A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libwbclient-develUpgrade samba-vfs-iouringUpgrade samba-develUpgrade libsmbclient-devel | May 4, 2022 | Mar 2, 2022 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Mar 2, 2022 |
| Centos_linux | — | Upgrade samba-common-libs-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-krb5-printingUpgrade samba-winbind-krb5-locator-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade python3-sambaUpgrade samba-test-debuginfoUpgrade samba-clientUpgrade samba-winbind-clients-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-test-libsUpgrade samba-client-debuginfoUpgrade samba-testUpgrade ctdb-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-client-libsUpgrade libsmbclientUpgrade samba-test-libs-debuginfoUpgrade samba-winbind-modulesUpgrade python3-samba-testUpgrade libsmbclient-debuginfoUpgrade samba-winbindUpgrade samba-vfs-iouring-debuginfoUpgrade samba-libsUpgrade samba-debugsourceUpgrade samba-pidlUpgrade samba-libs-debuginfoUpgrade samba-debuginfoUpgrade samba-commonUpgrade ctdbUpgrade sambaUpgrade samba-vfs-iouringUpgrade samba-winbind-clientsUpgrade samba-common-libs | Dec 14, 2021 | Dec 13, 2021 |
| Debian | — | Upgrade samba | Nov 4, 2022 | Mar 2, 2022 |
| Freebsd | — | Upgrade samba413Upgrade samba415Upgrade samba414 | Nov 4, 2022 | Nov 10, 2021 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Mar 2, 2022 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.13.14-11.4.42.0.1.113.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.13.8-11.4.42.0.1.113.0 on Solaris 11.4 | Feb 17, 2022 | Feb 17, 2022 |
| Oracle_linux | — | Upgrade samba-develUpgrade samba-libsUpgrade python3-samba-testUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade sambaUpgrade samba-winexeUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade libwbclient-develUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libsUpgrade libsmbclient-develUpgrade libsmbclientUpgrade samba-test-libsUpgrade samba-pidlUpgrade samba-testUpgrade samba-client-libsUpgrade python3-sambaUpgrade ctdbUpgrade libwbclientUpgrade samba-vfs-iouringUpgrade samba-krb5-printing | Dec 14, 2021 | Nov 9, 2021 |
| Redhat_linux | — | Upgrade libwbclient-develUpgrade samba-common-toolsUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-winexeUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-commonUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-clientUpgrade samba-client-debuginfoUpgrade samba-winbind-debuginfoUpgrade python3-samba-testUpgrade libsmbclient-develUpgrade samba-test-libsUpgrade samba-winbind-clientsUpgrade samba-develUpgrade samba-common-libsUpgrade samba-test-libs-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-winexe-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade python3-sambaUpgrade samba-vfs-iouringUpgrade samba-libs-debuginfoUpgrade ctdbUpgrade samba-client-libsUpgrade samba-debuginfoUpgrade samba-pidlUpgrade libwbclientUpgrade samba-test-debuginfoUpgrade ctdb-tests-debuginfoUpgrade samba-krb5-printingUpgrade ctdb-debuginfoUpgrade samba-debugsourceUpgrade samba-winbind-clients-debuginfoUpgrade samba-common-libs-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-testUpgrade samba-libsUpgrade ctdb-tests | Dec 14, 2021 | Dec 13, 2021 |
| Rocky_linux | — | Upgrade samba-clientUpgrade samba-client-libsUpgrade samba-common-tools-debuginfoUpgrade samba-common-libs-debuginfoUpgrade python3-samba-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-test-libsUpgrade samba-winexe-debuginfoUpgrade samba-debugsourceUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-testUpgrade samba-winbind-debuginfoUpgrade samba-krb5-printingUpgrade samba-winbind-modules-debuginfoUpgrade samba-winexeUpgrade samba-libsUpgrade sambaUpgrade python3-sambaUpgrade libsmbclient-develUpgrade samba-develUpgrade libwbclientUpgrade libsmbclient-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-winbindUpgrade samba-client-debuginfoUpgrade ctdb-debuginfoUpgrade samba-winbind-modulesUpgrade samba-winbind-clients-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade libwbclient-develUpgrade samba-test-libs-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade python3-samba-testUpgrade samba-common-toolsUpgrade samba-debuginfoUpgrade libsmbclientUpgrade ctdbUpgrade samba-vfs-iouring-debuginfoUpgrade samba-vfs-iouringUpgrade samba-client-libs-debuginfoUpgrade samba-test-debuginfo | Mar 12, 2024 | Mar 2, 2022 |
| Samba | — | Upgrade to Samba 4.15.2 or later.Upgrade to Samba 4.14.10 or later.Upgrade to Samba 4.13.14 or later. | Mar 10, 2022 | Mar 2, 2022 |
| Suse | — | Upgrade libdcerpc0Upgrade libsamdb0-32bitUpgrade libndr-nbt0-32bitUpgrade libldb-develUpgrade libnetapi-devel-32bitUpgrade libsamba-passdb0-32bitUpgrade libsamba-passdb0Upgrade libsamba-credentials0-64bitUpgrade libsamba-passdb0-64bitUpgrade libsamba-credentials0-32bitUpgrade libsmbconf0Upgrade libndr0-32bitUpgrade libndr-standard0Upgrade ctdbUpgrade python3-ldb-32bitUpgrade libndr1-64bitUpgrade libsmbconf-develUpgrade samba-libs-64bitUpgrade libtevent-util0-32bitUpgrade libsamba-hostconfig-develUpgrade samba-python3Upgrade samba-core-develUpgrade libsmbldap2-64bitUpgrade libsmbldap-develUpgrade libndr0Upgrade samba-gpupdateUpgrade libsamba-errors0-64bitUpgrade samba-ad-dc-64bitUpgrade samba-ldb-ldapUpgrade libsmbldap2Upgrade libsamba-errors-develUpgrade libndr1-32bitUpgrade libndr1Upgrade samba-client-64bitUpgrade samba-cephUpgrade libsamba-hostconfig0-32bitUpgrade samba-libs-python3-32bitUpgrade libndr-develUpgrade python3-ldb-develUpgrade libsmbclient0Upgrade libsamba-errors0-32bitUpgrade samba-winbind-libsUpgrade libndr-krb5pac-develUpgrade libsmbconf0-32bitUpgrade python3-ldbUpgrade ctdb-pcp-pmdaUpgrade libsamba-hostconfig0-64bitUpgrade libldb2-32bitUpgrade libdcerpc-samr0-64bitUpgrade libsamba-util0Upgrade libsamba-util0-64bitUpgrade libsmbconf0-64bitUpgrade libsamdb0-64bitUpgrade libdcerpc-samr0Upgrade libnetapi-develUpgrade libdcerpc-binding0Upgrade libwbclient0-32bitUpgrade libsamdb0Upgrade libndr-nbt0-64bitUpgrade samba-winbind-libs-32bitUpgrade samba-ad-dcUpgrade libsmbclient0-64bitUpgrade libsamba-errors0Upgrade libndr-standard0-64bitUpgrade samba-ad-dc-libsUpgrade libwbclient-develUpgrade libndr-krb5pac0Upgrade libdcerpc-binding0-32bitUpgrade libnetapi-devel-64bitUpgrade libtevent-util-develUpgrade libsmbldap2-32bitUpgrade libsamdb-develUpgrade libdcerpc-samr0-32bitUpgrade samba-libs-python3-64bitUpgrade libdcerpc-develUpgrade samba-develUpgrade libnetapi0-32bitUpgrade libsamba-policy0-python3-32bitUpgrade samba-libs-32bitUpgrade libtevent-util0Upgrade libdcerpc-samr-develUpgrade samba-winbind-32bitUpgrade libsamba-util-develUpgrade samba-ad-dc-32bitUpgrade samba-dsdb-modulesUpgrade libsamba-credentials-develUpgrade libsamba-hostconfig0Upgrade libndr-nbt-develUpgrade libsmbclient0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsamba-policy0-python3Upgrade samba-clientUpgrade libsamba-policy0-python3-64bitUpgrade samba-client-libs-32bitUpgrade libsamba-credentials0Upgrade libnetapi0Upgrade libndr-nbt0Upgrade libsamba-passdb-develUpgrade libdcerpc0-64bitUpgrade sambaUpgrade libldb2Upgrade samba-winbind-64bitUpgrade samba-winbindUpgrade ldb-toolsUpgrade libsamba-policy-develUpgrade libsamba-policy-python3-develUpgrade samba-testUpgrade libsmbclient-develUpgrade libwbclient0-64bitUpgrade libtevent-util0-64bitUpgrade samba-client-32bitUpgrade libndr-standard-develUpgrade libnetapi0-64bitUpgrade samba-libs-python3Upgrade samba-libsUpgrade samba-docUpgrade samba-client-libsUpgrade libdcerpc-binding0-64bitUpgrade ctdb-testsUpgrade libndr-krb5pac0-64bitUpgrade libwbclient0Upgrade libdcerpc0-32bitUpgrade libsamba-util0-32bitUpgrade libndr-standard0-32bit | Nov 11, 2021 | Nov 10, 2021 |
| Ubuntu | — | Upgrade samba | Nov 12, 2021 | Nov 10, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub