All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in an area of the server file system not exported under the share definition. Note that SMB1 has to be enabled, or the share also available via NFS in order for this attack to succeed.
CVSS Details
- CVSS 3.1 Base Score: 2.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 21, 2024 | Jan 11, 2022 |
| Amazon Linux Ami 2 | — | Upgrade ctdb-testsUpgrade samba-pythonUpgrade samba-commonUpgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba-dc-libsUpgrade samba-winbind-modulesUpgrade samba-debuginfoUpgrade sambaUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-winbindUpgrade ctdbUpgrade samba-develUpgrade libwbclient-develUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade libsmbclient-develUpgrade samba-dcUpgrade samba-testUpgrade samba-python-testUpgrade samba-vfs-glusterfsUpgrade samba-krb5-printingUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-test-libsUpgrade samba-pidl | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade samba-winbind-modules-debuginfoUpgrade libsmbclient-develUpgrade samba-winbind-krb5-locatorUpgrade python3-samba-debuginfoUpgrade python3-samba-testUpgrade samba-winbindUpgrade samba-winbind-clients-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-debuginfoUpgrade libnetapi-develUpgrade libsmbclient-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade libnetapiUpgrade samba-dc-libsUpgrade libwbclient-develUpgrade samba-common-toolsUpgrade samba-client-debuginfoUpgrade samba-dcerpcUpgrade samba-usersharesUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-modulesUpgrade samba-libs-debuginfoUpgrade libsmbclientUpgrade samba-clientUpgrade samba-common-libsUpgrade sambaUpgrade samba-develUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade samba-test-libsUpgrade samba-libsUpgrade samba-testUpgrade samba-winbind-krb5-locator-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-krb5-printingUpgrade samba-commonUpgrade samba-test-libs-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade samba-ldb-ldap-modules-debuginfoUpgrade python3-samba-develUpgrade samba-dc-libs-debuginfoUpgrade samba-pidlUpgrade samba-debuginfoUpgrade libnetapi-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-common-libs-debuginfoUpgrade libwbclientUpgrade samba-test-debuginfoUpgrade samba-debugsourceUpgrade samba-dcerpc-debuginfoUpgrade python3-sambaUpgrade samba-vfs-iouring | Feb 17, 2025 | Jan 10, 2022 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Jan 11, 2022 |
| Freebsd | — | Upgrade samba413Upgrade samba414Upgrade samba415 | Nov 4, 2022 | Feb 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libsmbclientUpgrade samba-winbindUpgrade samba-commonUpgrade samba-clientUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-libs | May 9, 2022 | Jan 11, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-libsUpgrade samba-krb5-printingUpgrade samba-clientUpgrade python2-sambaUpgrade samba-commonUpgrade libwbclientUpgrade samba-pidlUpgrade ctdbUpgrade python3-sambaUpgrade samba-test-libsUpgrade samba-testUpgrade ctdb-testsUpgrade python3-samba-testUpgrade samba-dc-libsUpgrade python2-samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-winbindUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade libsmbclient | Apr 26, 2022 | Jan 11, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-common-toolsUpgrade libwbclientUpgrade samba-libsUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade libsmbclientUpgrade samba-winbind | Apr 19, 2022 | Jan 11, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 11, 2022 |
| Samba | — | Upgrade to Samba 4.13.16 or later. | Mar 7, 2022 | Jan 11, 2022 |
| Suse | — | Upgrade apparmor-utilsUpgrade libgnutls30Upgrade libtevent-develUpgrade python3-tdbUpgrade samba-client-libsUpgrade samba-ad-dc-libsUpgrade krb5-plugin-preauth-pkinitUpgrade samba-dsdb-modulesUpgrade apparmor-abstractionsUpgrade libapparmor1Upgrade libtalloc-develUpgrade sssd-commonUpgrade sssd-dbusUpgrade samba-ad-dc-libs-32bitUpgrade python3-tallocUpgrade samba-winbindUpgrade apparmor-profilesUpgrade libsss_simpleifp-develUpgrade samba-client-64bitUpgrade libnettle6Upgrade sssd-winbind-idmapUpgrade krb5-plugin-preauth-spakeUpgrade krb5-mini-develUpgrade sssd-ldapUpgrade libsss_simpleifp0Upgrade python3-sss_nss_idmapUpgrade p11-kit-32bitUpgrade python3-tevent-32bitUpgrade samba-libs-python3-64bitUpgrade samba-ad-dcUpgrade samba-winbind-libs-32bitUpgrade krb5-32bitUpgrade python3-ldb-develUpgrade sssd-wbclientUpgrade libldb2Upgrade sssd-toolsUpgrade p11-kit-develUpgrade libtdb1-32bitUpgrade python3-talloc-32bitUpgrade python3-ipa_hbacUpgrade libtevent0Upgrade samba-python3Upgrade apparmor-parser-langUpgrade ctdbUpgrade samba-develUpgrade ctdb-pcp-pmdaUpgrade libhogweed4-32bitUpgrade tdb-toolsUpgrade samba-libs-python3Upgrade samba-libs-32bitUpgrade sssd-ipaUpgrade libtalloc2Upgrade sssd-proxyUpgrade krb5-devel-32bitUpgrade libldb-develUpgrade samba-ldb-ldapUpgrade libldb2-32bitUpgrade samba-cephUpgrade krb5-develUpgrade libsss_nss_idmap-develUpgrade python3-ldb-32bitUpgrade sambaUpgrade samba-docUpgrade samba-gpupdateUpgrade samba-winbind-libsUpgrade libsamba-policy0-python3-32bitUpgrade krb5-clientUpgrade libipa_hbac0Upgrade libsss_idmap-develUpgrade krb5-plugin-kdb-ldapUpgrade krb5-miniUpgrade libsss_certmap-develUpgrade libsamba-policy-python3-develUpgrade libsamba-policy-develUpgrade yast2-samba-clientUpgrade ruby-apparmorUpgrade p11-kitUpgrade libhogweed4Upgrade python-sssd-configUpgrade samba-client-libs-32bitUpgrade python3-sssd-configUpgrade libsamba-policy0-python3Upgrade libnettle6-32bitUpgrade talloc-manUpgrade apache2-mod_apparmorUpgrade libsamba-policy0-python3-64bitUpgrade samba-libsUpgrade ca-certificatesUpgrade samba-clientUpgrade python3-tdb-32bitUpgrade libtalloc2-32bitUpgrade python3-teventUpgrade tevent-manUpgrade samba-toolUpgrade samba-testUpgrade libtdb1Upgrade apparmor-utils-langUpgrade samba-libs-python3-32bitUpgrade p11-kit-nss-trustUpgrade libsss_idmap0Upgrade libp11-kit0-32bitUpgrade libgnutls30-32bitUpgrade pam_apparmorUpgrade libnfsidmap-sssUpgrade sssdUpgrade krb5-plugin-preauth-otpUpgrade python3-ldbUpgrade samba-devel-32bitUpgrade libipa_hbac-develUpgrade ldb-toolsUpgrade libsss_nss_idmap0Upgrade krb5-serverUpgrade sssd-krb5-commonUpgrade perl-apparmorUpgrade pam_apparmor-32bitUpgrade samba-libs-64bitUpgrade libtevent0-32bitUpgrade p11-kit-toolsUpgrade python3-apparmorUpgrade apparmor-docsUpgrade sssd-adUpgrade samba-client-32bitUpgrade python3-talloc-develUpgrade libapparmor1-32bitUpgrade libp11-kit0Upgrade krb5Upgrade python3-sss-murmurUpgrade sssd-krb5Upgrade libsss_certmap0Upgrade libtdb-develUpgrade apparmor-parserUpgrade sssd-wbclient-develUpgrade libapparmor-devel | Feb 2, 2022 | Jan 11, 2022 |
| Ubuntu | — | Upgrade samba | Feb 2, 2022 | Jan 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub