A symlink following vulnerability was found in Samba, where a user can create a symbolic link that will make 'smbd' escape the configured share path. This flaw allows a remote user with access to the exported part of the file system under a share via SMB1 unix extensions or NFS to create symlinks to files outside the 'smbd' configured share path and gain access to another restricted server's filesystem.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Jan 12, 2023 |
| Amazon_linux_2023 | — | Upgrade libsmbclientUpgrade samba-client-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade sambaUpgrade samba-winbindUpgrade libwbclient-develUpgrade samba-client-libs-debuginfoUpgrade samba-develUpgrade samba-winbind-krb5-locator-debuginfoUpgrade python3-samba-testUpgrade samba-dc-libsUpgrade samba-dcerpcUpgrade samba-test-libs-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winbind-clientsUpgrade samba-debugsourceUpgrade libnetapi-develUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-test-libsUpgrade python3-samba-debuginfoUpgrade samba-winbind-debuginfoUpgrade libwbclient-debuginfoUpgrade libsmbclient-develUpgrade samba-krb5-printing-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-pidlUpgrade libnetapi-debuginfoUpgrade samba-test-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-debuginfoUpgrade python3-sambaUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-winbind-modules-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade libnetapiUpgrade samba-libs-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-dcerpc-debuginfoUpgrade samba-testUpgrade samba-krb5-printingUpgrade samba-vfs-iouringUpgrade python3-samba-develUpgrade samba-winbind-clients-debuginfoUpgrade samba-usersharesUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade samba-libs | Feb 17, 2025 | Oct 25, 2022 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Jan 12, 2023 |
| Samba | — | Upgrade to Samba 4.17.2 or later. | Jan 12, 2023 | Jan 12, 2023 |
| Suse | — | Upgrade samba-develUpgrade samba-winbindUpgrade samba-ldb-ldapUpgrade samba-cephUpgrade libsamba-policy0-python3Upgrade samba-gpupdateUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-libs-32bitUpgrade samba-python3Upgrade samba-client-libs-32bitUpgrade samba-winbind-libsUpgrade samba-libs-python3Upgrade sambaUpgrade libsamba-policy-python3-develUpgrade samba-clientUpgrade libsamba-policy-develUpgrade samba-winbind-libs-32bit | Jun 13, 2023 | Jan 12, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub