A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or modify share metadata, to perform this operation outside of the share.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsmbclient-develUpgrade samba-testUpgrade ctdbUpgrade samba-common-toolsUpgrade samba-krb5-printingUpgrade samba-winbind-clientsUpgrade samba-test-libsUpgrade samba-clientUpgrade samba-winexeUpgrade python3-samba-testUpgrade samba-common-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-libsUpgrade samba-develUpgrade samba-commonUpgrade libwbclient-develUpgrade samba-winbindUpgrade samba-pidlUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade sambaUpgrade libwbclientUpgrade python3-sambaUpgrade libsmbclientUpgrade samba-vfs-iouring | May 13, 2022 | May 10, 2022 |
| Alpine Linux | — | Upgrade samba | Mar 21, 2024 | Aug 23, 2022 |
| Amazon_linux_2023 | — | Upgrade libnetapi-debuginfoUpgrade python3-samba-develUpgrade samba-test-debuginfoUpgrade samba-debuginfoUpgrade libwbclientUpgrade libwbclient-debuginfoUpgrade samba-pidlUpgrade samba-testUpgrade samba-krb5-printingUpgrade samba-usersharesUpgrade samba-common-tools-debuginfoUpgrade samba-test-libs-debuginfoUpgrade sambaUpgrade samba-common-libs-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade samba-client-libsUpgrade samba-develUpgrade samba-commonUpgrade libnetapi-develUpgrade samba-vfs-iouringUpgrade samba-debugsourceUpgrade samba-winbindUpgrade libsmbclient-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade python3-sambaUpgrade libsmbclient-develUpgrade samba-libsUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-clientUpgrade libwbclient-develUpgrade samba-dcerpcUpgrade samba-winbind-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade samba-client-libs-debuginfoUpgrade libnetapiUpgrade samba-krb5-printing-debuginfoUpgrade samba-dcerpc-debuginfoUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade python3-samba-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-test-libsUpgrade samba-common-libsUpgrade python3-samba-testUpgrade samba-winbind-clients-debuginfoUpgrade samba-dc-libsUpgrade samba-libs-debuginfoUpgrade samba-client-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade libsmbclient | Feb 17, 2025 | Jan 10, 2022 |
| Centos_linux | — | Upgrade samba-winbind-modulesUpgrade samba-libs-debuginfoUpgrade samba-test-libs-debuginfoUpgrade libsmbclientUpgrade samba-client-libs-debuginfoUpgrade samba-commonUpgrade libwbclient-debuginfoUpgrade samba-winbindUpgrade ctdbUpgrade ctdb-debuginfoUpgrade sambaUpgrade samba-vfs-iouringUpgrade libsmbclient-debuginfoUpgrade python3-samba-testUpgrade samba-winbind-debuginfoUpgrade samba-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-debugsourceUpgrade samba-winbind-modules-debuginfoUpgrade samba-client-libsUpgrade samba-pidlUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-krb5-printingUpgrade samba-clientUpgrade samba-common-tools-debuginfoUpgrade samba-libsUpgrade samba-test-debuginfoUpgrade samba-testUpgrade python3-sambaUpgrade libwbclientUpgrade samba-krb5-printing-debuginfoUpgrade samba-client-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libs | May 13, 2022 | May 10, 2022 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Aug 23, 2022 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Aug 23, 2022 |
| Oracle_linux | — | Upgrade sambaUpgrade ctdbUpgrade python3-sambaUpgrade libwbclientUpgrade samba-develUpgrade samba-common-toolsUpgrade libsmbclient-develUpgrade samba-libsUpgrade samba-test-libsUpgrade samba-commonUpgrade samba-testUpgrade samba-krb5-printingUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-winexeUpgrade samba-client-libsUpgrade samba-vfs-iouringUpgrade samba-winbind-krb5-locatorUpgrade libwbclient-develUpgrade python3-samba-testUpgrade samba-pidlUpgrade samba-common-libsUpgrade samba-winbind-modules | May 18, 2022 | Jan 10, 2022 |
| Redhat_linux | — | Upgrade python3-sambaUpgrade libsmbclient-develUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade ctdbUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-debuginfoUpgrade samba-commonUpgrade libwbclient-debuginfoUpgrade libwbclientUpgrade samba-winexe-debuginfoUpgrade libwbclient-develUpgrade samba-client-libsUpgrade samba-debugsourceUpgrade samba-vfs-iouring-debuginfoUpgrade libsmbclientUpgrade samba-libs-debuginfoUpgrade sambaUpgrade samba-develUpgrade samba-vfs-iouringUpgrade ctdb-debuginfoUpgrade python3-samba-testUpgrade samba-pidlUpgrade samba-common-tools-debuginfoUpgrade samba-common-toolsUpgrade samba-krb5-printing-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-common-libsUpgrade samba-test-libsUpgrade samba-winbind-clients-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-winexeUpgrade python3-samba-debuginfoUpgrade samba-winbind-clientsUpgrade samba-test-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-client-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-testUpgrade samba-krb5-printingUpgrade samba-clientNo solution exists | May 13, 2022 | May 10, 2022 |
| Rocky_linux | — | Upgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-winexe-debuginfoUpgrade python3-samba-testUpgrade samba-client-libs-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-vfs-iouringUpgrade samba-winbind-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-common-libsUpgrade libsmbclientUpgrade libwbclient-develUpgrade ctdb-debuginfoUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade python3-samba-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-client-debuginfoUpgrade samba-krb5-printingUpgrade libsmbclient-debuginfoUpgrade libwbclientUpgrade samba-test-debuginfoUpgrade samba-debuginfoUpgrade libsmbclient-develUpgrade samba-debugsourceUpgrade samba-winbind-krb5-locatorUpgrade libwbclient-debuginfoUpgrade ctdbUpgrade sambaUpgrade samba-develUpgrade samba-common-toolsUpgrade samba-winbind-modules-debuginfoUpgrade samba-libs-debuginfoUpgrade python3-sambaUpgrade samba-test-libsUpgrade samba-common-tools-debuginfoUpgrade samba-clientUpgrade samba-test-libs-debuginfoUpgrade samba-libsUpgrade samba-winexeUpgrade samba-testUpgrade samba-winbind-krb5-locator-debuginfo | May 20, 2022 | May 18, 2022 |
| Suse | — | Upgrade ctdb-pcp-pmdaUpgrade python3-sss-murmurUpgrade krb5-32bitUpgrade libhogweed4-32bitUpgrade samba-ldb-ldapUpgrade samba-testUpgrade p11-kit-toolsUpgrade krb5-clientUpgrade apparmor-utilsUpgrade tdb-toolsUpgrade python3-ipa_hbacUpgrade libtalloc2-32bitUpgrade sssd-commonUpgrade samba-winbind-libsUpgrade sssd-toolsUpgrade samba-client-libsUpgrade sssd-adUpgrade samba-ad-dc-libs-32bitUpgrade samba-libs-64bitUpgrade samba-winbindUpgrade sssd-ipaUpgrade krb5-plugin-preauth-spakeUpgrade libgnutls30-32bitUpgrade sssd-proxyUpgrade libgnutls30Upgrade apparmor-parser-langUpgrade libtalloc2Upgrade samba-dsdb-modulesUpgrade libapparmor1-32bitUpgrade samba-cephUpgrade libldb2-32bitUpgrade libnfsidmap-sssUpgrade samba-libs-python3-64bitUpgrade libtalloc-develUpgrade libapparmor1Upgrade samba-ad-dc-libsUpgrade libtevent0Upgrade samba-libs-python3-32bitUpgrade samba-libsUpgrade python3-tdbUpgrade sssd-winbind-idmapUpgrade libldb-develUpgrade sssd-wbclientUpgrade samba-winbind-libs-32bitUpgrade sssd-krb5-commonUpgrade krb5Upgrade python3-tevent-32bitUpgrade sssd-dbusUpgrade samba-python3Upgrade krb5-plugin-preauth-pkinitUpgrade libsss_simpleifp-develUpgrade python3-sss_nss_idmapUpgrade yast2-samba-clientUpgrade p11-kit-32bitUpgrade libsss_nss_idmap-develUpgrade samba-libs-python3Upgrade samba-ad-dcUpgrade samba-docUpgrade libsss_idmap-develUpgrade apache2-mod_apparmorUpgrade libnettle6Upgrade libapparmor-develUpgrade libtevent-develUpgrade python3-ldb-develUpgrade talloc-manUpgrade libipa_hbac0Upgrade sambaUpgrade python3-talloc-32bitUpgrade p11-kit-nss-trustUpgrade samba-client-libs-32bitUpgrade krb5-develUpgrade python3-apparmorUpgrade apparmor-abstractionsUpgrade krb5-serverUpgrade python3-ldbUpgrade sssd-wbclient-develUpgrade libsss_idmap0Upgrade libsamba-policy0-python3-64bitUpgrade p11-kitUpgrade pam_apparmorUpgrade perl-apparmorUpgrade libsamba-policy0-python3Upgrade python3-tdb-32bitUpgrade pam_apparmor-32bitUpgrade python3-ldb-32bitUpgrade libsamba-policy-develUpgrade sssd-ldapUpgrade libnettle6-32bitUpgrade ctdbUpgrade ruby-apparmorUpgrade samba-devel-32bitUpgrade libldb2Upgrade apparmor-parserUpgrade libsss_nss_idmap0Upgrade libp11-kit0Upgrade python3-teventUpgrade libhogweed4Upgrade ca-certificatesUpgrade apparmor-utils-langUpgrade sssdUpgrade samba-develUpgrade krb5-devel-32bitUpgrade krb5-plugin-preauth-otpUpgrade samba-client-64bitUpgrade samba-gpupdateUpgrade apparmor-docsUpgrade libsss_simpleifp0Upgrade libsamba-policy0-python3-32bitUpgrade python3-sssd-configUpgrade libipa_hbac-develUpgrade p11-kit-develUpgrade libsss_certmap-develUpgrade libtevent0-32bitUpgrade krb5-mini-develUpgrade apparmor-profilesUpgrade libtdb1-32bitUpgrade libp11-kit0-32bitUpgrade libsamba-policy-python3-develUpgrade samba-libs-32bitUpgrade libtdb-develUpgrade python3-tallocUpgrade tevent-manUpgrade samba-toolUpgrade samba-client-32bitUpgrade ldb-toolsUpgrade libtdb1Upgrade krb5-plugin-kdb-ldapUpgrade python-sssd-configUpgrade sssd-krb5Upgrade libsss_certmap0Upgrade krb5-miniUpgrade python3-talloc-develUpgrade samba-client | Feb 2, 2022 | Feb 1, 2022 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Aug 23, 2022 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub