All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in an area of the server file system not exported under the share definition. Note that SMB1 has to be enabled, or the share also available via NFS in order for this attack to succeed.
CVSS Details
- CVSS 3.1 Base Score: 2.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 21, 2024 | Jan 11, 2022 |
| Amazon Linux Ami 2 | — | Upgrade samba-dcUpgrade samba-vfs-glusterfsUpgrade samba-client-libsUpgrade samba-testUpgrade samba-python-testUpgrade samba-pidlUpgrade samba-krb5-printingUpgrade samba-test-libsUpgrade libwbclientUpgrade samba-debuginfoUpgrade libwbclient-develUpgrade samba-winbindUpgrade samba-dc-libsUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-pythonUpgrade ctdb-testsUpgrade ctdbUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade sambaUpgrade samba-libsUpgrade samba-develUpgrade libsmbclient-develUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-common | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade samba-client-debuginfoUpgrade samba-dc-libsUpgrade samba-libs-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade libsmbclientUpgrade samba-winbind-clients-debuginfoUpgrade samba-winbindUpgrade libsmbclient-develUpgrade samba-winbind-krb5-locatorUpgrade libsmbclient-debuginfoUpgrade samba-dcerpcUpgrade libnetapi-develUpgrade samba-develUpgrade samba-krb5-printing-debuginfoUpgrade python3-samba-debuginfoUpgrade libnetapiUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-debuginfoUpgrade python3-samba-testUpgrade samba-clientUpgrade samba-usersharesUpgrade libwbclient-develUpgrade samba-winbind-modules-debuginfoUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-test-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-vfs-iouringUpgrade python3-sambaUpgrade samba-libsUpgrade samba-debugsourceUpgrade samba-dc-libs-debuginfoUpgrade samba-commonUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-test-libsUpgrade libwbclient-debuginfoUpgrade samba-krb5-printingUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-testUpgrade samba-ldb-ldap-modulesUpgrade samba-pidlUpgrade samba-debuginfoUpgrade python3-samba-develUpgrade libnetapi-debuginfoUpgrade samba-dcerpc-debuginfo | Feb 17, 2025 | Jan 10, 2022 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Jan 11, 2022 |
| Freebsd | — | Upgrade samba415Upgrade samba413Upgrade samba414 | Nov 4, 2022 | Feb 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-clientUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-winbindUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade libwbclient | May 9, 2022 | Jan 11, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-pidlUpgrade samba-testUpgrade libwbclientUpgrade samba-clientUpgrade samba-commonUpgrade ctdbUpgrade python3-sambaUpgrade python2-sambaUpgrade samba-krb5-printingUpgrade samba-test-libsUpgrade samba-libsUpgrade python3-samba-testUpgrade samba-winbind-clientsUpgrade python2-samba-testUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba-dc-libsUpgrade samba-client-libsUpgrade samba-winbindUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade ctdb-tests | Apr 26, 2022 | Jan 11, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-winbindUpgrade libsmbclientUpgrade libwbclientUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba | Apr 19, 2022 | Jan 11, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 11, 2022 |
| Samba | — | Upgrade to Samba 4.13.16 or later. | Mar 7, 2022 | Jan 11, 2022 |
| Suse | — | Upgrade libgnutls30Upgrade samba-client-64bitUpgrade samba-cephUpgrade libsss_simpleifp-develUpgrade python3-tdbUpgrade python3-ipa_hbacUpgrade libtevent-develUpgrade tdb-toolsUpgrade samba-client-libsUpgrade apparmor-abstractionsUpgrade libapparmor1Upgrade krb5-develUpgrade libtalloc-develUpgrade libtdb1-32bitUpgrade sssd-dbusUpgrade python3-talloc-32bitUpgrade libsss_nss_idmap-develUpgrade python3-tevent-32bitUpgrade sssd-commonUpgrade sssd-toolsUpgrade samba-ad-dcUpgrade krb5-plugin-preauth-pkinitUpgrade krb5-devel-32bitUpgrade sssd-proxyUpgrade python3-ldb-32bitUpgrade sambaUpgrade ctdb-pcp-pmdaUpgrade samba-libs-32bitUpgrade krb5-plugin-preauth-spakeUpgrade libnettle6Upgrade python3-tallocUpgrade apparmor-utilsUpgrade ctdbUpgrade krb5-clientUpgrade libsss_idmap-develUpgrade libipa_hbac0Upgrade libtevent0Upgrade sssd-ldapUpgrade p11-kit-32bitUpgrade samba-develUpgrade samba-libs-python3-64bitUpgrade samba-ad-dc-libsUpgrade samba-dsdb-modulesUpgrade libldb2-32bitUpgrade samba-ldb-ldapUpgrade samba-winbindUpgrade libsamba-policy0-python3-32bitUpgrade sssd-wbclientUpgrade libtalloc2Upgrade libsss_simpleifp0Upgrade samba-python3Upgrade krb5-mini-develUpgrade python3-ldb-develUpgrade samba-winbind-libs-32bitUpgrade apparmor-profilesUpgrade krb5-32bitUpgrade sssd-winbind-idmapUpgrade samba-gpupdateUpgrade p11-kit-develUpgrade samba-ad-dc-libs-32bitUpgrade libldb2Upgrade python3-sss_nss_idmapUpgrade samba-winbind-libsUpgrade apparmor-parser-langUpgrade libhogweed4-32bitUpgrade libldb-develUpgrade samba-docUpgrade samba-libs-python3Upgrade sssd-ipaUpgrade apparmor-utils-langUpgrade python3-teventUpgrade python3-tdb-32bitUpgrade libsss_idmap0Upgrade python3-sssd-configUpgrade samba-testUpgrade libtdb1Upgrade tevent-manUpgrade libtalloc2-32bitUpgrade apache2-mod_apparmorUpgrade p11-kit-nss-trustUpgrade ca-certificatesUpgrade samba-libsUpgrade ldb-toolsUpgrade apparmor-parserUpgrade libapparmor1-32bitUpgrade krb5-plugin-preauth-otpUpgrade krb5Upgrade libsamba-policy0-python3-64bitUpgrade talloc-manUpgrade samba-clientUpgrade p11-kit-toolsUpgrade libtevent0-32bitUpgrade sssd-adUpgrade samba-client-32bitUpgrade libp11-kit0Upgrade python3-apparmorUpgrade apparmor-docsUpgrade python3-talloc-develUpgrade libsamba-policy-develUpgrade yast2-samba-clientUpgrade sssdUpgrade sssd-krb5Upgrade python-sssd-configUpgrade p11-kitUpgrade libsamba-policy-python3-develUpgrade libhogweed4Upgrade ruby-apparmorUpgrade libnfsidmap-sssUpgrade perl-apparmorUpgrade libnettle6-32bitUpgrade libapparmor-develUpgrade samba-devel-32bitUpgrade libp11-kit0-32bitUpgrade libsss_nss_idmap0Upgrade sssd-wbclient-develUpgrade libsss_certmap-develUpgrade krb5-plugin-kdb-ldapUpgrade libsss_certmap0Upgrade libtdb-develUpgrade samba-client-libs-32bitUpgrade pam_apparmor-32bitUpgrade libipa_hbac-develUpgrade python3-ldbUpgrade sssd-krb5-commonUpgrade samba-libs-64bitUpgrade krb5-serverUpgrade python3-sss-murmurUpgrade libgnutls30-32bitUpgrade pam_apparmorUpgrade libsamba-policy0-python3Upgrade krb5-miniUpgrade samba-libs-python3-32bitUpgrade samba-tool | Feb 2, 2022 | Jan 11, 2022 |
| Ubuntu | — | Upgrade samba | Feb 2, 2022 | Jan 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub