All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition. SMB1 with unix extensions has to be enabled in order for this attack to succeed.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade samba-test-libsUpgrade libwbclient-develUpgrade samba-clientUpgrade samba-client-libsUpgrade python3-samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-libsUpgrade samba-common-libsUpgrade python3-sambaUpgrade libwbclientUpgrade samba-winexeUpgrade samba-krb5-printingUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-vfs-iouringUpgrade samba-develUpgrade ctdbUpgrade samba-testUpgrade libsmbclient-develUpgrade samba-winbindUpgrade sambaUpgrade libsmbclientUpgrade samba-pidl | May 13, 2022 | Feb 21, 2022 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Feb 21, 2022 |
| Amazon_linux_2023 | — | Upgrade samba-test-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade libsmbclient-debuginfoUpgrade python3-samba-develUpgrade samba-develUpgrade samba-vfs-iouringUpgrade samba-pidlUpgrade libwbclientUpgrade samba-krb5-printingUpgrade samba-usersharesUpgrade samba-dcerpc-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade samba-winbind-clients-debuginfoUpgrade samba-testUpgrade libnetapiUpgrade samba-libsUpgrade libnetapi-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade python3-sambaUpgrade samba-client-libsUpgrade samba-debugsourceUpgrade libwbclient-debuginfoUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-common-tools-debuginfoUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-winbindUpgrade samba-dcerpcUpgrade samba-winbind-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade libnetapi-develUpgrade libwbclient-develUpgrade samba-winbind-modulesUpgrade samba-test-libsUpgrade samba-vfs-iouring-debuginfoUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-test-libs-debuginfoUpgrade sambaUpgrade python3-samba-testUpgrade libsmbclient-develUpgrade samba-client-debuginfo | Feb 17, 2025 | Jan 31, 2022 |
| Centos_linux | — | Upgrade samba-client-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-client-libs-debuginfoUpgrade samba-common-libsUpgrade libsmbclientUpgrade python3-samba-testUpgrade samba-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade ctdb-debuginfoUpgrade sambaUpgrade samba-client-libsUpgrade libsmbclient-debuginfoUpgrade ctdbUpgrade samba-vfs-iouringUpgrade samba-debugsourceUpgrade samba-test-libs-debuginfoUpgrade samba-test-debuginfoUpgrade samba-testUpgrade libwbclient-debuginfoUpgrade samba-clientUpgrade samba-common-tools-debuginfoUpgrade samba-common-toolsUpgrade python3-samba-debuginfoUpgrade samba-commonUpgrade python3-sambaUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-test-libsUpgrade samba-krb5-printingUpgrade samba-libsUpgrade samba-libs-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-pidlUpgrade libwbclient | May 13, 2022 | Feb 21, 2022 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Feb 21, 2022 |
| Freebsd | — | Upgrade samba414Upgrade samba413Upgrade samba415 | Nov 4, 2022 | Feb 1, 2022 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Feb 21, 2022 |
| Oracle_linux | — | Upgrade samba-vfs-iouringUpgrade libsmbclientUpgrade samba-commonUpgrade ctdbUpgrade samba-pidlUpgrade libwbclient-develUpgrade samba-test-libsUpgrade samba-testUpgrade samba-client-libsUpgrade samba-winexeUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade python3-sambaUpgrade samba-common-toolsUpgrade sambaUpgrade libsmbclient-develUpgrade samba-develUpgrade samba-common-libsUpgrade samba-clientUpgrade samba-winbindUpgrade samba-krb5-printingUpgrade python3-samba-testUpgrade libwbclient | May 18, 2022 | Jan 31, 2022 |
| Redhat_linux | — | Upgrade libwbclient-debuginfoUpgrade samba-debuginfoUpgrade samba-vfs-iouringUpgrade samba-client-libs-debuginfoUpgrade libwbclient-develUpgrade ctdbUpgrade samba-common-libs-debuginfoUpgrade samba-winexe-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-pidlUpgrade samba-testUpgrade samba-debugsourceUpgrade samba-commonUpgrade samba-winbind-krb5-locator-debuginfoUpgrade sambaUpgrade python3-sambaUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade samba-develUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-clientsUpgrade samba-krb5-printingUpgrade samba-winbind-clients-debuginfoUpgrade samba-clientUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winbindUpgrade samba-test-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-common-libsUpgrade samba-libs-debuginfoUpgrade libsmbclient-debuginfoUpgrade libwbclientUpgrade ctdb-debuginfoUpgrade samba-libsUpgrade python3-samba-testUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-client-debuginfoUpgrade samba-client-libsUpgrade samba-test-libsUpgrade samba-winexeUpgrade samba-winbind-modules-debuginfoUpgrade python3-samba-debuginfoUpgrade libsmbclient-devel | May 13, 2022 | Feb 21, 2022 |
| Rocky_linux | — | Upgrade python3-samba-debuginfoUpgrade samba-libsUpgrade samba-winbind-modules-debuginfoUpgrade libsmbclient-develUpgrade samba-test-libs-debuginfoUpgrade samba-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-develUpgrade libwbclient-debuginfoUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-test-debuginfoUpgrade samba-debugsourceUpgrade libsmbclient-debuginfoUpgrade samba-test-libsUpgrade samba-winexeUpgrade samba-common-libsUpgrade samba-libs-debuginfoUpgrade samba-testUpgrade ctdbUpgrade python3-sambaUpgrade samba-krb5-printingUpgrade python3-samba-testUpgrade samba-common-libs-debuginfoUpgrade samba-client-debuginfoUpgrade samba-winbindUpgrade samba-vfs-iouring-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade libwbclientUpgrade samba-winbind-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-vfs-iouringUpgrade ctdb-debuginfoUpgrade libsmbclientUpgrade libwbclient-develUpgrade samba-winexe-debuginfoUpgrade samba-client-libsUpgrade samba-winbind-clients-debuginfoUpgrade sambaUpgrade samba-winbind-modules | May 20, 2022 | Feb 21, 2022 |
| Samba | — | Upgrade to Samba 4.15.5 or later. | Mar 9, 2022 | Feb 21, 2022 |
| Suse | — | Upgrade sssd-dbusUpgrade python3-sss_nss_idmapUpgrade samba-libs-python3-64bitUpgrade libhogweed4-32bitUpgrade libtdb1Upgrade sambaUpgrade libtevent-develUpgrade libipa_hbac-develUpgrade samba-client-libsUpgrade libapparmor1-32bitUpgrade krb5-plugin-preauth-spakeUpgrade python3-ldbUpgrade tdb-toolsUpgrade samba-libsUpgrade python3-talloc-develUpgrade apparmor-docsUpgrade libtalloc-develUpgrade libtalloc2-32bitUpgrade apparmor-utils-langUpgrade samba-ad-dc-libs-32bitUpgrade libldb2-32bitUpgrade sssd-wbclient-develUpgrade apache2-mod_apparmorUpgrade samba-winbind-libsUpgrade samba-libs-python3Upgrade python3-tdbUpgrade python3-teventUpgrade apparmor-utilsUpgrade python3-ldb-develUpgrade libp11-kit0-32bitUpgrade samba-libs-python3-32bitUpgrade sssd-toolsUpgrade sssd-winbind-idmapUpgrade krb5Upgrade ldb-toolsUpgrade libsss_nss_idmap-develUpgrade libsss_simpleifp0Upgrade libtalloc2Upgrade python3-tevent-32bitUpgrade yast2-samba-clientUpgrade sssd-commonUpgrade talloc-manUpgrade libnettle6Upgrade krb5-clientUpgrade python3-apparmorUpgrade samba-libs-64bitUpgrade samba-ldb-ldapUpgrade samba-testUpgrade sssd-ipaUpgrade krb5-plugin-preauth-pkinitUpgrade libnfsidmap-sssUpgrade python3-ipa_hbacUpgrade samba-client-libs-32bitUpgrade sssd-wbclientUpgrade libsss_certmap0Upgrade krb5-32bitUpgrade libsss_certmap-develUpgrade libtevent0-32bitUpgrade libsamba-policy0-python3Upgrade libapparmor1Upgrade p11-kit-32bitUpgrade libipa_hbac0Upgrade ruby-apparmorUpgrade samba-dsdb-modulesUpgrade samba-devel-32bitUpgrade libtevent0Upgrade krb5-plugin-preauth-otpUpgrade python3-sss-murmurUpgrade libgnutls30-32bitUpgrade samba-python3Upgrade samba-cephUpgrade pam_apparmor-32bitUpgrade samba-winbind-libs-32bitUpgrade samba-clientUpgrade p11-kit-nss-trustUpgrade libtdb-develUpgrade libsamba-policy-python3-develUpgrade libldb-develUpgrade samba-toolUpgrade samba-docUpgrade libapparmor-develUpgrade python3-ldb-32bitUpgrade ctdbUpgrade libsss_simpleifp-develUpgrade samba-winbindUpgrade python3-tdb-32bitUpgrade perl-apparmorUpgrade krb5-mini-develUpgrade apparmor-abstractionsUpgrade tevent-manUpgrade samba-ad-dc-libsUpgrade sssdUpgrade samba-gpupdateUpgrade samba-ad-dcUpgrade sssd-ldapUpgrade ca-certificatesUpgrade apparmor-parser-langUpgrade p11-kit-toolsUpgrade libsamba-policy0-python3-64bitUpgrade p11-kitUpgrade libsamba-policy0-python3-32bitUpgrade python3-tallocUpgrade sssd-adUpgrade sssd-krb5Upgrade libtdb1-32bitUpgrade python-sssd-configUpgrade krb5-serverUpgrade libgnutls30Upgrade libp11-kit0Upgrade python3-talloc-32bitUpgrade ctdb-pcp-pmdaUpgrade pam_apparmorUpgrade samba-client-64bitUpgrade apparmor-profilesUpgrade libldb2Upgrade libsss_idmap-develUpgrade krb5-develUpgrade sssd-proxyUpgrade libnettle6-32bitUpgrade p11-kit-develUpgrade samba-client-32bitUpgrade samba-develUpgrade libsss_nss_idmap0Upgrade libhogweed4Upgrade samba-libs-32bitUpgrade libsss_idmap0Upgrade libsamba-policy-develUpgrade krb5-devel-32bitUpgrade krb5-miniUpgrade sssd-krb5-commonUpgrade krb5-plugin-kdb-ldapUpgrade python3-sssd-configUpgrade apparmor-parser | Feb 2, 2022 | Feb 1, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub