All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in an area of the server file system not exported under the share definition. Note that SMB1 has to be enabled, or the share also available via NFS in order for this attack to succeed.
CVSS Details
- CVSS 3.1 Base Score: 2.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-samba | Mar 21, 2024 | Jan 11, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-ctdbamazon-linux-ami-2-upgrade-ctdb-testsamazon-linux-ami-2-upgrade-libsmbclientamazon-linux-ami-2-upgrade-libsmbclient-develamazon-linux-ami-2-upgrade-libwbclientamazon-linux-ami-2-upgrade-libwbclient-develamazon-linux-ami-2-upgrade-sambaamazon-linux-ami-2-upgrade-samba-clientamazon-linux-ami-2-upgrade-samba-client-libsamazon-linux-ami-2-upgrade-samba-commonamazon-linux-ami-2-upgrade-samba-common-libsamazon-linux-ami-2-upgrade-samba-common-toolsamazon-linux-ami-2-upgrade-samba-dcamazon-linux-ami-2-upgrade-samba-dc-libsamazon-linux-ami-2-upgrade-samba-debuginfoamazon-linux-ami-2-upgrade-samba-develamazon-linux-ami-2-upgrade-samba-krb5-printingamazon-linux-ami-2-upgrade-samba-libsamazon-linux-ami-2-upgrade-samba-pidlamazon-linux-ami-2-upgrade-samba-pythonamazon-linux-ami-2-upgrade-samba-python-testamazon-linux-ami-2-upgrade-samba-testamazon-linux-ami-2-upgrade-samba-test-libsamazon-linux-ami-2-upgrade-samba-vfs-glusterfsamazon-linux-ami-2-upgrade-samba-winbindamazon-linux-ami-2-upgrade-samba-winbind-clientsamazon-linux-ami-2-upgrade-samba-winbind-krb5-locatoramazon-linux-ami-2-upgrade-samba-winbind-modules | May 20, 2026 | May 20, 2026 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libnetapiamazon-linux-2023-upgrade-libnetapi-debuginfoamazon-linux-2023-upgrade-libnetapi-develamazon-linux-2023-upgrade-libsmbclientamazon-linux-2023-upgrade-libsmbclient-debuginfoamazon-linux-2023-upgrade-libsmbclient-develamazon-linux-2023-upgrade-libwbclientamazon-linux-2023-upgrade-libwbclient-debuginfoamazon-linux-2023-upgrade-libwbclient-develamazon-linux-2023-upgrade-python3-sambaamazon-linux-2023-upgrade-python3-samba-debuginfoamazon-linux-2023-upgrade-python3-samba-develamazon-linux-2023-upgrade-python3-samba-testamazon-linux-2023-upgrade-sambaamazon-linux-2023-upgrade-samba-clientamazon-linux-2023-upgrade-samba-client-debuginfoamazon-linux-2023-upgrade-samba-client-libsamazon-linux-2023-upgrade-samba-client-libs-debuginfoamazon-linux-2023-upgrade-samba-commonamazon-linux-2023-upgrade-samba-common-libsamazon-linux-2023-upgrade-samba-common-libs-debuginfoamazon-linux-2023-upgrade-samba-common-toolsamazon-linux-2023-upgrade-samba-common-tools-debuginfoamazon-linux-2023-upgrade-samba-dcerpcamazon-linux-2023-upgrade-samba-dcerpc-debuginfoamazon-linux-2023-upgrade-samba-dc-libsamazon-linux-2023-upgrade-samba-dc-libs-debuginfoamazon-linux-2023-upgrade-samba-debuginfoamazon-linux-2023-upgrade-samba-debugsourceamazon-linux-2023-upgrade-samba-develamazon-linux-2023-upgrade-samba-krb5-printingamazon-linux-2023-upgrade-samba-krb5-printing-debuginfoamazon-linux-2023-upgrade-samba-ldb-ldap-modulesamazon-linux-2023-upgrade-samba-ldb-ldap-modules-debuginfoamazon-linux-2023-upgrade-samba-libsamazon-linux-2023-upgrade-samba-libs-debuginfoamazon-linux-2023-upgrade-samba-pidlamazon-linux-2023-upgrade-samba-testamazon-linux-2023-upgrade-samba-test-debuginfoamazon-linux-2023-upgrade-samba-test-libsamazon-linux-2023-upgrade-samba-test-libs-debuginfoamazon-linux-2023-upgrade-samba-usersharesamazon-linux-2023-upgrade-samba-vfs-iouringamazon-linux-2023-upgrade-samba-vfs-iouring-debuginfoamazon-linux-2023-upgrade-samba-winbindamazon-linux-2023-upgrade-samba-winbind-clientsamazon-linux-2023-upgrade-samba-winbind-clients-debuginfoamazon-linux-2023-upgrade-samba-winbind-debuginfoamazon-linux-2023-upgrade-samba-winbind-krb5-locatoramazon-linux-2023-upgrade-samba-winbind-krb5-locator-debuginfoamazon-linux-2023-upgrade-samba-winbind-modulesamazon-linux-2023-upgrade-samba-winbind-modules-debuginfo | Feb 17, 2025 | Jan 10, 2022 | |
| Debian | debian-upgrade-samba | Jul 30, 2024 | Jan 11, 2022 | |
| Freebsd | freebsd-upgrade-package-samba413freebsd-upgrade-package-samba414freebsd-upgrade-package-samba415 | Nov 4, 2022 | Feb 1, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libsmbclienthuawei-euleros-2_0_sp10-upgrade-libwbclienthuawei-euleros-2_0_sp10-upgrade-sambahuawei-euleros-2_0_sp10-upgrade-samba-clienthuawei-euleros-2_0_sp10-upgrade-samba-commonhuawei-euleros-2_0_sp10-upgrade-samba-common-toolshuawei-euleros-2_0_sp10-upgrade-samba-libshuawei-euleros-2_0_sp10-upgrade-samba-winbindhuawei-euleros-2_0_sp10-upgrade-samba-winbind-clientshuawei-euleros-2_0_sp10-upgrade-samba-winbind-modules | May 9, 2022 | Jan 11, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-ctdbhuawei-euleros-2_0_sp8-upgrade-ctdb-testshuawei-euleros-2_0_sp8-upgrade-libsmbclienthuawei-euleros-2_0_sp8-upgrade-libwbclienthuawei-euleros-2_0_sp8-upgrade-python2-sambahuawei-euleros-2_0_sp8-upgrade-python2-samba-testhuawei-euleros-2_0_sp8-upgrade-python3-sambahuawei-euleros-2_0_sp8-upgrade-python3-samba-testhuawei-euleros-2_0_sp8-upgrade-sambahuawei-euleros-2_0_sp8-upgrade-samba-clienthuawei-euleros-2_0_sp8-upgrade-samba-client-libshuawei-euleros-2_0_sp8-upgrade-samba-commonhuawei-euleros-2_0_sp8-upgrade-samba-common-libshuawei-euleros-2_0_sp8-upgrade-samba-common-toolshuawei-euleros-2_0_sp8-upgrade-samba-dc-libshuawei-euleros-2_0_sp8-upgrade-samba-krb5-printinghuawei-euleros-2_0_sp8-upgrade-samba-libshuawei-euleros-2_0_sp8-upgrade-samba-pidlhuawei-euleros-2_0_sp8-upgrade-samba-testhuawei-euleros-2_0_sp8-upgrade-samba-test-libshuawei-euleros-2_0_sp8-upgrade-samba-winbindhuawei-euleros-2_0_sp8-upgrade-samba-winbind-clientshuawei-euleros-2_0_sp8-upgrade-samba-winbind-krb5-locatorhuawei-euleros-2_0_sp8-upgrade-samba-winbind-modules | Apr 26, 2022 | Jan 11, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-libsmbclienthuawei-euleros-2_0_sp9-upgrade-libwbclienthuawei-euleros-2_0_sp9-upgrade-sambahuawei-euleros-2_0_sp9-upgrade-samba-clienthuawei-euleros-2_0_sp9-upgrade-samba-commonhuawei-euleros-2_0_sp9-upgrade-samba-common-toolshuawei-euleros-2_0_sp9-upgrade-samba-libshuawei-euleros-2_0_sp9-upgrade-samba-winbindhuawei-euleros-2_0_sp9-upgrade-samba-winbind-clientshuawei-euleros-2_0_sp9-upgrade-samba-winbind-modules | Apr 19, 2022 | Jan 11, 2022 | |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | Jan 11, 2022 |
| Samba | samba-upgrade-4_13_16 | Mar 7, 2022 | Jan 11, 2022 | |
| Suse | — | suse-upgrade-apache2-mod_apparmorsuse-upgrade-apparmor-abstractionssuse-upgrade-apparmor-docssuse-upgrade-apparmor-parsersuse-upgrade-apparmor-parser-langsuse-upgrade-apparmor-profilessuse-upgrade-apparmor-utilssuse-upgrade-apparmor-utils-langsuse-upgrade-ca-certificatessuse-upgrade-ctdbsuse-upgrade-ctdb-pcp-pmdasuse-upgrade-krb5suse-upgrade-krb5-32bitsuse-upgrade-krb5-clientsuse-upgrade-krb5-develsuse-upgrade-krb5-devel-32bitsuse-upgrade-krb5-minisuse-upgrade-krb5-mini-develsuse-upgrade-krb5-plugin-kdb-ldapsuse-upgrade-krb5-plugin-preauth-otpsuse-upgrade-krb5-plugin-preauth-pkinitsuse-upgrade-krb5-plugin-preauth-spakesuse-upgrade-krb5-serversuse-upgrade-ldb-toolssuse-upgrade-libapparmor-develsuse-upgrade-libapparmor1suse-upgrade-libapparmor1-32bitsuse-upgrade-libgnutls30suse-upgrade-libgnutls30-32bitsuse-upgrade-libhogweed4suse-upgrade-libhogweed4-32bitsuse-upgrade-libipa_hbac-develsuse-upgrade-libipa_hbac0suse-upgrade-libldb-develsuse-upgrade-libldb2suse-upgrade-libldb2-32bitsuse-upgrade-libnettle6suse-upgrade-libnettle6-32bitsuse-upgrade-libnfsidmap-ssssuse-upgrade-libp11-kit0suse-upgrade-libp11-kit0-32bitsuse-upgrade-libsamba-policy-develsuse-upgrade-libsamba-policy-python3-develsuse-upgrade-libsamba-policy0-python3suse-upgrade-libsamba-policy0-python3-32bitsuse-upgrade-libsamba-policy0-python3-64bitsuse-upgrade-libsss_certmap-develsuse-upgrade-libsss_certmap0suse-upgrade-libsss_idmap-develsuse-upgrade-libsss_idmap0suse-upgrade-libsss_nss_idmap-develsuse-upgrade-libsss_nss_idmap0suse-upgrade-libsss_simpleifp-develsuse-upgrade-libsss_simpleifp0suse-upgrade-libtalloc-develsuse-upgrade-libtalloc2suse-upgrade-libtalloc2-32bitsuse-upgrade-libtdb-develsuse-upgrade-libtdb1suse-upgrade-libtdb1-32bitsuse-upgrade-libtevent-develsuse-upgrade-libtevent0suse-upgrade-libtevent0-32bitsuse-upgrade-p11-kitsuse-upgrade-p11-kit-32bitsuse-upgrade-p11-kit-develsuse-upgrade-p11-kit-nss-trustsuse-upgrade-p11-kit-toolssuse-upgrade-pam_apparmorsuse-upgrade-pam_apparmor-32bitsuse-upgrade-perl-apparmorsuse-upgrade-python-sssd-configsuse-upgrade-python3-apparmorsuse-upgrade-python3-ipa_hbacsuse-upgrade-python3-ldbsuse-upgrade-python3-ldb-32bitsuse-upgrade-python3-ldb-develsuse-upgrade-python3-sss-murmursuse-upgrade-python3-sss_nss_idmapsuse-upgrade-python3-sssd-configsuse-upgrade-python3-tallocsuse-upgrade-python3-talloc-32bitsuse-upgrade-python3-talloc-develsuse-upgrade-python3-tdbsuse-upgrade-python3-tdb-32bitsuse-upgrade-python3-teventsuse-upgrade-python3-tevent-32bitsuse-upgrade-ruby-apparmorsuse-upgrade-sambasuse-upgrade-samba-ad-dcsuse-upgrade-samba-ad-dc-libssuse-upgrade-samba-ad-dc-libs-32bitsuse-upgrade-samba-cephsuse-upgrade-samba-clientsuse-upgrade-samba-client-32bitsuse-upgrade-samba-client-64bitsuse-upgrade-samba-client-libssuse-upgrade-samba-client-libs-32bitsuse-upgrade-samba-develsuse-upgrade-samba-devel-32bitsuse-upgrade-samba-docsuse-upgrade-samba-dsdb-modulessuse-upgrade-samba-gpupdatesuse-upgrade-samba-ldb-ldapsuse-upgrade-samba-libssuse-upgrade-samba-libs-32bitsuse-upgrade-samba-libs-64bitsuse-upgrade-samba-libs-python3suse-upgrade-samba-libs-python3-32bitsuse-upgrade-samba-libs-python3-64bitsuse-upgrade-samba-python3suse-upgrade-samba-testsuse-upgrade-samba-toolsuse-upgrade-samba-winbindsuse-upgrade-samba-winbind-libssuse-upgrade-samba-winbind-libs-32bitsuse-upgrade-sssdsuse-upgrade-sssd-adsuse-upgrade-sssd-commonsuse-upgrade-sssd-dbussuse-upgrade-sssd-ipasuse-upgrade-sssd-krb5suse-upgrade-sssd-krb5-commonsuse-upgrade-sssd-ldapsuse-upgrade-sssd-proxysuse-upgrade-sssd-toolssuse-upgrade-sssd-wbclientsuse-upgrade-sssd-wbclient-develsuse-upgrade-sssd-winbind-idmapsuse-upgrade-talloc-mansuse-upgrade-tdb-toolssuse-upgrade-tevent-mansuse-upgrade-yast2-samba-client | Feb 2, 2022 | Jan 11, 2022 |
| Ubuntu | ubuntu-upgrade-samba | Feb 2, 2022 | Jan 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub