A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libwbclient-develUpgrade samba-vfs-iouringUpgrade libsmbclient-develUpgrade samba-devel | May 4, 2022 | Mar 2, 2022 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Mar 2, 2022 |
| Centos_linux | — | Upgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-testUpgrade libwbclientUpgrade samba-krb5-printingUpgrade python3-sambaUpgrade samba-common-toolsUpgrade samba-winbind-clients-debuginfoUpgrade samba-clientUpgrade samba-client-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libs-debuginfoUpgrade samba-test-libsUpgrade samba-common-tools-debuginfoUpgrade samba-test-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-vfs-iouringUpgrade libwbclient-debuginfoUpgrade sambaUpgrade samba-winbind-clientsUpgrade ctdbUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba-debuginfoUpgrade ctdb-debuginfoUpgrade samba-client-libsUpgrade samba-vfs-iouring-debuginfoUpgrade samba-libsUpgrade samba-debugsourceUpgrade libsmbclientUpgrade libsmbclient-debuginfoUpgrade samba-winbind-modulesUpgrade python3-samba-testUpgrade samba-pidlUpgrade samba-libs-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-commonUpgrade samba-test-libs-debuginfo | Dec 14, 2021 | Dec 13, 2021 |
| Debian | — | Upgrade samba | Nov 4, 2022 | Mar 2, 2022 |
| Freebsd | — | Upgrade samba413Upgrade samba415Upgrade samba414 | Nov 4, 2022 | Nov 10, 2021 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Mar 2, 2022 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.13.8-11.4.42.0.1.113.0 on Solaris 11.4Upgrade service/network/samba to version 4.13.14-11.4.42.0.1.113.0 on Solaris 11.4 | Feb 17, 2022 | Feb 17, 2022 |
| Oracle_linux | — | Upgrade samba-clientUpgrade libsmbclient-develUpgrade samba-winexeUpgrade samba-develUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade sambaUpgrade samba-common-toolsUpgrade libsmbclientUpgrade libwbclient-develUpgrade python3-samba-testUpgrade samba-winbindUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-pidlUpgrade samba-test-libsUpgrade ctdbUpgrade python3-sambaUpgrade samba-client-libsUpgrade samba-testUpgrade samba-vfs-iouringUpgrade libwbclientUpgrade samba-krb5-printing | Dec 14, 2021 | Nov 9, 2021 |
| Redhat_linux | — | Upgrade samba-winbind-clients-debuginfoUpgrade samba-winexe-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-krb5-printingUpgrade python3-sambaUpgrade samba-testUpgrade samba-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-pidlUpgrade samba-client-libsUpgrade libsmbclient-debuginfoUpgrade ctdb-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-test-debuginfoUpgrade samba-debugsourceUpgrade libwbclientUpgrade ctdbUpgrade ctdb-testsUpgrade samba-libsUpgrade samba-libs-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-vfs-iouringUpgrade ctdb-tests-debuginfoUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-winbind-clientsUpgrade libwbclient-develUpgrade samba-common-libsUpgrade libsmbclient-develUpgrade samba-winbind-krb5-locatorUpgrade samba-commonUpgrade samba-develUpgrade python3-samba-debuginfoUpgrade libsmbclientUpgrade samba-vfs-iouring-debuginfoUpgrade samba-clientUpgrade samba-winbind-modules-debuginfoUpgrade samba-winexeUpgrade samba-test-libsUpgrade python3-samba-testUpgrade samba-winbindUpgrade samba-winbind-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-client-debuginfoUpgrade sambaUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-winbind-modules | Dec 14, 2021 | Dec 13, 2021 |
| Rocky_linux | — | Upgrade samba-test-debuginfoUpgrade samba-vfs-iouringUpgrade samba-test-libs-debuginfoUpgrade python3-samba-testUpgrade samba-krb5-printing-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-winexeUpgrade ctdbUpgrade samba-krb5-printingUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade libwbclient-develUpgrade python3-sambaUpgrade samba-winbindUpgrade ctdb-debuginfoUpgrade libsmbclient-debuginfoUpgrade libwbclientUpgrade samba-develUpgrade samba-winbind-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade sambaUpgrade samba-libsUpgrade libsmbclient-develUpgrade samba-client-debuginfoUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-winbind-clients-debuginfoUpgrade samba-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-test-libsUpgrade samba-clientUpgrade samba-testUpgrade samba-debugsourceUpgrade libwbclient-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-client-libsUpgrade samba-common-tools-debuginfoUpgrade samba-winexe-debuginfo | Mar 12, 2024 | Mar 2, 2022 |
| Samba | — | Upgrade to Samba 4.13.14 or later.Upgrade to Samba 4.14.10 or later.Upgrade to Samba 4.15.2 or later. | Mar 10, 2022 | Mar 2, 2022 |
| Suse | — | Upgrade samba-ad-dc-libsUpgrade libsmbldap2Upgrade samba-client-64bitUpgrade libndr-krb5pac0Upgrade libsmbconf0-32bitUpgrade libsamba-errors-develUpgrade libtevent-util0-32bitUpgrade libwbclient-develUpgrade ctdb-pcp-pmdaUpgrade libndr-standard0Upgrade python3-ldb-32bitUpgrade libsmbclient0-64bitUpgrade libsamba-passdb0-32bitUpgrade libsamba-errors0-64bitUpgrade samba-winbind-libsUpgrade libsamba-credentials0-32bitUpgrade libnetapi-devel-32bitUpgrade libsmbconf0Upgrade libsamba-errors0Upgrade libdcerpc0Upgrade libsmbclient0Upgrade libsamdb0Upgrade samba-winbind-libs-32bitUpgrade libdcerpc-binding0-32bitUpgrade libldb-develUpgrade libsamba-passdb0-64bitUpgrade libsamba-hostconfig0-64bitUpgrade libsamba-util0-64bitUpgrade libsmbconf0-64bitUpgrade libldb2-32bitUpgrade libsamba-util0Upgrade samba-ldb-ldapUpgrade samba-libs-python3-32bitUpgrade libdcerpc-samr0-64bitUpgrade libndr1-32bitUpgrade libnetapi-devel-64bitUpgrade samba-ad-dc-64bitUpgrade libdcerpc-samr0Upgrade libsamba-passdb0Upgrade libndr-krb5pac-develUpgrade libndr-nbt0-32bitUpgrade samba-ad-dcUpgrade libnetapi-develUpgrade libdcerpc-binding0Upgrade samba-cephUpgrade python3-ldb-develUpgrade libwbclient0-32bitUpgrade libsamba-hostconfig-develUpgrade libndr-develUpgrade libndr0-32bitUpgrade libndr0Upgrade libndr1-64bitUpgrade ctdbUpgrade libsmbconf-develUpgrade samba-gpupdateUpgrade samba-core-develUpgrade libsmbldap-develUpgrade samba-libs-64bitUpgrade python3-ldbUpgrade libndr-standard0-64bitUpgrade libsamba-errors0-32bitUpgrade samba-python3Upgrade libsamdb0-64bitUpgrade libsamdb0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libndr-nbt0-64bitUpgrade libsamba-credentials0-64bitUpgrade libsmbldap2-64bitUpgrade libndr1Upgrade libdcerpc0-64bitUpgrade samba-client-libs-32bitUpgrade samba-libs-32bitUpgrade libsamba-policy-develUpgrade libnetapi0Upgrade libtevent-util0Upgrade samba-libsUpgrade sambaUpgrade ctdb-testsUpgrade libndr-krb5pac0-64bitUpgrade libdcerpc-samr-develUpgrade libndr-standard-develUpgrade libsamba-credentials0Upgrade libndr-standard0-32bitUpgrade libsamba-credentials-develUpgrade libdcerpc0-32bitUpgrade libsamba-policy0-python3-64bitUpgrade samba-docUpgrade samba-client-libsUpgrade libdcerpc-binding0-64bitUpgrade libsamba-util-develUpgrade samba-winbind-64bitUpgrade libsamba-hostconfig0Upgrade libsamba-policy0-python3Upgrade samba-clientUpgrade libsamba-policy0-python3-32bitUpgrade libndr-nbt-develUpgrade samba-winbindUpgrade samba-libs-python3-64bitUpgrade ldb-toolsUpgrade libwbclient0Upgrade samba-winbind-32bitUpgrade libdcerpc-develUpgrade libsmbclient-develUpgrade libsamba-policy-python3-develUpgrade libwbclient0-64bitUpgrade libtevent-util0-64bitUpgrade samba-testUpgrade libsmbldap2-32bitUpgrade libsamba-util0-32bitUpgrade libdcerpc-samr0-32bitUpgrade samba-dsdb-modulesUpgrade samba-ad-dc-32bitUpgrade libtevent-util-develUpgrade libsamdb-develUpgrade libldb2Upgrade libndr-krb5pac0-32bitUpgrade libsmbclient0-32bitUpgrade samba-client-32bitUpgrade libnetapi0-32bitUpgrade libnetapi0-64bitUpgrade libsamba-passdb-develUpgrade samba-libs-python3Upgrade samba-develUpgrade libndr-nbt0 | Nov 11, 2021 | Nov 10, 2021 |
| Ubuntu | — | Upgrade samba | Nov 12, 2021 | Nov 10, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub