A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "acl_xattr" is configured with "acl_xattr:ignore system acls = yes". The SMB protocol allows opening files when the client requests read-only access but then implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create disposition request. The issue arises in configurations that bypass kernel file system permissions checks, relying solely on Samba's permissions.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade samba-winbindUpgrade python3-samba-dcUpgrade libsmbclientUpgrade samba-pidlUpgrade ctdbUpgrade sambaUpgrade samba-develUpgrade samba-vfs-iouringUpgrade samba-dcerpcUpgrade samba-libsUpgrade samba-commonUpgrade libwbclient-develUpgrade libnetapi-develUpgrade samba-usersharesUpgrade python3-sambaUpgrade libsmbclient-develUpgrade libwbclientUpgrade samba-winbind-modulesUpgrade samba-toolsUpgrade samba-common-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-testUpgrade samba-test-libsUpgrade samba-ldb-ldap-modulesUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade libnetapiUpgrade python3-samba-develUpgrade samba-winexeUpgrade samba-clientUpgrade samba-dc-libsUpgrade python3-samba-testUpgrade samba-common-toolsUpgrade samba-krb5-printing | Nov 16, 2023 | Nov 3, 2023 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Nov 3, 2023 |
| Amazon Linux Ami 2 | — | Upgrade samba-dc-libsUpgrade samba-common-libsUpgrade samba-dcUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba-vfs-glusterfsUpgrade samba-python-testUpgrade ctdb-testsUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade ctdbUpgrade samba-winbindUpgrade sambaUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade libwbclient-develUpgrade samba-clientUpgrade samba-commonUpgrade samba-pidlUpgrade libwbclientUpgrade samba-debuginfoUpgrade samba-krb5-printingUpgrade samba-testUpgrade samba-libsUpgrade libsmbclient-develUpgrade samba-test-libsUpgrade samba-client-libsUpgrade samba-devel | Dec 5, 2023 | Nov 3, 2023 |
| Amazon_linux | — | Upgrade samba | Dec 5, 2023 | Nov 3, 2023 |
| Amazon_linux_2023 | — | Upgrade libwbclientUpgrade samba-krb5-printingUpgrade python3-samba-dc-debuginfoUpgrade sambaUpgrade samba-dc-libs-debuginfoUpgrade samba-dcerpcUpgrade libnetapi-debuginfoUpgrade samba-dcerpc-debuginfoUpgrade python3-sambaUpgrade libwbclient-debuginfoUpgrade samba-pidlUpgrade samba-vfs-iouringUpgrade samba-libsUpgrade samba-usersharesUpgrade samba-test-debuginfoUpgrade samba-debuginfoUpgrade python3-samba-develUpgrade libnetapiUpgrade libwbclient-develUpgrade samba-krb5-printing-debuginfoUpgrade samba-testUpgrade libsmbclient-develUpgrade samba-winbind-clients-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-ldb-ldap-modulesUpgrade samba-winbind-clientsUpgrade samba-common-libs-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-dc-libsUpgrade samba-ldb-ldap-modules-debuginfoUpgrade libsmbclientUpgrade samba-clientUpgrade samba-test-libs-debuginfoUpgrade samba-common-libsUpgrade python3-samba-debuginfoUpgrade python3-samba-testUpgrade samba-client-libs-debuginfoUpgrade samba-develUpgrade samba-commonUpgrade samba-client-debuginfoUpgrade samba-test-libsUpgrade samba-libs-debuginfoUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-common-tools-debuginfoUpgrade python3-samba-dcUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-toolsUpgrade libnetapi-develUpgrade samba-winbind-debuginfoUpgrade samba-debugsource | Feb 17, 2025 | Oct 10, 2023 |
| Centos_linux | — | Upgrade samba-clientUpgrade samba-client-libs-debuginfoUpgrade samba-libs-debuginfoUpgrade python3-samba-testUpgrade samba-common-libsUpgrade samba-winexeUpgrade libsmbclient-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade ctdbUpgrade samba-client-debuginfoUpgrade samba-vfs-iouringUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winbind-modulesUpgrade samba-debuginfoUpgrade samba-usersharesUpgrade samba-winbind-clientsUpgrade samba-winbind-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-dcerpcUpgrade samba-test-libs-debuginfoUpgrade samba-common-toolsUpgrade ctdb-debuginfoUpgrade sambaUpgrade samba-dc-libsUpgrade samba-winbindUpgrade libsmbclientUpgrade libwbclient-debuginfoUpgrade samba-client-libsUpgrade python3-samba-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-pidlUpgrade samba-krb5-printing-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade samba-dc-libs-debuginfoUpgrade samba-dcerpc-debuginfoUpgrade samba-commonUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-testUpgrade libnetapi-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-test-libsUpgrade libnetapiUpgrade python3-samba-dcUpgrade python3-sambaUpgrade samba-toolsUpgrade samba-libsUpgrade samba-common-libs-debuginfoUpgrade samba-krb5-printingUpgrade samba-test-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-winexe-debuginfoUpgrade samba-debugsourceUpgrade python3-samba-dc-debuginfoUpgrade libwbclient | Nov 8, 2023 | Nov 3, 2023 |
| Debian | — | Upgrade samba | Oct 19, 2023 | Oct 19, 2023 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Feb 21, 2024 | Nov 3, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade samba-libsUpgrade libwbclientUpgrade sambaUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-clientUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-common | Jan 10, 2024 | Nov 3, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade sambaUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade libwbclientUpgrade samba-winbindUpgrade samba-clientUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-common-tools | Jan 10, 2024 | Nov 3, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-winbind-clientsUpgrade samba-pythonUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade libsmbclientUpgrade sambaUpgrade samba-libsUpgrade samba-commonUpgrade libwbclientUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-common-libs | Feb 12, 2024 | Nov 3, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-sambaUpgrade samba-commonUpgrade samba-clientUpgrade samba-testUpgrade samba-test-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade python2-sambaUpgrade samba-pidlUpgrade samba-libsUpgrade samba-krb5-printingUpgrade libwbclientUpgrade ctdbUpgrade python2-samba-testUpgrade libsmbclientUpgrade ctdb-testsUpgrade python3-samba-testUpgrade samba-client-libsUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade samba-winbind | Mar 13, 2024 | Nov 3, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-libsUpgrade libwbclientUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba | Jan 10, 2024 | Nov 3, 2023 |
| Oracle_linux | — | Upgrade samba-libsUpgrade samba-testUpgrade samba-usersharesUpgrade sambaUpgrade samba-vfs-iouringUpgrade samba-krb5-printingUpgrade samba-ldb-ldap-modulesUpgrade samba-pidlUpgrade libwbclient-develUpgrade python3-sambaUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-winbindUpgrade libsmbclient-develUpgrade libnetapiUpgrade samba-common-toolsUpgrade python3-samba-dcUpgrade samba-winbind-modulesUpgrade samba-toolsUpgrade ctdbUpgrade samba-test-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade samba-develUpgrade libsmbclientUpgrade samba-commonUpgrade python3-samba-testUpgrade samba-winexeUpgrade samba-dc-libsUpgrade samba-common-libsUpgrade samba-clientUpgrade python3-samba-develUpgrade samba-vfs-glusterfsUpgrade samba-dcerpcUpgrade libnetapi-devel | Nov 16, 2023 | Oct 10, 2023 |
| Redhat_linux | — | No solution existsUpgrade libsmbclient-develUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade samba-dcerpc-debuginfoUpgrade samba-test-debuginfoUpgrade python3-sambaUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-client-libsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-winbindUpgrade libnetapiUpgrade samba-winbind-clients-debuginfoUpgrade python3-samba-testUpgrade samba-krb5-printing-debuginfoUpgrade samba-libsUpgrade samba-winexeUpgrade python3-samba-debuginfoUpgrade samba-client-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-ldb-ldap-modulesUpgrade samba-krb5-printingUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-usersharesUpgrade samba-winbind-clientsUpgrade samba-libs-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-dcerpcUpgrade samba-pidlUpgrade samba-test-libs-debuginfoUpgrade sambaUpgrade samba-toolsUpgrade ctdb-debuginfoUpgrade ctdbUpgrade samba-dc-libsUpgrade python3-samba-dcUpgrade python3-samba-develUpgrade libwbclient-develUpgrade samba-vfs-iouring-debuginfoUpgrade libsmbclientUpgrade samba-test-libsUpgrade samba-commonUpgrade python3-samba-dc-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade samba-winexe-debuginfoUpgrade samba-vfs-iouringUpgrade samba-develUpgrade samba-testUpgrade samba-debugsourceUpgrade samba-common-libsUpgrade samba-debuginfoUpgrade libsmbclient-debuginfoUpgrade libnetapi-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade libnetapi-develUpgrade samba-common-tools-debuginfo | Nov 1, 2023 | Oct 31, 2023 |
| Samba | — | Upgrade to Samba 4.17.12 or later.Upgrade to Samba 4.19.1 or later.Upgrade to Samba 4.18.8 or later. | Nov 3, 2023 | Nov 3, 2023 |
| Suse | — | Upgrade samba-winbindUpgrade libsamba-policy0-python3Upgrade ctdbUpgrade samba-cephUpgrade samba-ad-dc-libsUpgrade samba-develUpgrade samba-libs-python3Upgrade libsamba-policy0-python3-32bitUpgrade samba-client-libs-32bitUpgrade sambaUpgrade samba-libs-32bitUpgrade samba-toolUpgrade samba-docUpgrade samba-testUpgrade samba-ad-dc-libs-32bitUpgrade ctdb-pcp-pmdaUpgrade samba-devel-32bitUpgrade samba-winbind-libs-32bitUpgrade samba-libsUpgrade samba-dsdb-modulesUpgrade samba-libs-python3-32bitUpgrade samba-clientUpgrade samba-client-32bitUpgrade samba-python3Upgrade samba-ad-dcUpgrade samba-ldb-ldapUpgrade samba-client-libsUpgrade samba-winbind-libsUpgrade libsamba-policy-develUpgrade libsamba-policy-python3-develUpgrade samba-gpupdate | Oct 11, 2023 | Oct 10, 2023 |
| Ubuntu | — | Upgrade samba | Oct 11, 2023 | Oct 10, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub