A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a targeted RPC request to view the information that is part of the disclosed path.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-samba-develUpgrade ctdbUpgrade libnetapiUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-develUpgrade libsmbclient-develUpgrade libwbclientUpgrade samba-test-libsUpgrade samba-libsUpgrade python3-samba-dcUpgrade samba-pidlUpgrade samba-winbind-krb5-locatorUpgrade samba-krb5-printingUpgrade samba-toolsUpgrade samba-testUpgrade samba-ldb-ldap-modulesUpgrade python3-sambaUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-dcerpcUpgrade libwbclient-develUpgrade samba-client-libsUpgrade samba-dc-libsUpgrade sambaUpgrade python3-samba-testUpgrade samba-common-libsUpgrade libnetapi-develUpgrade samba-winexeUpgrade libsmbclientUpgrade samba-usersharesUpgrade samba-vfs-iouring | Nov 16, 2023 | Jul 20, 2023 |
| Alpine Linux | — | Upgrade samba | Mar 21, 2024 | Jul 20, 2023 |
| Amazon_linux_2023 | — | Upgrade samba-vfs-iouring-debuginfoUpgrade samba-common-libsUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade libwbclient-develUpgrade samba-test-libs-debuginfoUpgrade samba-dc-libsUpgrade samba-dc-libs-debuginfoUpgrade python3-samba-dc-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-test-libsUpgrade libnetapi-develUpgrade samba-client-libs-debuginfoUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-toolsUpgrade samba-dcerpcUpgrade libsmbclient-debuginfoUpgrade python3-samba-develUpgrade samba-debuginfoUpgrade libnetapi-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-debugsourceUpgrade samba-winbind-clientsUpgrade samba-pidlUpgrade python3-samba-testUpgrade libsmbclientUpgrade libwbclient-debuginfoUpgrade samba-libsUpgrade samba-ldb-ldap-modulesUpgrade samba-client-debuginfoUpgrade samba-testUpgrade sambaUpgrade libnetapiUpgrade samba-common-toolsUpgrade samba-libs-debuginfoUpgrade python3-samba-dcUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-vfs-iouringUpgrade samba-develUpgrade python3-sambaUpgrade samba-winbind-clients-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-krb5-printingUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-dcerpc-debuginfoUpgrade libwbclientUpgrade samba-winbindUpgrade libsmbclient-develUpgrade samba-winbind-modules-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-usersharesUpgrade samba-test-debuginfoUpgrade samba-winbind-debuginfo | Feb 17, 2025 | Jul 19, 2023 |
| Centos_linux | — | Upgrade evolution-mapi-langpacksUpgrade samba-clientUpgrade samba-client-debuginfoUpgrade samba-test-libsUpgrade samba-winbind-modulesUpgrade python3-samba-debuginfoUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-dc-libsUpgrade samba-test-libs-debuginfoUpgrade samba-commonUpgrade python3-samba-dcUpgrade samba-common-libsUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade python3-samba-testUpgrade libsmbclientUpgrade samba-debugsourceUpgrade openchangeUpgrade samba-winbind-clientsUpgrade evolution-mapi-debugsourceUpgrade evolution-mapiUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-dcerpcUpgrade samba-client-libs-debuginfoUpgrade samba-winexeUpgrade openchange-debuginfoUpgrade openchange-debugsourceUpgrade samba-common-toolsUpgrade samba-winbind-clients-debuginfoUpgrade samba-test-debuginfoUpgrade samba-client-libsUpgrade samba-toolsUpgrade samba-winbind-modules-debuginfoUpgrade libnetapiUpgrade python3-samba-dc-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade openchange-client-debuginfoUpgrade sambaUpgrade samba-debuginfoUpgrade samba-winexe-debuginfoUpgrade libwbclientUpgrade samba-pidlUpgrade ctdbUpgrade ctdb-debuginfoUpgrade libnetapi-debuginfoUpgrade python3-sambaUpgrade samba-common-tools-debuginfoUpgrade samba-libsUpgrade samba-libs-debuginfoUpgrade samba-usersharesUpgrade samba-vfs-iouringUpgrade evolution-mapi-debuginfoUpgrade samba-dcerpc-debuginfoUpgrade samba-krb5-printingUpgrade samba-ldb-ldap-modulesUpgrade samba-testUpgrade samba-winbind | Nov 8, 2023 | Jul 20, 2023 |
| Debian | — | Upgrade samba | Oct 19, 2023 | Jul 20, 2023 |
| Freebsd | — | Upgrade samba413Upgrade samba416 | Aug 6, 2023 | Aug 5, 2023 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Feb 21, 2024 | Jul 20, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libsmbclientUpgrade samba-libsUpgrade samba-winbindUpgrade sambaUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-client | Jan 10, 2024 | Jul 20, 2023 |
| Oracle_linux | — | Upgrade libsmbclient-develUpgrade samba-develUpgrade samba-ldb-ldap-modulesUpgrade samba-common-toolsUpgrade samba-commonUpgrade python3-samba-dcUpgrade samba-test-libsUpgrade samba-testUpgrade libnetapiUpgrade sambaUpgrade libwbclientUpgrade openchangeUpgrade samba-winbind-krb5-locatorUpgrade samba-toolsUpgrade samba-winbindUpgrade samba-libsUpgrade python3-sambaUpgrade samba-clientUpgrade samba-krb5-printingUpgrade samba-pidlUpgrade evolution-mapi-langpacksUpgrade libwbclient-develUpgrade evolution-mapiUpgrade samba-dcerpcUpgrade libnetapi-develUpgrade samba-winexeUpgrade samba-dc-libsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-vfs-iouringUpgrade python3-samba-testUpgrade samba-usersharesUpgrade samba-client-libsUpgrade python3-samba-devel | Nov 16, 2023 | Jul 19, 2023 |
| Redhat_linux | — | Upgrade samba-commonUpgrade libsmbclient-debuginfoUpgrade python3-samba-debuginfoUpgrade libsmbclient-develUpgrade samba-winbind-clients-debuginfoUpgrade samba-client-debuginfoUpgrade openchange-debuginfoUpgrade libwbclientUpgrade samba-winbind-krb5-locatorUpgrade evolution-mapi-langpacksUpgrade samba-winbindUpgrade samba-libs-debuginfoUpgrade python3-sambaUpgrade libnetapiUpgrade python3-samba-dcUpgrade samba-test-debuginfoUpgrade samba-test-libsUpgrade sambaNo solution existsUpgrade samba-libsUpgrade samba-winbind-modules-debuginfoUpgrade samba-krb5-printingUpgrade samba-krb5-printing-debuginfoUpgrade samba-testUpgrade samba-dcerpc-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-vfs-iouringUpgrade openchange-debugsourceUpgrade samba-ldb-ldap-modulesUpgrade openchangeUpgrade evolution-mapi-debugsourceUpgrade samba-develUpgrade samba-client-libsUpgrade samba-common-toolsUpgrade libnetapi-develUpgrade samba-dcerpcUpgrade libwbclient-develUpgrade python3-samba-develUpgrade samba-common-libsUpgrade openchange-client-debuginfoUpgrade libnetapi-debuginfoUpgrade libwbclient-debuginfoUpgrade evolution-mapi-debuginfoUpgrade samba-debuginfoUpgrade samba-winexeUpgrade libsmbclientUpgrade samba-winexe-debuginfoUpgrade samba-winbind-modulesUpgrade samba-common-tools-debuginfoUpgrade python3-samba-dc-debuginfoUpgrade evolution-mapiUpgrade samba-pidlUpgrade ctdbUpgrade samba-test-libs-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade python3-samba-testUpgrade samba-dc-libs-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-clientUpgrade samba-debugsourceUpgrade samba-usersharesUpgrade samba-toolsUpgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade samba-common-libs-debuginfoUpgrade ctdb-debuginfo | Nov 8, 2023 | Jul 20, 2023 |
| Rocky_linux | — | Upgrade openchangeUpgrade openchange-debugsourceUpgrade openchange-debuginfoUpgrade evolution-mapiUpgrade evolution-mapi-debugsourceUpgrade evolution-mapi-debuginfo | Jun 29, 2026 | Jun 25, 2026 |
| Samba | — | Upgrade to Samba 4.18.5 or later.Upgrade to Samba 4.17.10 or later.Upgrade to Samba 4.16.11 or later. | Jul 31, 2023 | Jul 20, 2023 |
| Suse | — | Upgrade samba-libs-32bitUpgrade samba-client-libs-32bitUpgrade samba-client-32bitUpgrade samba-testUpgrade samba-develUpgrade libsamba-policy0-python3-32bitUpgrade libsamba-policy0-python3Upgrade libsamba-policy-python3-develUpgrade samba-toolUpgrade samba-devel-32bitUpgrade samba-libsUpgrade samba-dsdb-modulesUpgrade samba-clientUpgrade ctdbUpgrade samba-winbind-libs-32bitUpgrade samba-winbind-libsUpgrade samba-libs-python3Upgrade samba-ldb-ldapUpgrade sambaUpgrade samba-libs-python3-32bitUpgrade samba-ad-dc-libs-32bitUpgrade samba-cephUpgrade samba-ad-dc-libsUpgrade samba-client-libsUpgrade samba-ad-dcUpgrade samba-gpupdateUpgrade samba-python3Upgrade samba-winbindUpgrade libsamba-policy-develUpgrade ctdb-pcp-pmdaUpgrade samba-doc | Jul 20, 2023 | Jul 20, 2023 |
| Ubuntu | — | Upgrade samba | Jul 20, 2023 | Jul 19, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub