All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in an area of the server file system not exported under the share definition. Note that SMB1 has to be enabled, or the share also available via NFS in order for this attack to succeed.
CVSS Details
- CVSS 3.1 Base Score: 2.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 21, 2024 | Jan 11, 2022 |
| Amazon Linux Ami 2 | — | Upgrade samba-libsUpgrade samba-develUpgrade libsmbclient-develUpgrade samba-winbind-krb5-locatorUpgrade samba-dc-libsUpgrade libsmbclientUpgrade sambaUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-debuginfoUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade ctdb-testsUpgrade samba-pythonUpgrade libwbclient-develUpgrade samba-winbindUpgrade ctdbUpgrade samba-clientUpgrade samba-dcUpgrade samba-test-libsUpgrade libwbclientUpgrade samba-pidlUpgrade samba-krb5-printingUpgrade samba-python-testUpgrade samba-testUpgrade samba-vfs-glusterfsUpgrade samba-client-libs | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade samba-dcerpc-debuginfoUpgrade samba-test-libsUpgrade samba-debugsourceUpgrade python3-samba-develUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade samba-test-libs-debuginfoUpgrade samba-testUpgrade samba-debuginfoUpgrade samba-krb5-printingUpgrade samba-client-libsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-commonUpgrade libwbclient-debuginfoUpgrade python3-sambaUpgrade libwbclientUpgrade samba-common-tools-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-test-debuginfoUpgrade samba-libsUpgrade samba-vfs-iouringUpgrade libnetapi-debuginfoUpgrade samba-pidlUpgrade libnetapiUpgrade samba-winbind-modules-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-usersharesUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade python3-samba-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-dc-libsUpgrade samba-client-debuginfoUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade python3-samba-testUpgrade samba-winbindUpgrade libsmbclient-develUpgrade libnetapi-develUpgrade libsmbclient-debuginfoUpgrade samba-dcerpcUpgrade libsmbclientUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-debuginfoUpgrade sambaUpgrade samba-develUpgrade samba-client-libs-debuginfoUpgrade libwbclient-develUpgrade samba-winbind-clients | Feb 17, 2025 | Jan 10, 2022 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Jan 11, 2022 |
| Freebsd | — | Upgrade samba414Upgrade samba413Upgrade samba415 | Nov 4, 2022 | Feb 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade samba-winbindUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade sambaUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade libwbclient | May 9, 2022 | Jan 11, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-client-libsUpgrade ctdb-testsUpgrade python2-samba-testUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade python3-sambaUpgrade samba-test-libsUpgrade samba-clientUpgrade python2-sambaUpgrade samba-commonUpgrade samba-libsUpgrade samba-testUpgrade libwbclientUpgrade samba-krb5-printingUpgrade ctdbUpgrade samba-pidlUpgrade python3-samba-testUpgrade samba-common-libsUpgrade samba-dc-libsUpgrade sambaUpgrade samba-winbind-clients | Apr 26, 2022 | Jan 11, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-libsUpgrade samba-common-toolsUpgrade libwbclientUpgrade sambaUpgrade samba-commonUpgrade samba-clientUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-winbind-modules | Apr 19, 2022 | Jan 11, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 11, 2022 |
| Samba | — | Upgrade to Samba 4.13.16 or later. | Mar 7, 2022 | Jan 11, 2022 |
| Suse | — | Upgrade libsss_nss_idmap0Upgrade samba-devel-32bitUpgrade libsss_certmap-develUpgrade python3-teventUpgrade krb5-plugin-kdb-ldapUpgrade sssdUpgrade libsss_certmap0Upgrade libapparmor-develUpgrade apparmor-parserUpgrade ruby-apparmorUpgrade krb5-miniUpgrade libtdb-develUpgrade samba-testUpgrade sssd-wbclient-develUpgrade python3-tdb-32bitUpgrade samba-libs-python3-32bitUpgrade libsamba-policy-develUpgrade libapparmor1-32bitUpgrade samba-clientUpgrade ldb-toolsUpgrade libnfsidmap-sssUpgrade krb5-plugin-preauth-otpUpgrade krb5Upgrade libtalloc2-32bitUpgrade python3-sssd-configUpgrade libsamba-policy-python3-develUpgrade sssd-krb5Upgrade yast2-samba-clientUpgrade libipa_hbac-develUpgrade python3-ldbUpgrade pam_apparmor-32bitUpgrade p11-kit-toolsUpgrade libp11-kit0-32bitUpgrade samba-client-32bitUpgrade samba-libsUpgrade sssd-adUpgrade libnettle6-32bitUpgrade libsamba-policy0-python3-64bitUpgrade p11-kit-nss-trustUpgrade python3-talloc-develUpgrade pam_apparmorUpgrade apache2-mod_apparmorUpgrade talloc-manUpgrade ca-certificatesUpgrade libgnutls30-32bitUpgrade python3-apparmorUpgrade samba-client-libs-32bitUpgrade perl-apparmorUpgrade libhogweed4Upgrade p11-kitUpgrade python3-sss-murmurUpgrade krb5-serverUpgrade apparmor-docsUpgrade samba-libs-64bitUpgrade libsss_idmap0Upgrade libtevent0-32bitUpgrade libp11-kit0Upgrade sssd-krb5-commonUpgrade tevent-manUpgrade libtdb1Upgrade samba-toolUpgrade apparmor-utils-langUpgrade libsamba-policy0-python3Upgrade python-sssd-configUpgrade libtevent-develUpgrade samba-client-libsUpgrade p11-kit-32bitUpgrade libsamba-policy0-python3-32bitUpgrade python3-ldb-32bitUpgrade libgnutls30Upgrade libtdb1-32bitUpgrade apparmor-abstractionsUpgrade python3-tdbUpgrade libapparmor1Upgrade libtalloc2Upgrade sssd-dbusUpgrade libipa_hbac0Upgrade krb5-develUpgrade samba-python3Upgrade sssd-winbind-idmapUpgrade libsss_simpleifp0Upgrade krb5-32bitUpgrade python3-tevent-32bitUpgrade python3-talloc-32bitUpgrade krb5-mini-develUpgrade apparmor-profilesUpgrade apparmor-parser-langUpgrade samba-winbind-libs-32bitUpgrade sssd-wbclientUpgrade samba-ad-dcUpgrade sssd-ldapUpgrade sssd-toolsUpgrade python3-ldb-develUpgrade samba-ad-dc-libsUpgrade sssd-commonUpgrade libsss_nss_idmap-develUpgrade samba-client-64bitUpgrade samba-winbindUpgrade samba-ldb-ldapUpgrade apparmor-utilsUpgrade python3-ipa_hbacUpgrade libldb2Upgrade libnettle6Upgrade samba-winbind-libsUpgrade krb5-plugin-preauth-spakeUpgrade samba-ad-dc-libs-32bitUpgrade python3-tallocUpgrade ctdbUpgrade p11-kit-develUpgrade python3-sss_nss_idmapUpgrade samba-gpupdateUpgrade krb5-devel-32bitUpgrade libsss_simpleifp-develUpgrade samba-cephUpgrade krb5-plugin-preauth-pkinitUpgrade samba-dsdb-modulesUpgrade libtalloc-develUpgrade libsss_idmap-develUpgrade sambaUpgrade libldb2-32bitUpgrade samba-docUpgrade libldb-develUpgrade samba-libs-python3Upgrade samba-libs-32bitUpgrade ctdb-pcp-pmdaUpgrade libtevent0Upgrade krb5-clientUpgrade samba-libs-python3-64bitUpgrade sssd-proxyUpgrade tdb-toolsUpgrade samba-develUpgrade sssd-ipaUpgrade libhogweed4-32bit | Feb 2, 2022 | Jan 11, 2022 |
| Ubuntu | — | Upgrade samba | Feb 2, 2022 | Jan 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub