All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition. SMB1 with unix extensions has to be enabled in order for this attack to succeed.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade samba-krb5-printingUpgrade samba-winbind-clientsUpgrade samba-test-libsUpgrade libwbclientUpgrade samba-common-libsUpgrade samba-winexeUpgrade samba-client-libsUpgrade samba-clientUpgrade python3-sambaUpgrade libwbclient-develUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade samba-libsUpgrade python3-samba-testUpgrade samba-commonUpgrade libsmbclient-develUpgrade samba-vfs-iouringUpgrade libsmbclientUpgrade samba-develUpgrade sambaUpgrade ctdbUpgrade samba-testUpgrade samba-winbindUpgrade samba-pidlUpgrade samba-winbind-modules | May 13, 2022 | Feb 21, 2022 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Feb 21, 2022 |
| Amazon_linux_2023 | — | Upgrade samba-winbind-clients-debuginfoUpgrade libnetapiUpgrade samba-ldb-ldap-modulesUpgrade samba-testUpgrade libwbclient-debuginfoUpgrade samba-vfs-iouringUpgrade libwbclientUpgrade samba-pidlUpgrade samba-debugsourceUpgrade libnetapi-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade samba-libsUpgrade python3-sambaUpgrade samba-krb5-printingUpgrade samba-usersharesUpgrade samba-common-libs-debuginfoUpgrade samba-test-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-dcerpc-debuginfoUpgrade samba-client-libsUpgrade python3-samba-develUpgrade samba-develUpgrade samba-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-dc-libsUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-test-libsUpgrade samba-winbind-debuginfoUpgrade libwbclient-develUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-client-libs-debuginfoUpgrade samba-clientUpgrade samba-winbindUpgrade samba-winbind-krb5-locatorUpgrade python3-samba-testUpgrade libnetapi-develUpgrade samba-dcerpcUpgrade samba-test-libs-debuginfoUpgrade samba-client-debuginfoUpgrade sambaUpgrade samba-common-toolsUpgrade libsmbclient-devel | Feb 17, 2025 | Jan 31, 2022 |
| Centos_linux | — | Upgrade samba-client-libs-debuginfoUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade ctdbUpgrade samba-winbind-modulesUpgrade samba-winbind-krb5-locatorUpgrade sambaUpgrade samba-client-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade libsmbclientUpgrade python3-samba-testUpgrade samba-client-libsUpgrade samba-vfs-iouring-debuginfoUpgrade samba-vfs-iouringUpgrade ctdb-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-debuginfoUpgrade samba-testUpgrade samba-test-libs-debuginfoUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-libs-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-clientUpgrade python3-sambaUpgrade samba-test-libsUpgrade samba-common-libs-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-test-debuginfoUpgrade samba-commonUpgrade samba-debugsourceUpgrade samba-winbind-clients-debuginfoUpgrade python3-samba-debuginfoUpgrade libwbclientUpgrade samba-pidlUpgrade samba-krb5-printingUpgrade samba-common-tools-debuginfo | May 13, 2022 | Feb 21, 2022 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Feb 21, 2022 |
| Freebsd | — | Upgrade samba415Upgrade samba413Upgrade samba414 | Nov 4, 2022 | Feb 1, 2022 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Feb 21, 2022 |
| Oracle_linux | — | Upgrade libwbclient-develUpgrade samba-vfs-iouringUpgrade libsmbclientUpgrade samba-test-libsUpgrade samba-pidlUpgrade ctdbUpgrade samba-commonUpgrade samba-testUpgrade samba-libsUpgrade libwbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade python3-samba-testUpgrade samba-winbindUpgrade samba-krb5-printingUpgrade sambaUpgrade samba-develUpgrade samba-winexeUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade python3-sambaUpgrade samba-common-libsUpgrade libsmbclient-devel | May 18, 2022 | Jan 31, 2022 |
| Redhat_linux | — | Upgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-krb5-printingUpgrade sambaUpgrade samba-winbind-debuginfoUpgrade python3-samba-testUpgrade python3-sambaUpgrade samba-winbind-clients-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-client-libsUpgrade samba-test-libsUpgrade python3-samba-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade libsmbclient-develUpgrade samba-winexeUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-vfs-iouring-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-test-debuginfoUpgrade libwbclientUpgrade samba-libsUpgrade ctdb-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-krb5-printing-debuginfoUpgrade samba-client-debuginfoUpgrade libsmbclientUpgrade samba-develUpgrade libwbclient-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-vfs-iouringUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-commonUpgrade samba-debugsourceUpgrade samba-test-libs-debuginfoUpgrade samba-testUpgrade samba-common-tools-debuginfoUpgrade samba-winexe-debuginfoUpgrade samba-pidlUpgrade libwbclient-develUpgrade samba-common-libs-debuginfoUpgrade ctdbUpgrade samba-debuginfo | May 13, 2022 | Feb 21, 2022 |
| Rocky_linux | — | Upgrade samba-test-debuginfoUpgrade samba-winexeUpgrade samba-winbind-clientsUpgrade samba-develUpgrade samba-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-test-libs-debuginfoUpgrade libsmbclient-develUpgrade samba-common-libsUpgrade samba-winbind-modules-debuginfoUpgrade samba-testUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-clientUpgrade samba-common-tools-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-krb5-printingUpgrade ctdbUpgrade samba-winbind-krb5-locatorUpgrade python3-sambaUpgrade samba-debugsourceUpgrade samba-test-libsUpgrade samba-libs-debuginfoUpgrade samba-common-toolsUpgrade python3-samba-debuginfoUpgrade samba-libsUpgrade samba-client-debuginfoUpgrade samba-winbindUpgrade samba-winbind-debuginfoUpgrade libwbclient-develUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-modulesUpgrade samba-vfs-iouring-debuginfoUpgrade python3-samba-testUpgrade samba-winbind-clients-debuginfoUpgrade ctdb-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-client-libsUpgrade sambaUpgrade libwbclientUpgrade libsmbclientUpgrade samba-winexe-debuginfoUpgrade samba-vfs-iouringUpgrade samba-common-libs-debuginfo | May 20, 2022 | Feb 21, 2022 |
| Samba | — | Upgrade to Samba 4.15.5 or later. | Mar 9, 2022 | Feb 21, 2022 |
| Suse | — | Upgrade ctdb-pcp-pmdaUpgrade python3-talloc-32bitUpgrade krb5-serverUpgrade libsss_idmap-develUpgrade libsamba-policy0-python3-64bitUpgrade libldb2Upgrade p11-kitUpgrade libtdb1-32bitUpgrade krb5-mini-develUpgrade perl-apparmorUpgrade tevent-manUpgrade samba-winbind-libs-32bitUpgrade libsss_idmap0Upgrade krb5-miniUpgrade pam_apparmor-32bitUpgrade python3-tdb-32bitUpgrade python3-sssd-configUpgrade apparmor-parserUpgrade libhogweed4Upgrade sssd-krb5-commonUpgrade krb5-plugin-kdb-ldapUpgrade apparmor-abstractionsUpgrade samba-cephUpgrade sssdUpgrade samba-ad-dcUpgrade ca-certificatesUpgrade samba-ad-dc-libsUpgrade libldb-develUpgrade samba-gpupdateUpgrade sssd-ldapUpgrade samba-libs-32bitUpgrade samba-client-64bitUpgrade samba-develUpgrade python3-ldb-32bitUpgrade sssd-proxyUpgrade pam_apparmorUpgrade libsss_nss_idmap0Upgrade libgnutls30Upgrade libsamba-policy-develUpgrade libtdb-develUpgrade libsamba-policy-python3-develUpgrade krb5-develUpgrade samba-clientUpgrade samba-docUpgrade samba-toolUpgrade krb5-devel-32bitUpgrade libsamba-policy0-python3-32bitUpgrade p11-kit-toolsUpgrade apparmor-profilesUpgrade libp11-kit0Upgrade libapparmor-develUpgrade p11-kit-develUpgrade apparmor-parser-langUpgrade sssd-adUpgrade ctdbUpgrade libnettle6-32bitUpgrade p11-kit-nss-trustUpgrade samba-client-32bitUpgrade python3-tallocUpgrade python-sssd-configUpgrade sssd-krb5Upgrade krb5-plugin-preauth-otpUpgrade sambaUpgrade libsss_nss_idmap-develUpgrade samba-ldb-ldapUpgrade krb5-clientUpgrade python3-teventUpgrade libp11-kit0-32bitUpgrade samba-libs-python3-32bitUpgrade sssd-toolsUpgrade python3-ldb-develUpgrade sssd-winbind-idmapUpgrade tdb-toolsUpgrade ldb-toolsUpgrade apparmor-utilsUpgrade python3-ldbUpgrade samba-ad-dc-libs-32bitUpgrade samba-libsUpgrade apparmor-docsUpgrade libipa_hbac-develUpgrade samba-libs-python3-64bitUpgrade samba-client-libsUpgrade libtalloc2Upgrade libhogweed4-32bitUpgrade samba-winbind-libsUpgrade samba-libs-python3Upgrade libtevent-develUpgrade libldb2-32bitUpgrade python3-tevent-32bitUpgrade apache2-mod_apparmorUpgrade sssd-wbclient-develUpgrade libtevent0-32bitUpgrade krb5-plugin-preauth-pkinitUpgrade samba-winbindUpgrade p11-kit-32bitUpgrade ruby-apparmorUpgrade libsamba-policy0-python3Upgrade libipa_hbac0Upgrade samba-client-libs-32bitUpgrade libnfsidmap-sssUpgrade krb5-32bitUpgrade python3-ipa_hbacUpgrade sssd-ipaUpgrade samba-testUpgrade samba-python3Upgrade libtevent0Upgrade libsss_certmap-develUpgrade libsss_certmap0Upgrade libgnutls30-32bitUpgrade libapparmor1Upgrade python3-sss-murmurUpgrade samba-dsdb-modulesUpgrade samba-devel-32bitUpgrade python3-tdbUpgrade libsss_simpleifp-develUpgrade sssd-dbusUpgrade libtalloc-develUpgrade libsss_simpleifp0Upgrade krb5Upgrade sssd-wbclientUpgrade python3-sss_nss_idmapUpgrade apparmor-utils-langUpgrade libtalloc2-32bitUpgrade python3-talloc-develUpgrade libapparmor1-32bitUpgrade krb5-plugin-preauth-spakeUpgrade libtdb1Upgrade talloc-manUpgrade samba-libs-64bitUpgrade yast2-samba-clientUpgrade sssd-commonUpgrade python3-apparmorUpgrade libnettle6 | Feb 2, 2022 | Feb 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub