A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a targeted RPC request to view the information that is part of the disclosed path.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade samba-client-libsUpgrade samba-dc-libsUpgrade libnetapi-develUpgrade samba-usersharesUpgrade samba-common-libsUpgrade samba-winexeUpgrade samba-winbind-clientsUpgrade samba-dcerpcUpgrade sambaUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade python3-samba-testUpgrade samba-vfs-iouringUpgrade libwbclient-develUpgrade libsmbclientUpgrade libnetapiUpgrade python3-samba-develUpgrade samba-libsUpgrade ctdbUpgrade samba-develUpgrade samba-test-libsUpgrade python3-samba-dcUpgrade samba-toolsUpgrade samba-winbind-krb5-locatorUpgrade samba-krb5-printingUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-pidlUpgrade python3-sambaUpgrade samba-clientUpgrade samba-commonUpgrade samba-testUpgrade samba-ldb-ldap-modulesUpgrade libsmbclient-devel | Nov 16, 2023 | Jul 20, 2023 |
| Alpine Linux | — | Upgrade samba | Mar 21, 2024 | Jul 20, 2023 |
| Amazon_linux_2023 | — | Upgrade libsmbclient-develUpgrade samba-usersharesUpgrade python3-sambaUpgrade samba-libs-debuginfoUpgrade libnetapiUpgrade samba-dcerpc-debuginfoUpgrade samba-test-debuginfoUpgrade libwbclientUpgrade samba-winbind-clients-debuginfoUpgrade samba-develUpgrade samba-winbindUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade sambaUpgrade samba-client-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade samba-vfs-iouringUpgrade samba-krb5-printingUpgrade samba-testUpgrade python3-samba-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade samba-client-debuginfoUpgrade samba-clientUpgrade samba-winbind-debuginfoUpgrade samba-libsUpgrade samba-krb5-printing-debuginfoUpgrade python3-samba-dcUpgrade libnetapi-develUpgrade samba-common-libs-debuginfoUpgrade python3-samba-testUpgrade samba-commonUpgrade samba-toolsUpgrade samba-pidlUpgrade samba-dcerpcUpgrade libsmbclientUpgrade libwbclient-debuginfoUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-client-libs-debuginfoUpgrade libwbclient-develUpgrade samba-winbind-modulesUpgrade samba-debugsourceUpgrade libsmbclient-debuginfoUpgrade python3-samba-develUpgrade samba-test-libs-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade samba-debuginfoUpgrade python3-samba-dc-debuginfoUpgrade samba-common-tools-debuginfoUpgrade libnetapi-debuginfoUpgrade samba-test-libsUpgrade samba-vfs-iouring-debuginfoUpgrade samba-common-libs | Feb 17, 2025 | Jul 19, 2023 |
| Centos_linux | — | Upgrade libwbclientUpgrade samba-debuginfoUpgrade sambaUpgrade samba-winexe-debuginfoUpgrade libwbclient-debuginfoUpgrade openchange-client-debuginfoUpgrade python3-samba-dc-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-test-debuginfoUpgrade libnetapiUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-client-libsUpgrade samba-toolsUpgrade samba-common-libs-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade samba-krb5-printingUpgrade samba-dcerpc-debuginfoUpgrade samba-testUpgrade samba-usersharesUpgrade samba-vfs-iouringUpgrade samba-ldb-ldap-modulesUpgrade samba-winbindUpgrade libnetapi-debuginfoUpgrade python3-sambaUpgrade samba-common-tools-debuginfoUpgrade samba-libsUpgrade samba-libs-debuginfoUpgrade samba-pidlUpgrade ctdbUpgrade ctdb-debuginfoUpgrade evolution-mapi-debuginfoUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-client-libs-debuginfoUpgrade evolution-mapi-langpacksUpgrade samba-test-libsUpgrade python3-samba-debuginfoUpgrade samba-dc-libsUpgrade openchangeUpgrade evolution-mapi-debugsourceUpgrade evolution-mapiUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-clientUpgrade python3-samba-dcUpgrade openchange-debugsourceUpgrade samba-dcerpcUpgrade samba-winbind-debuginfoUpgrade openchange-debuginfoUpgrade python3-samba-testUpgrade samba-debugsourceUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-winexeUpgrade samba-client-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-common-libsUpgrade samba-test-libs-debuginfo | Nov 8, 2023 | Jul 20, 2023 |
| Debian | — | Upgrade samba | Oct 19, 2023 | Jul 20, 2023 |
| Freebsd | — | Upgrade samba413Upgrade samba416 | Aug 6, 2023 | Aug 5, 2023 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Feb 21, 2024 | Jul 20, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade samba-libsUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade sambaUpgrade libwbclientUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-common-tools | Jan 10, 2024 | Jul 20, 2023 |
| Oracle_linux | — | Upgrade samba-dc-libsUpgrade libwbclient-develUpgrade libnetapi-develUpgrade samba-winexeUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade python3-samba-testUpgrade samba-pidlUpgrade evolution-mapi-langpacksUpgrade evolution-mapiUpgrade samba-dcerpcUpgrade samba-usersharesUpgrade samba-vfs-iouringUpgrade python3-samba-develUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-krb5-printingUpgrade samba-winbindUpgrade samba-winbind-krb5-locatorUpgrade samba-libsUpgrade samba-clientUpgrade samba-test-libsUpgrade python3-sambaUpgrade samba-ldb-ldap-modulesUpgrade libwbclientUpgrade libsmbclient-develUpgrade samba-develUpgrade samba-commonUpgrade sambaUpgrade openchangeUpgrade samba-testUpgrade python3-samba-dcUpgrade libnetapiUpgrade samba-tools | Nov 16, 2023 | Jul 19, 2023 |
| Redhat_linux | — | Upgrade samba-winbind-modulesUpgrade python3-samba-dc-debuginfoUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-debugsourceUpgrade ctdbUpgrade samba-vfs-iouring-debuginfoUpgrade samba-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade samba-usersharesUpgrade libwbclient-develUpgrade libnetapi-debuginfoUpgrade samba-clientUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-pidlUpgrade samba-test-libs-debuginfoUpgrade python3-samba-develUpgrade libwbclient-debuginfoUpgrade ctdb-debuginfoUpgrade python3-samba-testUpgrade samba-dcerpcUpgrade samba-winexe-debuginfoUpgrade samba-toolsUpgrade samba-dc-libsUpgrade samba-common-libs-debuginfoUpgrade samba-client-libs-debuginfoUpgrade libnetapi-develUpgrade openchange-client-debuginfoUpgrade evolution-mapi-debuginfoUpgrade samba-winbind-clientsUpgrade evolution-mapiUpgrade samba-winexeUpgrade samba-ldb-ldap-modulesUpgrade samba-libs-debuginfoUpgrade evolution-mapi-debugsourceUpgrade samba-winbind-krb5-locatorUpgrade samba-krb5-printing-debuginfoUpgrade samba-testUpgrade samba-winbind-modules-debuginfoUpgrade samba-krb5-printingUpgrade samba-develUpgrade samba-dcerpc-debuginfoUpgrade samba-common-toolsUpgrade libsmbclient-debuginfoUpgrade openchange-debugsourceUpgrade samba-libsUpgrade samba-winbind-debuginfoUpgrade samba-test-debuginfoUpgrade openchangeUpgrade sambaUpgrade samba-commonUpgrade python3-samba-debuginfoUpgrade openchange-debuginfoUpgrade evolution-mapi-langpacksUpgrade samba-winbind-clients-debuginfoUpgrade samba-client-libsUpgrade libsmbclient-develUpgrade libwbclientUpgrade libnetapiUpgrade python3-samba-dcUpgrade samba-vfs-iouringNo solution existsUpgrade python3-sambaUpgrade samba-test-libsUpgrade samba-client-debuginfoUpgrade samba-winbind | Nov 8, 2023 | Jul 20, 2023 |
| Rocky_linux | — | Upgrade evolution-mapi-debuginfoUpgrade evolution-mapi-debugsourceUpgrade evolution-mapiUpgrade openchangeUpgrade openchange-debuginfoUpgrade openchange-debugsource | Jun 29, 2026 | Jun 25, 2026 |
| Samba | — | Upgrade to Samba 4.18.5 or later.Upgrade to Samba 4.16.11 or later.Upgrade to Samba 4.17.10 or later. | Jul 31, 2023 | Jul 20, 2023 |
| Suse | — | Upgrade libsamba-policy-develUpgrade samba-winbind-libsUpgrade ctdb-pcp-pmdaUpgrade samba-client-libsUpgrade samba-winbind-libs-32bitUpgrade samba-ldb-ldapUpgrade samba-ad-dcUpgrade samba-gpupdateUpgrade samba-cephUpgrade samba-winbindUpgrade samba-libs-python3Upgrade samba-ad-dc-libsUpgrade samba-libs-python3-32bitUpgrade samba-python3Upgrade samba-docUpgrade sambaUpgrade samba-ad-dc-libs-32bitUpgrade samba-develUpgrade libsamba-policy0-python3Upgrade samba-libs-32bitUpgrade samba-client-libs-32bitUpgrade samba-client-32bitUpgrade samba-clientUpgrade libsamba-policy0-python3-32bitUpgrade samba-devel-32bitUpgrade samba-toolUpgrade libsamba-policy-python3-develUpgrade samba-libsUpgrade samba-testUpgrade samba-dsdb-modulesUpgrade ctdb | Jul 20, 2023 | Jul 20, 2023 |
| Ubuntu | — | Upgrade samba | Jul 20, 2023 | Jul 19, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub