All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in an area of the server file system not exported under the share definition. Note that SMB1 has to be enabled, or the share also available via NFS in order for this attack to succeed.
CVSS Details
- CVSS 3.1 Base Score: 2.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 21, 2024 | Jan 11, 2022 |
| Amazon Linux Ami 2 | — | Upgrade samba-krb5-printingUpgrade samba-pidlUpgrade samba-client-libsUpgrade samba-python-testUpgrade samba-vfs-glusterfsUpgrade samba-dcUpgrade samba-testUpgrade samba-test-libsUpgrade libwbclientUpgrade samba-debuginfoUpgrade samba-clientUpgrade libsmbclientUpgrade samba-pythonUpgrade ctdb-testsUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-winbind-krb5-locatorUpgrade samba-winbindUpgrade samba-dc-libsUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade sambaUpgrade libsmbclient-develUpgrade samba-common-libsUpgrade samba-libsUpgrade samba-develUpgrade libwbclient-develUpgrade ctdb | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade samba-common-tools-debuginfoUpgrade samba-client-libsUpgrade samba-test-debuginfoUpgrade samba-pidlUpgrade samba-debuginfoUpgrade libwbclientUpgrade samba-common-libs-debuginfoUpgrade python3-sambaUpgrade libnetapi-debuginfoUpgrade samba-dcerpc-debuginfoUpgrade samba-debugsourceUpgrade samba-ldb-ldap-modulesUpgrade samba-vfs-iouringUpgrade libwbclient-debuginfoUpgrade samba-libsUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-krb5-printingUpgrade samba-testUpgrade samba-commonUpgrade samba-dc-libs-debuginfoUpgrade python3-samba-develUpgrade samba-test-libsUpgrade samba-test-libs-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-develUpgrade samba-winbind-clientsUpgrade samba-usersharesUpgrade sambaUpgrade samba-dcerpcUpgrade libsmbclient-debuginfoUpgrade libnetapi-develUpgrade python3-samba-debuginfoUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-clientUpgrade libsmbclient-develUpgrade libnetapiUpgrade libwbclient-develUpgrade samba-libs-debuginfoUpgrade samba-dc-libsUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbindUpgrade samba-vfs-iouring-debuginfoUpgrade samba-client-debuginfoUpgrade python3-samba-testUpgrade samba-winbind-modules-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-client-libs-debuginfo | Feb 17, 2025 | Jan 10, 2022 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Jan 11, 2022 |
| Freebsd | — | Upgrade samba413Upgrade samba414Upgrade samba415 | Nov 4, 2022 | Feb 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libwbclientUpgrade samba-libsUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba | May 9, 2022 | Jan 11, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-dc-libsUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-winbindUpgrade python2-samba-testUpgrade sambaUpgrade ctdb-testsUpgrade samba-winbind-modulesUpgrade python3-samba-testUpgrade python2-sambaUpgrade samba-test-libsUpgrade samba-testUpgrade samba-clientUpgrade samba-commonUpgrade libwbclientUpgrade samba-libsUpgrade python3-sambaUpgrade samba-krb5-printingUpgrade ctdbUpgrade samba-pidl | Apr 26, 2022 | Jan 11, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-winbindUpgrade samba-commonUpgrade sambaUpgrade samba-common-toolsUpgrade samba-libsUpgrade libwbclient | Apr 19, 2022 | Jan 11, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 11, 2022 |
| Samba | — | Upgrade to Samba 4.13.16 or later. | Mar 7, 2022 | Jan 11, 2022 |
| Suse | — | Upgrade libp11-kit0-32bitUpgrade libnfsidmap-sssUpgrade ca-certificatesUpgrade talloc-manUpgrade samba-clientUpgrade samba-libsUpgrade apache2-mod_apparmorUpgrade libnettle6-32bitUpgrade p11-kit-nss-trustUpgrade libgnutls30-32bitUpgrade libsamba-policy0-python3-64bitUpgrade pam_apparmorUpgrade p11-kit-toolsUpgrade apparmor-utils-langUpgrade libsamba-policy0-python3Upgrade samba-libs-python3-32bitUpgrade libsss_idmap0Upgrade libipa_hbac-develUpgrade samba-client-libs-32bitUpgrade tevent-manUpgrade python3-sssd-configUpgrade apparmor-parserUpgrade libtalloc2-32bitUpgrade krb5-serverUpgrade python3-ldbUpgrade pam_apparmor-32bitUpgrade python3-tdb-32bitUpgrade python3-teventUpgrade samba-libs-64bitUpgrade samba-client-32bitUpgrade libp11-kit0Upgrade libhogweed4Upgrade libsamba-policy-python3-develUpgrade krb5-plugin-kdb-ldapUpgrade python-sssd-configUpgrade perl-apparmorUpgrade sssd-krb5Upgrade p11-kitUpgrade samba-testUpgrade sssdUpgrade sssd-wbclient-develUpgrade yast2-samba-clientUpgrade python3-talloc-develUpgrade libsss_certmap-develUpgrade libtevent0-32bitUpgrade libsss_certmap0Upgrade apparmor-docsUpgrade libapparmor-develUpgrade sssd-adUpgrade python3-sss-murmurUpgrade libtdb-develUpgrade libapparmor1-32bitUpgrade krb5-miniUpgrade libsss_nss_idmap0Upgrade samba-devel-32bitUpgrade python3-apparmorUpgrade sssd-krb5-commonUpgrade samba-toolUpgrade libtdb1Upgrade krb5Upgrade krb5-plugin-preauth-otpUpgrade ruby-apparmorUpgrade ldb-toolsUpgrade libsamba-policy-develUpgrade samba-gpupdateUpgrade samba-docUpgrade samba-libs-python3Upgrade samba-libs-32bitUpgrade python3-ldb-32bitUpgrade ctdb-pcp-pmdaUpgrade krb5-32bitUpgrade libtalloc-develUpgrade libldb2Upgrade libsss_simpleifp0Upgrade python3-tallocUpgrade ctdbUpgrade tdb-toolsUpgrade libtalloc2Upgrade libldb-develUpgrade libtevent0Upgrade libsss_idmap-develUpgrade libsamba-policy0-python3-32bitUpgrade krb5-clientUpgrade libipa_hbac0Upgrade samba-develUpgrade sssd-proxyUpgrade samba-libs-python3-64bitUpgrade libhogweed4-32bitUpgrade sambaUpgrade samba-python3Upgrade libldb2-32bitUpgrade sssd-ipaUpgrade python3-ldb-develUpgrade krb5-mini-develUpgrade sssd-winbind-idmapUpgrade python3-talloc-32bitUpgrade sssd-ldapUpgrade python3-tevent-32bitUpgrade apparmor-parser-langUpgrade p11-kit-develUpgrade sssd-commonUpgrade libnettle6Upgrade python3-sss_nss_idmapUpgrade apparmor-profilesUpgrade krb5-devel-32bitUpgrade samba-ad-dcUpgrade p11-kit-32bitUpgrade sssd-toolsUpgrade sssd-wbclientUpgrade samba-winbind-libs-32bitUpgrade samba-ad-dc-libsUpgrade libsss_nss_idmap-develUpgrade libapparmor1Upgrade krb5-plugin-preauth-pkinitUpgrade krb5-develUpgrade libtevent-develUpgrade libgnutls30Upgrade libtdb1-32bitUpgrade libsss_simpleifp-develUpgrade samba-winbindUpgrade apparmor-utilsUpgrade apparmor-abstractionsUpgrade samba-client-64bitUpgrade python3-ipa_hbacUpgrade python3-tdbUpgrade samba-client-libsUpgrade samba-winbind-libsUpgrade krb5-plugin-preauth-spakeUpgrade samba-cephUpgrade samba-ldb-ldapUpgrade sssd-dbusUpgrade samba-ad-dc-libs-32bitUpgrade samba-dsdb-modules | Feb 2, 2022 | Jan 11, 2022 |
| Ubuntu | — | Upgrade samba | Feb 2, 2022 | Jan 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub