A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade samba-vfs-iouringUpgrade samba-develUpgrade libsmbclient-develUpgrade libwbclient-devel | May 4, 2022 | Mar 2, 2022 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Mar 2, 2022 |
| Centos_linux | — | Upgrade samba-test-libs-debuginfoUpgrade libwbclient-debuginfoUpgrade ctdbUpgrade python3-samba-testUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade libsmbclient-debuginfoUpgrade samba-winbindUpgrade samba-commonUpgrade samba-libs-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-debuginfoUpgrade samba-pidlUpgrade samba-libsUpgrade samba-debugsourceUpgrade libsmbclientUpgrade sambaUpgrade samba-winbind-clientsUpgrade ctdb-debuginfoUpgrade samba-client-libsUpgrade samba-vfs-iouringUpgrade samba-winbind-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-client-libs-debuginfoUpgrade libwbclientUpgrade python3-samba-debuginfoUpgrade samba-client-debuginfoUpgrade samba-krb5-printingUpgrade samba-test-libsUpgrade samba-common-tools-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade python3-sambaUpgrade samba-test-debuginfoUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libs-debuginfoUpgrade samba-clientUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-test | Dec 14, 2021 | Dec 13, 2021 |
| Debian | — | Upgrade samba | Nov 4, 2022 | Mar 2, 2022 |
| Freebsd | — | Upgrade samba414Upgrade samba415Upgrade samba413 | Nov 4, 2022 | Nov 10, 2021 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Mar 2, 2022 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.13.8-11.4.42.0.1.113.0 on Solaris 11.4Upgrade service/network/samba to version 4.13.14-11.4.42.0.1.113.0 on Solaris 11.4 | Feb 17, 2022 | Feb 17, 2022 |
| Oracle_linux | — | Upgrade samba-client-libsUpgrade python3-sambaUpgrade samba-testUpgrade samba-test-libsUpgrade samba-krb5-printingUpgrade libwbclientUpgrade samba-vfs-iouringUpgrade samba-pidlUpgrade ctdbUpgrade samba-common-toolsUpgrade samba-libsUpgrade samba-develUpgrade samba-winbind-krb5-locatorUpgrade libwbclient-develUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-commonUpgrade python3-samba-testUpgrade libsmbclient-develUpgrade samba-winexeUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba | Dec 14, 2021 | Nov 9, 2021 |
| Redhat_linux | — | Upgrade samba-client-libs-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-clientUpgrade libsmbclientUpgrade python3-samba-testUpgrade samba-test-libsUpgrade samba-winbindUpgrade libsmbclient-develUpgrade samba-common-toolsUpgrade samba-client-debuginfoUpgrade libwbclient-develUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade sambaUpgrade samba-winexeUpgrade samba-winbind-krb5-locatorUpgrade samba-commonUpgrade python3-samba-debuginfoUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-develUpgrade samba-vfs-glusterfs-debuginfoUpgrade ctdb-testsUpgrade samba-krb5-printingUpgrade samba-test-debuginfoUpgrade ctdb-tests-debuginfoUpgrade samba-pidlUpgrade libwbclientUpgrade samba-debuginfoUpgrade samba-winexe-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-libsUpgrade samba-client-libsUpgrade python3-sambaUpgrade ctdbUpgrade samba-vfs-iouringUpgrade libwbclient-debuginfoUpgrade samba-debugsourceUpgrade samba-winbind-clients-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-testUpgrade libsmbclient-debuginfoUpgrade ctdb-debuginfo | Dec 14, 2021 | Dec 13, 2021 |
| Rocky_linux | — | Upgrade samba-client-libsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-test-libsUpgrade samba-debugsourceUpgrade samba-winexe-debuginfoUpgrade samba-clientUpgrade samba-testUpgrade samba-common-tools-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-test-debuginfoUpgrade samba-vfs-iouringUpgrade samba-winbind-clients-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winbind-clientsUpgrade samba-krb5-printingUpgrade samba-client-libs-debuginfoUpgrade ctdbUpgrade python3-sambaUpgrade libsmbclient-develUpgrade samba-winexeUpgrade samba-winbind-modules-debuginfoUpgrade samba-libsUpgrade samba-krb5-printing-debuginfoUpgrade samba-common-libsUpgrade libwbclient-develUpgrade samba-test-libs-debuginfoUpgrade samba-libs-debuginfoUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-debuginfoUpgrade samba-client-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade ctdb-debuginfoUpgrade sambaUpgrade samba-winbind-debuginfoUpgrade samba-develUpgrade libwbclientUpgrade libsmbclient-debuginfoUpgrade python3-samba-testUpgrade samba-common-tools | Mar 12, 2024 | Mar 2, 2022 |
| Samba | — | Upgrade to Samba 4.15.2 or later.Upgrade to Samba 4.14.10 or later.Upgrade to Samba 4.13.14 or later. | Mar 10, 2022 | Mar 2, 2022 |
| Suse | — | Upgrade libsamba-hostconfig0-32bitUpgrade libsmbldap2Upgrade samba-ldb-ldapUpgrade libsamba-passdb0-64bitUpgrade python3-ldb-develUpgrade libndr1Upgrade libndr-nbt0-32bitUpgrade libnetapi-devel-64bitUpgrade samba-ad-dc-64bitUpgrade libdcerpc0Upgrade python3-ldbUpgrade libldb-develUpgrade libsamba-passdb0Upgrade libsamba-credentials0-64bitUpgrade samba-cephUpgrade libndr-develUpgrade libsmbldap2-64bitUpgrade samba-python3Upgrade libdcerpc-samr0-64bitUpgrade libsmbconf-develUpgrade libsmbldap-develUpgrade libndr1-64bitUpgrade samba-gpupdateUpgrade libsamba-hostconfig-develUpgrade ctdbUpgrade samba-libs-64bitUpgrade libsamdb0-64bitUpgrade samba-winbind-libs-32bitUpgrade libsamba-credentials0-32bitUpgrade libsamdb0Upgrade samba-libs-python3-32bitUpgrade libndr-krb5pac0Upgrade ctdb-pcp-pmdaUpgrade libsamba-errors0-32bitUpgrade libsmbconf0Upgrade libndr-krb5pac-develUpgrade libwbclient0-32bitUpgrade libsmbconf0-32bitUpgrade libwbclient-develUpgrade samba-ad-dc-libsUpgrade libsmbclient0Upgrade libsamdb0-32bitUpgrade libndr0Upgrade samba-winbind-libsUpgrade libsamba-passdb0-32bitUpgrade libtevent-util0-32bitUpgrade libdcerpc-binding0Upgrade libndr-standard0Upgrade libndr-standard0-64bitUpgrade python3-ldb-32bitUpgrade libsamba-errors0Upgrade libsamba-errors0-64bitUpgrade libsmbclient0-64bitUpgrade samba-client-64bitUpgrade libsamba-util0-64bitUpgrade libsmbconf0-64bitUpgrade libldb2-32bitUpgrade libdcerpc-binding0-32bitUpgrade libndr0-32bitUpgrade samba-core-develUpgrade libdcerpc-samr0Upgrade libndr1-32bitUpgrade libsamba-hostconfig0-64bitUpgrade libsamba-util0Upgrade samba-ad-dcUpgrade libndr-nbt0-64bitUpgrade libnetapi-devel-32bitUpgrade libnetapi-develUpgrade libsamba-errors-develUpgrade libsamba-policy-develUpgrade libsamba-hostconfig0Upgrade samba-libs-python3Upgrade samba-ad-dc-32bitUpgrade samba-libs-python3-64bitUpgrade samba-winbind-32bitUpgrade samba-clientUpgrade samba-winbindUpgrade libwbclient0Upgrade libsamba-policy0-python3-32bitUpgrade libwbclient0-64bitUpgrade samba-testUpgrade ctdb-testsUpgrade libsamba-policy-python3-develUpgrade libndr-krb5pac0-32bitUpgrade libldb2Upgrade libndr-nbt-develUpgrade libsmbclient0-32bitUpgrade samba-client-32bitUpgrade libsamdb-develUpgrade samba-winbind-64bitUpgrade libsamba-policy0-python3Upgrade libdcerpc-samr0-32bitUpgrade libsamba-credentials-develUpgrade samba-develUpgrade libnetapi0-32bitUpgrade libtevent-util0-64bitUpgrade samba-dsdb-modulesUpgrade libdcerpc0-32bitUpgrade libdcerpc0-64bitUpgrade libtevent-util-develUpgrade libsamba-util0-32bitUpgrade libnetapi0Upgrade samba-libs-32bitUpgrade libsamba-policy0-python3-64bitUpgrade libdcerpc-binding0-64bitUpgrade libndr-krb5pac0-64bitUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-docUpgrade libndr-standard-develUpgrade sambaUpgrade libsamba-util-develUpgrade libdcerpc-develUpgrade samba-client-libs-32bitUpgrade libtevent-util0Upgrade libsmbldap2-32bitUpgrade libndr-nbt0Upgrade libsamba-passdb-develUpgrade libdcerpc-samr-develUpgrade libsmbclient-develUpgrade libsamba-credentials0Upgrade libnetapi0-64bitUpgrade libndr-standard0-32bitUpgrade ldb-tools | Nov 11, 2021 | Nov 10, 2021 |
| Ubuntu | — | Upgrade samba | Nov 12, 2021 | Nov 10, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub