A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a targeted RPC request to view the information that is part of the disclosed path.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade samba-winbind-modulesUpgrade samba-dcerpcUpgrade libsmbclientUpgrade python3-samba-testUpgrade samba-common-libsUpgrade samba-client-libsUpgrade samba-vfs-iouringUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade sambaUpgrade samba-usersharesUpgrade libnetapi-develUpgrade libwbclient-develUpgrade samba-winbindUpgrade samba-winexeUpgrade samba-test-libsUpgrade python3-samba-develUpgrade samba-toolsUpgrade samba-clientUpgrade samba-libsUpgrade python3-samba-dcUpgrade ctdbUpgrade samba-commonUpgrade libsmbclient-develUpgrade samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-pidlUpgrade samba-common-toolsUpgrade python3-sambaUpgrade libnetapiUpgrade samba-ldb-ldap-modulesUpgrade samba-krb5-printingUpgrade samba-develUpgrade libwbclient | Nov 16, 2023 | Jul 20, 2023 |
| Alpine Linux | — | Upgrade samba | Mar 21, 2024 | Jul 20, 2023 |
| Amazon_linux_2023 | — | Upgrade libnetapiUpgrade python3-samba-dcUpgrade samba-dcerpc-debuginfoUpgrade samba-common-toolsUpgrade samba-libs-debuginfoUpgrade samba-vfs-iouringUpgrade samba-develUpgrade samba-clientUpgrade samba-libsUpgrade samba-winbind-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade samba-client-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-client-libsUpgrade samba-test-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade libwbclientUpgrade samba-winbind-modules-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-usersharesUpgrade samba-winbindUpgrade samba-testUpgrade python3-sambaUpgrade sambaUpgrade samba-krb5-printingUpgrade libsmbclient-develUpgrade samba-common-libs-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-dc-libsUpgrade python3-samba-develUpgrade libwbclient-debuginfoUpgrade samba-debuginfoUpgrade samba-winbind-clientsUpgrade python3-samba-testUpgrade samba-common-libsUpgrade samba-test-libs-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade samba-commonUpgrade libnetapi-debuginfoUpgrade python3-samba-dc-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-test-libsUpgrade libsmbclient-debuginfoUpgrade samba-winbind-modulesUpgrade samba-toolsUpgrade libwbclient-develUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-pidlUpgrade samba-debugsourceUpgrade samba-dcerpcUpgrade libnetapi-develUpgrade libsmbclient | Feb 17, 2025 | Jul 19, 2023 |
| Centos_linux | — | Upgrade samba-vfs-iouringUpgrade samba-ldb-ldap-modulesUpgrade openchange-client-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade sambaUpgrade samba-debuginfoUpgrade samba-winexe-debuginfoUpgrade libwbclientUpgrade samba-pidlUpgrade samba-krb5-printingUpgrade samba-testUpgrade samba-winbindUpgrade evolution-mapi-debuginfoUpgrade samba-usersharesUpgrade samba-dcerpc-debuginfoUpgrade libnetapi-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-libsUpgrade samba-libs-debuginfoUpgrade ctdbUpgrade ctdb-debuginfoUpgrade libnetapiUpgrade python3-samba-dc-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-test-debuginfoUpgrade libsmbclient-debuginfoUpgrade python3-sambaUpgrade libwbclient-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade samba-client-libsUpgrade samba-toolsUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade python3-samba-dcUpgrade samba-vfs-iouring-debuginfoUpgrade samba-dc-libsUpgrade samba-common-libsUpgrade openchange-debuginfoUpgrade samba-debugsourceUpgrade samba-ldb-ldap-modules-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-test-libs-debuginfoUpgrade evolution-mapi-langpacksUpgrade samba-test-libsUpgrade samba-commonUpgrade openchange-debugsourceUpgrade openchangeUpgrade samba-winbind-clientsUpgrade evolution-mapi-debugsourceUpgrade evolution-mapiUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-dcerpcUpgrade samba-client-libs-debuginfoUpgrade samba-clientUpgrade samba-winexeUpgrade samba-winbind-debuginfoUpgrade samba-client-debuginfoUpgrade python3-samba-testUpgrade libsmbclientUpgrade samba-winbind-krb5-locator | Nov 8, 2023 | Jul 20, 2023 |
| Debian | — | Upgrade samba | Oct 19, 2023 | Jul 20, 2023 |
| Freebsd | — | Upgrade samba413Upgrade samba416 | Aug 6, 2023 | Aug 5, 2023 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Feb 21, 2024 | Jul 20, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade samba-libsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-commonUpgrade samba-winbindUpgrade libwbclientUpgrade sambaUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-winbind-clients | Jan 10, 2024 | Jul 20, 2023 |
| Oracle_linux | — | Upgrade samba-winbind-krb5-locatorUpgrade samba-krb5-printingUpgrade libnetapiUpgrade python3-sambaUpgrade samba-libsUpgrade samba-winbindUpgrade python3-samba-dcUpgrade samba-toolsUpgrade samba-testUpgrade openchangeUpgrade sambaUpgrade samba-commonUpgrade samba-clientUpgrade samba-common-toolsUpgrade libsmbclient-develUpgrade libwbclientUpgrade samba-develUpgrade samba-ldb-ldap-modulesUpgrade samba-test-libsUpgrade python3-samba-develUpgrade samba-client-libsUpgrade samba-dcerpcUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade python3-samba-testUpgrade samba-winexeUpgrade samba-winbind-modulesUpgrade samba-dc-libsUpgrade evolution-mapiUpgrade samba-usersharesUpgrade samba-pidlUpgrade samba-vfs-iouringUpgrade evolution-mapi-langpacksUpgrade libwbclient-develUpgrade libnetapi-devel | Nov 16, 2023 | Jul 19, 2023 |
| Redhat_linux | — | No solution existsUpgrade samba-libs-debuginfoUpgrade samba-winbindUpgrade evolution-mapi-debugsourceUpgrade samba-ldb-ldap-modulesUpgrade samba-winbind-krb5-locatorUpgrade samba-client-debuginfoUpgrade openchangeUpgrade samba-winbind-debuginfoUpgrade python3-sambaUpgrade samba-vfs-iouringUpgrade samba-dcerpc-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade sambaUpgrade samba-develUpgrade samba-krb5-printing-debuginfoUpgrade samba-common-toolsUpgrade samba-krb5-printingUpgrade samba-winbind-modules-debuginfoUpgrade openchange-debugsourceUpgrade samba-client-libsUpgrade libsmbclient-develUpgrade libsmbclient-debuginfoUpgrade libwbclientUpgrade openchange-debuginfoUpgrade evolution-mapi-langpacksUpgrade samba-test-libsUpgrade samba-commonUpgrade python3-samba-dcUpgrade samba-test-debuginfoUpgrade samba-libsUpgrade python3-samba-debuginfoUpgrade libnetapiUpgrade samba-testUpgrade samba-debuginfoUpgrade libnetapi-develUpgrade evolution-mapiUpgrade samba-winbind-clientsUpgrade samba-toolsUpgrade samba-usersharesUpgrade libwbclient-develUpgrade samba-winbind-modulesUpgrade libwbclient-debuginfoUpgrade samba-common-libsUpgrade samba-debugsourceUpgrade python3-samba-develUpgrade libnetapi-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-test-libs-debuginfoUpgrade evolution-mapi-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-clientUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade python3-samba-testUpgrade samba-client-libs-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade samba-pidlUpgrade ctdbUpgrade samba-winexe-debuginfoUpgrade libsmbclientUpgrade samba-winexeUpgrade python3-samba-dc-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-dcerpcUpgrade ctdb-debuginfoUpgrade samba-dc-libsUpgrade openchange-client-debuginfo | Nov 8, 2023 | Jul 20, 2023 |
| Rocky_linux | — | Upgrade openchangeUpgrade openchange-debugsourceUpgrade openchange-debuginfoUpgrade evolution-mapiUpgrade evolution-mapi-debuginfoUpgrade evolution-mapi-debugsource | Jun 29, 2026 | Jun 25, 2026 |
| Samba | — | Upgrade to Samba 4.17.10 or later.Upgrade to Samba 4.16.11 or later.Upgrade to Samba 4.18.5 or later. | Jul 31, 2023 | Jul 20, 2023 |
| Suse | — | Upgrade samba-testUpgrade libsamba-policy0-python3-32bitUpgrade samba-client-32bitUpgrade samba-libsUpgrade libsamba-policy0-python3Upgrade samba-develUpgrade samba-dsdb-modulesUpgrade libsamba-policy-python3-develUpgrade samba-devel-32bitUpgrade ctdbUpgrade samba-toolUpgrade samba-libs-32bitUpgrade samba-clientUpgrade samba-client-libs-32bitUpgrade ctdb-pcp-pmdaUpgrade samba-docUpgrade samba-python3Upgrade samba-winbind-libsUpgrade samba-ldb-ldapUpgrade samba-ad-dc-libsUpgrade samba-ad-dc-libs-32bitUpgrade samba-winbindUpgrade samba-winbind-libs-32bitUpgrade libsamba-policy-develUpgrade samba-client-libsUpgrade samba-ad-dcUpgrade sambaUpgrade samba-gpupdateUpgrade samba-libs-python3-32bitUpgrade samba-cephUpgrade samba-libs-python3 | Jul 20, 2023 | Jul 20, 2023 |
| Ubuntu | — | Upgrade samba | Jul 20, 2023 | Jul 19, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub