A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libwbclient-develUpgrade samba-vfs-iouringUpgrade samba-develUpgrade libsmbclient-devel | May 4, 2022 | Mar 2, 2022 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Mar 2, 2022 |
| Centos_linux | — | Upgrade sambaUpgrade samba-vfs-iouringUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-winbind-debuginfoUpgrade samba-debugsourceUpgrade samba-client-libs-debuginfoUpgrade samba-libsUpgrade samba-winbindUpgrade samba-winbind-modules-debuginfoUpgrade samba-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-pidlUpgrade samba-vfs-iouring-debuginfoUpgrade samba-client-libsUpgrade ctdb-debuginfoUpgrade python3-samba-testUpgrade samba-winbind-modulesUpgrade libsmbclient-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-commonUpgrade samba-common-libsUpgrade ctdbUpgrade samba-test-libs-debuginfoUpgrade samba-test-debuginfoUpgrade samba-krb5-printingUpgrade python3-sambaUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-testUpgrade samba-common-libs-debuginfoUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade libwbclientUpgrade python3-samba-debuginfoUpgrade samba-test-libsUpgrade samba-client-debuginfoUpgrade samba-common-toolsUpgrade samba-common-tools-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-krb5-printing-debuginfo | Dec 14, 2021 | Dec 13, 2021 |
| Debian | — | Upgrade samba | Nov 4, 2022 | Mar 2, 2022 |
| Freebsd | — | Upgrade samba415Upgrade samba413Upgrade samba414 | Nov 4, 2022 | Nov 10, 2021 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Mar 2, 2022 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.13.14-11.4.42.0.1.113.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.13.8-11.4.42.0.1.113.0 on Solaris 11.4 | Feb 17, 2022 | Feb 17, 2022 |
| Oracle_linux | — | Upgrade libwbclientUpgrade samba-vfs-iouringUpgrade samba-test-libsUpgrade samba-krb5-printingUpgrade python3-sambaUpgrade samba-client-libsUpgrade ctdbUpgrade samba-testUpgrade samba-pidlUpgrade samba-winbind-modulesUpgrade libwbclient-develUpgrade samba-commonUpgrade samba-winexeUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade sambaUpgrade libsmbclient-develUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade samba-libsUpgrade samba-develUpgrade python3-samba-testUpgrade samba-winbind | Dec 14, 2021 | Nov 9, 2021 |
| Redhat_linux | — | Upgrade samba-pidlUpgrade samba-krb5-printing-debuginfoUpgrade samba-client-libsUpgrade python3-sambaUpgrade samba-debuginfoUpgrade samba-vfs-iouringUpgrade ctdb-tests-debuginfoUpgrade samba-winexe-debuginfoUpgrade samba-krb5-printingUpgrade samba-debugsourceUpgrade samba-common-libs-debuginfoUpgrade samba-libsUpgrade libsmbclient-debuginfoUpgrade ctdb-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade ctdb-testsUpgrade samba-test-debuginfoUpgrade ctdbUpgrade samba-testUpgrade libwbclient-debuginfoUpgrade libwbclientUpgrade samba-winbind-debuginfoUpgrade libwbclient-develUpgrade samba-winbindUpgrade samba-test-libs-debuginfoUpgrade samba-vfs-glusterfs-debuginfoUpgrade sambaUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-winbind-modulesUpgrade samba-client-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winexeUpgrade samba-test-libsUpgrade libsmbclient-develUpgrade samba-common-libsUpgrade samba-client-libs-debuginfoUpgrade python3-samba-debuginfoUpgrade python3-samba-testUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-commonUpgrade samba-develUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-winbind-modules-debuginfo | Dec 14, 2021 | Dec 13, 2021 |
| Rocky_linux | — | Upgrade samba-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-test-libs-debuginfoUpgrade samba-client-libs-debuginfoUpgrade ctdbUpgrade samba-test-debuginfoUpgrade samba-libs-debuginfoUpgrade libwbclient-develUpgrade samba-vfs-iouring-debuginfoUpgrade samba-krb5-printingUpgrade python3-samba-testUpgrade samba-vfs-iouringUpgrade libwbclientUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-develUpgrade samba-winbind-debuginfoUpgrade libsmbclient-debuginfoUpgrade sambaUpgrade samba-winexeUpgrade libsmbclient-develUpgrade samba-common-toolsUpgrade ctdb-debuginfoUpgrade samba-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade python3-sambaUpgrade samba-winbind-modules-debuginfoUpgrade samba-client-debuginfoUpgrade samba-client-libsUpgrade python3-samba-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-winexe-debuginfoUpgrade samba-test-libsUpgrade libwbclient-debuginfoUpgrade samba-debugsourceUpgrade samba-clientUpgrade samba-testUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-common-tools-debuginfo | Mar 12, 2024 | Mar 2, 2022 |
| Samba | — | Upgrade to Samba 4.14.10 or later.Upgrade to Samba 4.15.2 or later.Upgrade to Samba 4.13.14 or later. | Mar 10, 2022 | Mar 2, 2022 |
| Suse | — | Upgrade libsamba-policy-develUpgrade libldb2Upgrade samba-libs-32bitUpgrade libnetapi0-32bitUpgrade libsamba-passdb-develUpgrade libtevent-util0Upgrade libsamdb-develUpgrade libsmbclient0-32bitUpgrade libndr-nbt-develUpgrade libnetapi0Upgrade libtevent-util0-64bitUpgrade samba-client-32bitUpgrade libsamba-policy0-python3-64bitUpgrade libdcerpc0-32bitUpgrade libsamba-credentials-develUpgrade libsamba-policy0-python3Upgrade samba-develUpgrade samba-docUpgrade libsamba-util0-32bitUpgrade libdcerpc-binding0-64bitUpgrade libdcerpc0-64bitUpgrade samba-libsUpgrade libwbclient0-64bitUpgrade libsmbldap2-32bitUpgrade samba-client-libs-32bitUpgrade samba-testUpgrade libsamba-policy-python3-develUpgrade libsmbclient-develUpgrade samba-client-libsUpgrade samba-dsdb-modulesUpgrade libtevent-util-develUpgrade samba-ad-dc-32bitUpgrade libndr-krb5pac0-32bitUpgrade libndr-nbt0Upgrade libdcerpc-develUpgrade libsamba-util-develUpgrade ctdb-testsUpgrade samba-libs-python3Upgrade libndr-standard-develUpgrade samba-winbind-32bitUpgrade libndr-krb5pac0-64bitUpgrade samba-winbindUpgrade libwbclient0Upgrade samba-clientUpgrade libdcerpc-samr0-32bitUpgrade libsamba-hostconfig0Upgrade libnetapi0-64bitUpgrade libndr-standard0-32bitUpgrade sambaUpgrade libsamba-credentials0Upgrade ldb-toolsUpgrade samba-winbind-64bitUpgrade libdcerpc-samr-develUpgrade libsamba-policy0-python3-32bitUpgrade samba-libs-python3-64bitUpgrade libsamba-passdb0Upgrade samba-libs-python3-32bitUpgrade samba-libs-64bitUpgrade samba-cephUpgrade libnetapi-devel-64bitUpgrade libsamba-passdb0-64bitUpgrade libsmbconf0-64bitUpgrade libndr1Upgrade libldb-develUpgrade libsamba-util0Upgrade samba-ad-dc-64bitUpgrade libsamba-util0-64bitUpgrade libdcerpc-samr0Upgrade samba-ad-dc-libsUpgrade samba-gpupdateUpgrade libsmbldap-develUpgrade libndr-develUpgrade libndr0-32bitUpgrade libndr1-32bitUpgrade libsamdb0-64bitUpgrade python3-ldb-develUpgrade libdcerpc-binding0-32bitUpgrade libndr-standard0Upgrade libsamba-hostconfig-develUpgrade samba-core-develUpgrade libsmbclient0-64bitUpgrade libsamba-errors-develUpgrade libndr-nbt0-64bitUpgrade libndr-krb5pac-develUpgrade libsamba-passdb0-32bitUpgrade samba-winbind-libsUpgrade libldb2-32bitUpgrade python3-ldb-32bitUpgrade libtevent-util0-32bitUpgrade libsmbldap2-64bitUpgrade libwbclient0-32bitUpgrade libsamba-errors0-64bitUpgrade libsmbconf-develUpgrade libsmbclient0Upgrade samba-python3Upgrade samba-ldb-ldapUpgrade libnetapi-develUpgrade libnetapi-devel-32bitUpgrade samba-winbind-libs-32bitUpgrade libndr-standard0-64bitUpgrade libsmbconf0Upgrade libsamba-errors0Upgrade libsamba-credentials0-32bitUpgrade libsmbconf0-32bitUpgrade libsamba-errors0-32bitUpgrade ctdb-pcp-pmdaUpgrade libsamba-hostconfig0-64bitUpgrade libsamba-credentials0-64bitUpgrade python3-ldbUpgrade libndr-krb5pac0Upgrade samba-client-64bitUpgrade libndr0Upgrade libwbclient-develUpgrade libsamdb0Upgrade samba-ad-dcUpgrade libdcerpc-binding0Upgrade ctdbUpgrade libsamdb0-32bitUpgrade libndr1-64bitUpgrade libsmbldap2Upgrade libndr-nbt0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libdcerpc-samr0-64bitUpgrade libdcerpc0 | Nov 11, 2021 | Nov 10, 2021 |
| Ubuntu | — | Upgrade samba | Nov 12, 2021 | Nov 10, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub