A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsmbclient-develUpgrade samba-develUpgrade samba-vfs-iouringUpgrade libwbclient-devel | May 4, 2022 | Mar 2, 2022 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Mar 2, 2022 |
| Centos_linux | — | Upgrade python3-samba-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-testUpgrade samba-client-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-common-tools-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade python3-sambaUpgrade samba-krb5-printingUpgrade samba-clientUpgrade samba-krb5-printing-debuginfoUpgrade samba-test-debuginfoUpgrade samba-common-toolsUpgrade samba-test-libsUpgrade libwbclientUpgrade samba-commonUpgrade samba-pidlUpgrade samba-client-libsUpgrade samba-test-libs-debuginfoUpgrade samba-common-libsUpgrade libwbclient-debuginfoUpgrade ctdbUpgrade ctdb-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-clientsUpgrade samba-vfs-iouringUpgrade sambaUpgrade samba-winbind-modulesUpgrade python3-samba-testUpgrade samba-libs-debuginfoUpgrade libsmbclient-debuginfoUpgrade libsmbclientUpgrade samba-libsUpgrade samba-debugsourceUpgrade samba-debuginfoUpgrade samba-winbindUpgrade samba-vfs-iouring-debuginfo | Dec 14, 2021 | Dec 13, 2021 |
| Debian | — | Upgrade samba | Nov 4, 2022 | Mar 2, 2022 |
| Freebsd | — | Upgrade samba413Upgrade samba414Upgrade samba415 | Nov 4, 2022 | Nov 10, 2021 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Mar 2, 2022 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.13.8-11.4.42.0.1.113.0 on Solaris 11.4Upgrade service/network/samba to version 4.13.14-11.4.42.0.1.113.0 on Solaris 11.4 | Feb 17, 2022 | Feb 17, 2022 |
| Oracle_linux | — | Upgrade samba-krb5-printingUpgrade ctdbUpgrade samba-pidlUpgrade python3-sambaUpgrade samba-test-libsUpgrade samba-testUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-vfs-iouringUpgrade samba-libsUpgrade samba-develUpgrade samba-winexeUpgrade samba-commonUpgrade samba-winbindUpgrade libwbclient-develUpgrade python3-samba-testUpgrade samba-clientUpgrade libsmbclient-develUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade sambaUpgrade samba-common-libs | Dec 14, 2021 | Nov 9, 2021 |
| Redhat_linux | — | Upgrade samba-winexe-debuginfoUpgrade ctdb-tests-debuginfoUpgrade samba-krb5-printingUpgrade ctdb-debuginfoUpgrade samba-testUpgrade samba-vfs-iouringUpgrade samba-winbind-debuginfoUpgrade samba-test-libs-debuginfoUpgrade sambaUpgrade samba-winexeUpgrade samba-winbind-krb5-locator-debuginfoUpgrade libsmbclientUpgrade samba-clientUpgrade python3-samba-debuginfoUpgrade samba-commonUpgrade samba-winbind-krb5-locatorUpgrade samba-winbindUpgrade python3-samba-testUpgrade samba-common-toolsUpgrade samba-client-libs-debuginfoUpgrade samba-client-debuginfoUpgrade samba-winbind-clientsUpgrade samba-develUpgrade samba-common-libsUpgrade libwbclient-develUpgrade libwbclientUpgrade samba-common-libs-debuginfoUpgrade samba-libsUpgrade samba-test-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-common-tools-debuginfoUpgrade libwbclient-debuginfoUpgrade ctdb-testsUpgrade samba-debuginfoUpgrade samba-client-libsUpgrade python3-sambaUpgrade samba-krb5-printing-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-pidlUpgrade ctdbUpgrade samba-debugsourceUpgrade samba-winbind-clients-debuginfo | Dec 14, 2021 | Dec 13, 2021 |
| Rocky_linux | — | Upgrade samba-test-libs-debuginfoUpgrade samba-common-libsUpgrade samba-krb5-printing-debuginfoUpgrade samba-libs-debuginfoUpgrade libwbclient-develUpgrade samba-test-debuginfoUpgrade samba-vfs-iouringUpgrade libsmbclient-develUpgrade python3-sambaUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winexeUpgrade samba-winbind-modules-debuginfoUpgrade ctdbUpgrade samba-krb5-printingUpgrade samba-client-libs-debuginfoUpgrade ctdb-debuginfoUpgrade samba-client-debuginfoUpgrade samba-develUpgrade samba-winbind-debuginfoUpgrade libwbclientUpgrade samba-winbind-krb5-locatorUpgrade libsmbclient-debuginfoUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-debuginfoUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade samba-common-toolsUpgrade sambaUpgrade python3-samba-testUpgrade samba-winbind-clientsUpgrade samba-winbind-clients-debuginfoUpgrade samba-clientUpgrade samba-winexe-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-common-tools-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-testUpgrade samba-debugsourceUpgrade samba-client-libsUpgrade libwbclient-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-test-libs | Mar 12, 2024 | Mar 2, 2022 |
| Samba | — | Upgrade to Samba 4.14.10 or later.Upgrade to Samba 4.13.14 or later.Upgrade to Samba 4.15.2 or later. | Mar 10, 2022 | Mar 2, 2022 |
| Suse | — | Upgrade libsmbconf0-64bitUpgrade libsamba-util0Upgrade libndr1Upgrade samba-client-64bitUpgrade libsamdb0-64bitUpgrade libdcerpc-samr0-64bitUpgrade libndr-nbt0-32bitUpgrade samba-ad-dc-64bitUpgrade libndr1-32bitUpgrade libnetapi-devel-64bitUpgrade samba-winbind-libs-32bitUpgrade libsamdb0Upgrade libsamba-passdb0-64bitUpgrade libsamba-hostconfig0-32bitUpgrade libwbclient0-32bitUpgrade samba-ad-dcUpgrade libsmbldap2Upgrade libdcerpc-binding0Upgrade libnetapi-develUpgrade samba-ldb-ldapUpgrade libdcerpc-binding0-32bitUpgrade samba-core-develUpgrade libsamba-hostconfig-develUpgrade libndr1-64bitUpgrade samba-gpupdateUpgrade libndr0Upgrade ctdbUpgrade libndr-develUpgrade libsmbconf-develUpgrade samba-python3Upgrade samba-libs-64bitUpgrade libndr0-32bitUpgrade libsmbldap-develUpgrade libsmbldap2-64bitUpgrade samba-libs-python3-32bitUpgrade libdcerpc-samr0Upgrade libldb2-32bitUpgrade libsamba-util0-64bitUpgrade libsamba-passdb0Upgrade libsamba-hostconfig0-64bitUpgrade python3-ldbUpgrade libndr-nbt0-64bitUpgrade samba-cephUpgrade libtevent-util0-32bitUpgrade python3-ldb-32bitUpgrade ctdb-pcp-pmdaUpgrade samba-winbind-libsUpgrade libsamba-passdb0-32bitUpgrade libsamba-errors0Upgrade libsamba-errors0-32bitUpgrade libsmbconf0-32bitUpgrade libndr-standard0Upgrade libnetapi-devel-32bitUpgrade libsamba-credentials0-32bitUpgrade libsmbconf0Upgrade libsamba-errors-develUpgrade libsamdb0-32bitUpgrade libsmbclient0Upgrade python3-ldb-develUpgrade libwbclient-develUpgrade libdcerpc0Upgrade libldb-develUpgrade libndr-standard0-64bitUpgrade libndr-krb5pac-develUpgrade libndr-krb5pac0Upgrade libsamba-credentials0-64bitUpgrade samba-ad-dc-libsUpgrade libsmbclient0-64bitUpgrade libsamba-errors0-64bitUpgrade libsmbclient-develUpgrade samba-libsUpgrade samba-clientUpgrade libdcerpc-binding0-64bitUpgrade libdcerpc-samr-develUpgrade libndr-nbt-develUpgrade libdcerpc0-32bitUpgrade libdcerpc0-64bitUpgrade libsamba-policy0-python3-64bitUpgrade libsamba-credentials-develUpgrade samba-client-libs-32bitUpgrade libtevent-util-develUpgrade libsamba-util-develUpgrade libsamba-passdb-develUpgrade samba-ad-dc-32bitUpgrade samba-develUpgrade libdcerpc-samr0-32bitUpgrade libnetapi0Upgrade libtevent-util0Upgrade samba-libs-32bitUpgrade libnetapi0-32bitUpgrade samba-dsdb-modulesUpgrade libsamba-util0-32bitUpgrade libsmbldap2-32bitUpgrade libsamba-policy-python3-develUpgrade samba-testUpgrade libwbclient0-64bitUpgrade samba-winbind-64bitUpgrade libtevent-util0-64bitUpgrade libndr-nbt0Upgrade sambaUpgrade samba-libs-python3Upgrade samba-docUpgrade libsamba-credentials0Upgrade libsamba-policy-develUpgrade samba-client-32bitUpgrade samba-winbind-32bitUpgrade libndr-krb5pac0-64bitUpgrade samba-client-libsUpgrade samba-winbindUpgrade ctdb-testsUpgrade libndr-standard-develUpgrade ldb-toolsUpgrade libdcerpc-develUpgrade libndr-standard0-32bitUpgrade libwbclient0Upgrade libnetapi0-64bitUpgrade libsamba-policy0-python3-32bitUpgrade samba-libs-python3-64bitUpgrade libndr-krb5pac0-32bitUpgrade libldb2Upgrade libsamba-hostconfig0Upgrade libsmbclient0-32bitUpgrade libsamdb-develUpgrade libsamba-policy0-python3 | Nov 11, 2021 | Nov 10, 2021 |
| Ubuntu | — | Upgrade samba | Nov 12, 2021 | Nov 10, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub