A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or modify share metadata, to perform this operation outside of the share.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade samba-winexeUpgrade samba-winbind-krb5-locatorUpgrade libsmbclient-develUpgrade samba-testUpgrade ctdbUpgrade samba-krb5-printingUpgrade samba-develUpgrade python3-samba-testUpgrade samba-libsUpgrade samba-commonUpgrade samba-test-libsUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-clientUpgrade libwbclientUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-pidlUpgrade python3-sambaUpgrade libsmbclientUpgrade libwbclient-develUpgrade samba-vfs-iouringUpgrade samba-client-libs | May 13, 2022 | May 10, 2022 |
| Alpine Linux | — | Upgrade samba | Mar 21, 2024 | Aug 23, 2022 |
| Amazon_linux_2023 | — | Upgrade samba-develUpgrade libnetapi-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-client-libsUpgrade samba-commonUpgrade samba-krb5-printingUpgrade samba-debugsourceUpgrade samba-pidlUpgrade samba-dc-libs-debuginfoUpgrade samba-testUpgrade libsmbclient-debuginfoUpgrade samba-winbindUpgrade python3-samba-develUpgrade sambaUpgrade libnetapi-develUpgrade samba-vfs-iouringUpgrade libwbclient-debuginfoUpgrade python3-sambaUpgrade samba-winbind-modules-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-usersharesUpgrade libwbclientUpgrade samba-test-debuginfoUpgrade samba-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-clientsUpgrade samba-libs-debuginfoUpgrade samba-client-debuginfoUpgrade samba-libsUpgrade samba-common-libsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-ldb-ldap-modules-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-test-libsUpgrade samba-ldb-ldap-modulesUpgrade libsmbclient-develUpgrade libnetapiUpgrade samba-winbind-debuginfoUpgrade samba-clientUpgrade samba-vfs-iouring-debuginfoUpgrade libsmbclientUpgrade samba-dcerpc-debuginfoUpgrade samba-dcerpcUpgrade samba-winbind-clients-debuginfoUpgrade samba-dc-libsUpgrade python3-samba-testUpgrade libwbclient-develUpgrade samba-winbind-modules | Feb 17, 2025 | Jan 10, 2022 |
| Centos_linux | — | Upgrade samba-winbind-debuginfoUpgrade samba-winbind-clientsUpgrade samba-libs-debuginfoUpgrade samba-pidlUpgrade samba-winbind-modulesUpgrade samba-test-libs-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-debugsourceUpgrade ctdbUpgrade samba-winbind-modules-debuginfoUpgrade samba-commonUpgrade samba-client-libs-debuginfoUpgrade python3-samba-testUpgrade libsmbclient-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade libsmbclientUpgrade samba-vfs-iouringUpgrade samba-winbindUpgrade ctdb-debuginfoUpgrade sambaUpgrade samba-client-libsUpgrade samba-common-libsUpgrade samba-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clients-debuginfoUpgrade samba-common-toolsUpgrade samba-common-libs-debuginfoUpgrade libwbclientUpgrade python3-sambaUpgrade samba-client-debuginfoUpgrade samba-testUpgrade samba-krb5-printing-debuginfoUpgrade samba-test-debuginfoUpgrade samba-libsUpgrade python3-samba-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-clientUpgrade samba-test-libsUpgrade samba-krb5-printingUpgrade samba-common-tools-debuginfo | May 13, 2022 | May 10, 2022 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Aug 23, 2022 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Aug 23, 2022 |
| Oracle_linux | — | Upgrade python3-samba-testUpgrade samba-winbind-modulesUpgrade samba-pidlUpgrade samba-client-libsUpgrade libwbclient-develUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-winexeUpgrade samba-vfs-iouringUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-libsUpgrade python3-sambaUpgrade libsmbclient-develUpgrade samba-test-libsUpgrade samba-krb5-printingUpgrade libwbclientUpgrade ctdbUpgrade samba-commonUpgrade samba-clientUpgrade samba-testUpgrade samba-develUpgrade samba | May 18, 2022 | Jan 10, 2022 |
| Redhat_linux | — | Upgrade samba-winbindUpgrade samba-develUpgrade sambaUpgrade samba-debuginfoUpgrade samba-libsUpgrade libsmbclientUpgrade samba-client-libs-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-commonUpgrade libwbclient-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-winbind-modulesUpgrade libwbclient-develUpgrade python3-sambaUpgrade ctdbUpgrade python3-samba-testUpgrade samba-pidlUpgrade libwbclientUpgrade ctdb-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winexe-debuginfoUpgrade samba-client-libsUpgrade samba-vfs-iouringUpgrade libsmbclient-develUpgrade samba-winbind-modules-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-debugsourceUpgrade samba-winbind-krb5-locatorUpgrade samba-winexeUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-client-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-test-debuginfoUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locator-debuginfoNo solution existsUpgrade samba-krb5-printingUpgrade samba-winbind-debuginfoUpgrade samba-test-libsUpgrade samba-krb5-printing-debuginfoUpgrade samba-testUpgrade samba-winbind-clientsUpgrade samba-common-libs-debuginfoUpgrade samba-common-tools-debuginfo | May 13, 2022 | May 10, 2022 |
| Rocky_linux | — | Upgrade samba-test-libs-debuginfoUpgrade samba-clientUpgrade ctdbUpgrade python3-sambaUpgrade samba-winbind-krb5-locator-debuginfoUpgrade libsmbclient-develUpgrade samba-debuginfoUpgrade samba-test-debuginfoUpgrade samba-test-libsUpgrade samba-libsUpgrade samba-testUpgrade libsmbclient-debuginfoUpgrade samba-winexeUpgrade samba-winbind-krb5-locatorUpgrade samba-krb5-printingUpgrade samba-libs-debuginfoUpgrade samba-develUpgrade libwbclient-debuginfoUpgrade samba-debugsourceUpgrade libwbclientUpgrade samba-common-toolsUpgrade sambaUpgrade samba-common-tools-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-winbind-modulesUpgrade samba-winexe-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-clientsUpgrade samba-winbind-clients-debuginfoUpgrade samba-common-libsUpgrade samba-client-libs-debuginfoUpgrade python3-samba-testUpgrade samba-winbind-debuginfoUpgrade ctdb-debuginfoUpgrade samba-vfs-iouringUpgrade samba-client-libsUpgrade samba-common-libs-debuginfoUpgrade libsmbclientUpgrade samba-client-debuginfoUpgrade libwbclient-develUpgrade samba-winbindUpgrade python3-samba-debuginfo | May 20, 2022 | May 18, 2022 |
| Suse | — | Upgrade libp11-kit0Upgrade python3-tdb-32bitUpgrade libsss_nss_idmap0Upgrade krb5-devel-32bitUpgrade libsamba-policy-develUpgrade samba-devel-32bitUpgrade sssd-ldapUpgrade libsamba-policy0-python3Upgrade ldb-toolsUpgrade python-sssd-configUpgrade sssd-krb5Upgrade krb5-plugin-kdb-ldapUpgrade samba-toolUpgrade python3-talloc-develUpgrade tevent-manUpgrade perl-apparmorUpgrade libnettle6-32bitUpgrade apparmor-profilesUpgrade libsamba-policy0-python3-32bitUpgrade libtevent0-32bitUpgrade ctdbUpgrade python3-talloc-32bitUpgrade samba-develUpgrade libp11-kit0-32bitUpgrade libtdb1-32bitUpgrade libsss_simpleifp0Upgrade samba-client-64bitUpgrade libhogweed4Upgrade python3-teventUpgrade krb5-plugin-preauth-otpUpgrade python3-ldb-32bitUpgrade krb5-mini-develUpgrade krb5-miniUpgrade python3-tallocUpgrade samba-client-32bitUpgrade libsss_certmap0Upgrade apparmor-parserUpgrade ca-certificatesUpgrade sssdUpgrade libsss_idmap0Upgrade libsamba-policy-python3-develUpgrade sssd-wbclient-develUpgrade samba-libs-32bitUpgrade p11-kit-develUpgrade pam_apparmor-32bitUpgrade libtdb1Upgrade libtdb-develUpgrade libsss_certmap-develUpgrade apparmor-utils-langUpgrade samba-gpupdateUpgrade libldb2Upgrade apparmor-docsUpgrade python3-sssd-configUpgrade p11-kit-nss-trustUpgrade libsamba-policy0-python3-64bitUpgrade samba-clientUpgrade ruby-apparmorUpgrade libipa_hbac-develUpgrade krb5-serverUpgrade krb5-develUpgrade pam_apparmorUpgrade p11-kitUpgrade python3-ldbUpgrade apparmor-abstractionsUpgrade python3-apparmorUpgrade samba-client-libs-32bitUpgrade python3-ldb-develUpgrade yast2-samba-clientUpgrade krb5-plugin-preauth-pkinitUpgrade apparmor-utilsUpgrade libapparmor-develUpgrade sssd-proxyUpgrade sssd-toolsUpgrade apache2-mod_apparmorUpgrade libldb2-32bitUpgrade libapparmor1-32bitUpgrade samba-winbind-libs-32bitUpgrade samba-libs-python3-32bitUpgrade samba-python3Upgrade samba-ad-dcUpgrade python3-tevent-32bitUpgrade sssd-krb5-commonUpgrade libsss_idmap-develUpgrade libsss_simpleifp-develUpgrade sssd-dbusUpgrade krb5Upgrade libgnutls30Upgrade samba-libs-python3Upgrade libhogweed4-32bitUpgrade samba-testUpgrade samba-client-libsUpgrade talloc-manUpgrade tdb-toolsUpgrade sssd-adUpgrade samba-ldb-ldapUpgrade libtalloc-develUpgrade samba-dsdb-modulesUpgrade apparmor-parser-langUpgrade samba-ad-dc-libs-32bitUpgrade sssd-commonUpgrade python3-sss-murmurUpgrade libgnutls30-32bitUpgrade p11-kit-toolsUpgrade ctdb-pcp-pmdaUpgrade samba-libsUpgrade samba-ad-dc-libsUpgrade libnfsidmap-sssUpgrade sssd-wbclientUpgrade libtevent0Upgrade libapparmor1Upgrade samba-libs-python3-64bitUpgrade python3-tdbUpgrade libsss_nss_idmap-develUpgrade libipa_hbac0Upgrade samba-docUpgrade sambaUpgrade p11-kit-32bitUpgrade samba-libs-64bitUpgrade libtalloc2-32bitUpgrade krb5-clientUpgrade krb5-32bitUpgrade python3-ipa_hbacUpgrade samba-winbind-libsUpgrade libldb-develUpgrade python3-sss_nss_idmapUpgrade samba-winbindUpgrade libtevent-develUpgrade sssd-ipaUpgrade samba-cephUpgrade krb5-plugin-preauth-spakeUpgrade libtalloc2Upgrade sssd-winbind-idmapUpgrade libnettle6 | Feb 2, 2022 | Feb 1, 2022 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Aug 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub