All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in an area of the server file system not exported under the share definition. Note that SMB1 has to be enabled, or the share also available via NFS in order for this attack to succeed.
CVSS Details
- CVSS 3.1 Base Score: 2.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 21, 2024 | Jan 11, 2022 |
| Amazon Linux Ami 2 | — | Upgrade samba-vfs-glusterfsUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-dcUpgrade samba-testUpgrade samba-python-testUpgrade samba-test-libsUpgrade samba-pidlUpgrade samba-krb5-printingUpgrade samba-clientUpgrade sambaUpgrade samba-winbind-krb5-locatorUpgrade samba-commonUpgrade libsmbclientUpgrade ctdb-testsUpgrade samba-debuginfoUpgrade samba-pythonUpgrade samba-develUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-dc-libsUpgrade samba-libsUpgrade ctdbUpgrade libwbclient-develUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade libsmbclient-develUpgrade samba-winbind-clients | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade samba-winbind-clients-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-debuginfoUpgrade libnetapiUpgrade samba-winbind-modules-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade libwbclient-develUpgrade samba-client-debuginfoUpgrade samba-common-toolsUpgrade libsmbclient-develUpgrade python3-samba-testUpgrade libsmbclient-debuginfoUpgrade libnetapi-develUpgrade samba-client-libs-debuginfoUpgrade samba-dcerpcUpgrade samba-winbind-krb5-locatorUpgrade sambaUpgrade samba-develUpgrade libsmbclientUpgrade python3-samba-debuginfoUpgrade samba-winbind-modulesUpgrade samba-dc-libsUpgrade samba-clientUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba-usersharesUpgrade samba-winbind-clientsUpgrade python3-sambaUpgrade libnetapi-debuginfoUpgrade samba-test-debuginfoUpgrade samba-test-libsUpgrade samba-common-tools-debuginfoUpgrade samba-debuginfoUpgrade libwbclientUpgrade samba-vfs-iouringUpgrade samba-common-libs-debuginfoUpgrade samba-pidlUpgrade samba-libsUpgrade samba-client-libsUpgrade samba-krb5-printingUpgrade samba-testUpgrade samba-ldb-ldap-modules-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-dcerpc-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-commonUpgrade samba-test-libs-debuginfoUpgrade python3-samba-develUpgrade samba-debugsourceUpgrade samba-ldb-ldap-modules | Feb 17, 2025 | Jan 10, 2022 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Jan 11, 2022 |
| Freebsd | — | Upgrade samba413Upgrade samba415Upgrade samba414 | Nov 4, 2022 | Feb 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade samba-libsUpgrade libwbclientUpgrade samba-winbindUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-commonUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-winbind-modules | May 9, 2022 | Jan 11, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade python3-samba-testUpgrade sambaUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade ctdb-testsUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-winbindUpgrade python2-samba-testUpgrade libwbclientUpgrade samba-testUpgrade samba-pidlUpgrade python2-sambaUpgrade samba-clientUpgrade samba-commonUpgrade samba-test-libsUpgrade samba-krb5-printingUpgrade ctdbUpgrade python3-sambaUpgrade samba-libs | Apr 26, 2022 | Jan 11, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-clientUpgrade samba-winbindUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-libsUpgrade samba | Apr 19, 2022 | Jan 11, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 11, 2022 |
| Samba | — | Upgrade to Samba 4.13.16 or later. | Mar 7, 2022 | Jan 11, 2022 |
| Suse | — | Upgrade samba-develUpgrade sssd-proxyUpgrade libipa_hbac0Upgrade libsamba-policy0-python3-32bitUpgrade libsss_simpleifp-develUpgrade samba-docUpgrade samba-client-64bitUpgrade samba-winbindUpgrade apparmor-utilsUpgrade libtevent0Upgrade libgnutls30Upgrade samba-client-libsUpgrade libtdb1-32bitUpgrade samba-libs-python3-64bitUpgrade krb5-clientUpgrade libsss_idmap-develUpgrade sssd-dbusUpgrade samba-ldb-ldapUpgrade sssd-commonUpgrade krb5-devel-32bitUpgrade libtalloc-develUpgrade samba-ad-dc-libsUpgrade samba-dsdb-modulesUpgrade krb5-32bitUpgrade krb5-mini-develUpgrade krb5-plugin-preauth-pkinitUpgrade libapparmor1Upgrade libsss_nss_idmap-develUpgrade python3-talloc-32bitUpgrade sssd-toolsUpgrade sssd-winbind-idmapUpgrade python3-tallocUpgrade krb5-develUpgrade samba-gpupdateUpgrade python3-ipa_hbacUpgrade samba-ad-dcUpgrade libnettle6Upgrade samba-winbind-libsUpgrade apparmor-parser-langUpgrade libtevent-develUpgrade python3-tevent-32bitUpgrade p11-kit-32bitUpgrade sssd-wbclientUpgrade sssd-ldapUpgrade python3-ldb-32bitUpgrade samba-libs-python3Upgrade libtalloc2Upgrade python3-tdbUpgrade libldb2-32bitUpgrade libldb-develUpgrade tdb-toolsUpgrade samba-libs-32bitUpgrade libhogweed4-32bitUpgrade sssd-ipaUpgrade sambaUpgrade samba-cephUpgrade ctdbUpgrade p11-kit-develUpgrade krb5-plugin-preauth-spakeUpgrade libldb2Upgrade samba-ad-dc-libs-32bitUpgrade python3-sss_nss_idmapUpgrade samba-winbind-libs-32bitUpgrade ctdb-pcp-pmdaUpgrade samba-python3Upgrade apparmor-abstractionsUpgrade libsss_simpleifp0Upgrade apparmor-profilesUpgrade python3-ldb-develUpgrade krb5-miniUpgrade samba-client-libs-32bitUpgrade sssd-krb5-commonUpgrade krb5-plugin-kdb-ldapUpgrade libapparmor-develUpgrade libsss_idmap0Upgrade libtdb1Upgrade apparmor-utils-langUpgrade samba-libs-64bitUpgrade krb5-serverUpgrade pam_apparmor-32bitUpgrade python3-ldbUpgrade python3-sss-murmurUpgrade ruby-apparmorUpgrade libsss_certmap-develUpgrade python3-sssd-configUpgrade libsamba-policy-develUpgrade libtalloc2-32bitUpgrade samba-client-32bitUpgrade python3-talloc-develUpgrade python3-apparmorUpgrade p11-kit-toolsUpgrade libtevent0-32bitUpgrade perl-apparmorUpgrade libp11-kit0Upgrade apparmor-docsUpgrade sssd-adUpgrade libipa_hbac-develUpgrade python3-tdb-32bitUpgrade libsamba-policy0-python3Upgrade tevent-manUpgrade samba-testUpgrade libhogweed4Upgrade sssd-krb5Upgrade sssdUpgrade python-sssd-configUpgrade p11-kitUpgrade sssd-wbclient-develUpgrade yast2-samba-clientUpgrade libsamba-policy-python3-develUpgrade libtdb-develUpgrade apparmor-parserUpgrade libsss_certmap0Upgrade samba-clientUpgrade libnfsidmap-sssUpgrade talloc-manUpgrade libsamba-policy0-python3-64bitUpgrade samba-libsUpgrade libp11-kit0-32bitUpgrade libnettle6-32bitUpgrade libgnutls30-32bitUpgrade ca-certificatesUpgrade apache2-mod_apparmorUpgrade libapparmor1-32bitUpgrade pam_apparmorUpgrade p11-kit-nss-trustUpgrade ldb-toolsUpgrade libsss_nss_idmap0Upgrade krb5Upgrade samba-devel-32bitUpgrade krb5-plugin-preauth-otpUpgrade python3-teventUpgrade samba-libs-python3-32bitUpgrade samba-tool | Feb 2, 2022 | Jan 11, 2022 |
| Ubuntu | — | Upgrade samba | Feb 2, 2022 | Jan 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub