A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a targeted RPC request to view the information that is part of the disclosed path.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade samba-winbind-krb5-locatorUpgrade python3-samba-dcUpgrade samba-clientUpgrade libwbclientUpgrade libsmbclient-develUpgrade samba-commonUpgrade samba-ldb-ldap-modulesUpgrade samba-pidlUpgrade python3-sambaUpgrade samba-toolsUpgrade samba-test-libsUpgrade libnetapiUpgrade ctdbUpgrade samba-common-toolsUpgrade samba-krb5-printingUpgrade samba-libsUpgrade samba-develUpgrade samba-testUpgrade python3-samba-develUpgrade libsmbclientUpgrade samba-vfs-iouringUpgrade samba-usersharesUpgrade samba-dcerpcUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-dc-libsUpgrade samba-client-libsUpgrade samba-winexeUpgrade libnetapi-develUpgrade samba-common-libsUpgrade libwbclient-develUpgrade python3-samba-testUpgrade sambaUpgrade samba-winbind-clients | Nov 16, 2023 | Jul 20, 2023 |
| Alpine Linux | — | Upgrade samba | Mar 21, 2024 | Jul 20, 2023 |
| Amazon_linux_2023 | — | Upgrade samba-dcerpc-debuginfoUpgrade samba-develUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-winbindUpgrade samba-libs-debuginfoUpgrade libsmbclient-develUpgrade samba-test-debuginfoUpgrade libnetapiUpgrade samba-winbind-clients-debuginfoUpgrade sambaUpgrade samba-libsUpgrade samba-testUpgrade samba-winbind-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade samba-vfs-iouringUpgrade samba-client-debuginfoUpgrade python3-sambaUpgrade libwbclientUpgrade samba-krb5-printing-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade python3-samba-dcUpgrade samba-krb5-printingUpgrade samba-usersharesUpgrade samba-client-libsUpgrade python3-samba-debuginfoUpgrade samba-clientUpgrade samba-common-tools-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-common-libsUpgrade python3-samba-dc-debuginfoUpgrade libnetapi-debuginfoUpgrade samba-commonUpgrade libsmbclientUpgrade samba-vfs-iouring-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade python3-samba-develUpgrade samba-dcerpcUpgrade samba-debugsourceUpgrade samba-pidlUpgrade samba-debuginfoUpgrade libnetapi-develUpgrade samba-common-libs-debuginfoUpgrade python3-samba-testUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-toolsUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-client-libs-debuginfoUpgrade libwbclient-develUpgrade samba-dc-libsUpgrade libsmbclient-debuginfoUpgrade samba-test-libs | Feb 17, 2025 | Jul 19, 2023 |
| Centos_linux | — | Upgrade samba-client-libs-debuginfoUpgrade samba-dcerpcUpgrade samba-winbind-krb5-locator-debuginfoUpgrade evolution-mapiUpgrade evolution-mapi-debugsourceUpgrade samba-winbind-clientsUpgrade openchangeUpgrade samba-common-libsUpgrade samba-vfs-iouring-debuginfoUpgrade samba-client-debuginfoUpgrade samba-winbind-debuginfoUpgrade evolution-mapi-langpacksUpgrade samba-test-libsUpgrade samba-commonUpgrade samba-test-libs-debuginfoUpgrade samba-clientUpgrade samba-ldb-ldap-modules-debuginfoUpgrade python3-samba-dcUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade openchange-debugsourceUpgrade libsmbclientUpgrade samba-debugsourceUpgrade python3-samba-testUpgrade samba-dc-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-winexeUpgrade openchange-debuginfoUpgrade python3-samba-debuginfoUpgrade ctdbUpgrade samba-winbind-modules-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade openchange-client-debuginfoUpgrade samba-winbindUpgrade samba-usersharesUpgrade samba-testUpgrade samba-ldb-ldap-modulesUpgrade evolution-mapi-debuginfoUpgrade samba-common-tools-debuginfoUpgrade python3-sambaUpgrade libnetapi-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade libsmbclient-debuginfoUpgrade libnetapiUpgrade samba-test-debuginfoUpgrade ctdb-debuginfoUpgrade samba-pidlUpgrade samba-libs-debuginfoUpgrade samba-libsUpgrade python3-samba-dc-debuginfoUpgrade samba-krb5-printingUpgrade samba-dcerpc-debuginfoUpgrade samba-vfs-iouringUpgrade samba-dc-libs-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-toolsUpgrade samba-client-libsUpgrade libwbclient-debuginfoUpgrade libwbclientUpgrade samba-winexe-debuginfoUpgrade samba-debuginfoUpgrade samba | Nov 8, 2023 | Jul 20, 2023 |
| Debian | — | Upgrade samba | Oct 19, 2023 | Jul 20, 2023 |
| Freebsd | — | Upgrade samba416Upgrade samba413 | Aug 6, 2023 | Aug 5, 2023 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Feb 21, 2024 | Jul 20, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade samba-common-toolsUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade sambaUpgrade samba-commonUpgrade libsmbclientUpgrade samba-winbindUpgrade libwbclientUpgrade samba-winbind-modules | Jan 10, 2024 | Jul 20, 2023 |
| Oracle_linux | — | Upgrade openchangeUpgrade samba-ldb-ldap-modulesUpgrade samba-develUpgrade samba-winbind-krb5-locatorUpgrade samba-commonUpgrade libsmbclient-develUpgrade samba-common-toolsUpgrade samba-krb5-printingUpgrade samba-test-libsUpgrade samba-clientUpgrade samba-libsUpgrade python3-samba-dcUpgrade libwbclientUpgrade samba-toolsUpgrade libnetapiUpgrade samba-winbindUpgrade samba-testUpgrade python3-sambaUpgrade sambaUpgrade python3-samba-develUpgrade libsmbclientUpgrade samba-dc-libsUpgrade evolution-mapiUpgrade samba-pidlUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade python3-samba-testUpgrade libnetapi-develUpgrade libwbclient-develUpgrade samba-client-libsUpgrade samba-dcerpcUpgrade samba-winbind-modulesUpgrade samba-winexeUpgrade samba-vfs-iouringUpgrade samba-usersharesUpgrade evolution-mapi-langpacks | Nov 16, 2023 | Jul 19, 2023 |
| Redhat_linux | — | Upgrade openchange-debuginfoUpgrade evolution-mapi-langpacksUpgrade samba-dcerpc-debuginfoUpgrade samba-krb5-printingUpgrade samba-winbindUpgrade samba-commonUpgrade python3-samba-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade libwbclientUpgrade libsmbclient-develUpgrade python3-sambaUpgrade samba-krb5-printing-debuginfoUpgrade samba-vfs-iouringUpgrade samba-develUpgrade samba-client-debuginfoNo solution existsUpgrade samba-testUpgrade openchangeUpgrade samba-ldb-ldap-modulesUpgrade evolution-mapi-debugsourceUpgrade libnetapiUpgrade python3-samba-dcUpgrade samba-winbind-debuginfoUpgrade sambaUpgrade samba-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-test-debuginfoUpgrade samba-test-libsUpgrade samba-libs-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-client-libsUpgrade openchange-debugsourceUpgrade samba-common-toolsUpgrade samba-usersharesUpgrade libwbclient-develUpgrade samba-winexeUpgrade samba-pidlUpgrade samba-debuginfoUpgrade python3-samba-dc-debuginfoUpgrade samba-winexe-debuginfoUpgrade libnetapi-develUpgrade samba-winbind-clientsUpgrade evolution-mapiUpgrade openchange-client-debuginfoUpgrade samba-clientUpgrade python3-samba-testUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-debugsourceUpgrade evolution-mapi-debuginfoUpgrade samba-winbind-modulesUpgrade samba-test-libs-debuginfoUpgrade python3-samba-develUpgrade samba-toolsUpgrade libnetapi-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-common-libsUpgrade samba-dc-libs-debuginfoUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-dcerpcUpgrade samba-common-libs-debuginfoUpgrade samba-dc-libsUpgrade libwbclient-debuginfoUpgrade ctdb-debuginfoUpgrade ctdbUpgrade libsmbclientUpgrade samba-common-tools-debuginfo | Nov 8, 2023 | Jul 20, 2023 |
| Rocky_linux | — | Upgrade openchange-debuginfoUpgrade openchangeUpgrade openchange-debugsourceUpgrade evolution-mapiUpgrade evolution-mapi-debuginfoUpgrade evolution-mapi-debugsource | Jun 29, 2026 | Jun 25, 2026 |
| Samba | — | Upgrade to Samba 4.17.10 or later.Upgrade to Samba 4.16.11 or later.Upgrade to Samba 4.18.5 or later. | Jul 31, 2023 | Jul 20, 2023 |
| Suse | — | Upgrade samba-develUpgrade libsamba-policy0-python3-32bitUpgrade libsamba-policy-python3-develUpgrade samba-client-32bitUpgrade ctdbUpgrade samba-libsUpgrade samba-devel-32bitUpgrade samba-testUpgrade samba-dsdb-modulesUpgrade samba-libs-32bitUpgrade samba-clientUpgrade samba-client-libs-32bitUpgrade libsamba-policy0-python3Upgrade samba-toolUpgrade samba-libs-python3Upgrade samba-libs-python3-32bitUpgrade samba-ad-dc-libsUpgrade samba-ldb-ldapUpgrade samba-winbind-libsUpgrade samba-python3Upgrade libsamba-policy-develUpgrade samba-winbindUpgrade samba-gpupdateUpgrade samba-winbind-libs-32bitUpgrade ctdb-pcp-pmdaUpgrade samba-docUpgrade samba-client-libsUpgrade samba-ad-dcUpgrade samba-ad-dc-libs-32bitUpgrade sambaUpgrade samba-ceph | Jul 20, 2023 | Jul 20, 2023 |
| Ubuntu | — | Upgrade samba | Jul 20, 2023 | Jul 19, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub