgrade libsmbclientUpgrade samba-common-libsUpgrade ctdb-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-common-libs-debuginfoUpgrade samba-winexe-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade python3-samba-testUpgrade samba-client-libsUpgrade libwbclient-develUpgrade python3-samba-debuginfoUpgrade samba-winbindUpgrade samba-client-debuginfoUpgrade samba-vfs-iouringUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade sambaUpgrade libwbclientUpgrade samba-testUpgrade python3-sambaUpgrade samba-common-tools-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-test-libsUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-debugsourceUpgrade libwbclient-debuginfoUpgrade libsmbclient-develUpgrade samba-libs-debuginfoUpgrade samba-krb5-printingUpgrade libsmbclient-debuginfoUpgrade samba-test-debuginfoUpgrade samba-debuginfoUpgrade ctdbUpgrade samba-develUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-libsUpgrade samba-winexeUpgrade samba-winbind-modules-debuginfo | May 20, 2022 | May 18, 2022 |
| Suse | — | Upgrade python3-ldb-32bitUpgrade python3-tallocUpgrade ctdbUpgrade pam_apparmor-32bitUpgrade krb5-plugin-kdb-ldapUpgrade p11-kitUpgrade krb5-develUpgrade sssdUpgrade libipa_hbac-develUpgrade pam_apparmorUpgrade apparmor-docsUpgrade p11-kit-nss-trustUpgrade libsss_certmap-develUpgrade apparmor-profilesUpgrade python-sssd-configUpgrade samba-client-32bitUpgrade libtdb1Upgrade apparmor-utils-langUpgrade libp11-kit0-32bitUpgrade samba-devel-32bitUpgrade python3-talloc-develUpgrade libtevent0-32bitUpgrade samba-client-libs-32bitUpgrade libtdb1-32bitUpgrade python3-apparmorUpgrade sssd-ldapUpgrade libldb2Upgrade python3-tdb-32bitUpgrade samba-libs-32bitUpgrade apparmor-abstractionsUpgrade python3-sssd-configUpgrade libtdb-develUpgrade ldb-toolsUpgrade krb5-plugin-preauth-otpUpgrade libsamba-policy-python3-develUpgrade samba-gpupdateUpgrade sssd-krb5Upgrade libsss_idmap0Upgrade sssd-wbclient-develUpgrade ruby-apparmorUpgrade libsamba-policy0-python3-64bitUpgrade samba-toolUpgrade python3-ldbUpgrade krb5-mini-develUpgrade tevent-manUpgrade p11-kit-develUpgrade perl-apparmorUpgrade libsss_simpleifp0Upgrade python3-talloc-32bitUpgrade krb5-miniUpgrade libnettle6-32bitUpgrade libsamba-policy0-python3-32bitUpgrade samba-develUpgrade libhogweed4Upgrade apparmor-parserUpgrade python3-teventUpgrade krb5-devel-32bitUpgrade libsss_nss_idmap0Upgrade libsss_certmap0Upgrade samba-client-64bitUpgrade samba-clientUpgrade libsamba-policy0-python3Upgrade libsamba-policy-develUpgrade libp11-kit0Upgrade krb5-serverUpgrade ca-certificatesUpgrade samba-docUpgrade samba-ad-dc-libs-32bitUpgrade apparmor-parser-langUpgrade samba-python3Upgrade samba-client-libsUpgrade yast2-samba-clientUpgrade krb5Upgrade libgnutls30Upgrade samba-libs-python3Upgrade sssd-krb5-commonUpgrade sssd-winbind-idmapUpgrade sssd-proxyUpgrade python3-ldb-develUpgrade samba-cephUpgrade sssd-ipaUpgrade libtalloc2Upgrade samba-winbindUpgrade p11-kit-32bitUpgrade krb5-plugin-preauth-spakeUpgrade libsss_nss_idmap-develUpgrade libipa_hbac0Upgrade apparmor-utilsUpgrade samba-testUpgrade samba-ad-dcUpgrade libapparmor-develUpgrade python3-sss_nss_idmapUpgrade sssd-toolsUpgrade samba-winbind-libsUpgrade samba-libs-python3-64bitUpgrade sssd-wbclientUpgrade libldb-develUpgrade libtevent0Upgrade python3-tdbUpgrade samba-libsUpgrade libapparmor1Upgrade samba-ad-dc-libsUpgrade talloc-manUpgrade p11-kit-toolsUpgrade sambaUpgrade libnettle6Upgrade apache2-mod_apparmorUpgrade libtalloc-develUpgrade libnfsidmap-sssUpgrade libapparmor1-32bitUpgrade libldb2-32bitUpgrade samba-dsdb-modulesUpgrade samba-libs-python3-32bitUpgrade libhogweed4-32bitUpgrade libtevent-develUpgrade samba-libs-64bitUpgrade samba-winbind-libs-32bitUpgrade python3-tevent-32bitUpgrade samba-ldb-ldapUpgrade krb5-plugin-preauth-pkinitUpgrade sssd-dbusUpgrade libsss_simpleifp-develUpgrade libsss_idmap-develUpgrade libgnutls30-32bitUpgrade python3-ipa_hbacUpgrade krb5-32bitUpgrade libtalloc2-32bitUpgrade tdb-toolsUpgrade krb5-clientUpgrade ctdb-pcp-pmdaUpgrade sssd-adUpgrade sssd-commonUpgrade python3-sss-murmur | Feb 2, 2022 | Feb 1, 2022 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Aug 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub