Home

CVE-2017-2619

Description

Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
39.062

Associated Vulnerability

VulnerabilityOS Platform
SMB/CIFS file, print, and login server for Unix (USN-3267-1) samba_4.5.8+dfsg-0ubuntu0.17.04.1_i386.debLinux
SMB/CIFS file, print, and login server for Unix (USN-3267-1) samba_4.5.8+dfsg-0ubuntu0.17.04.1_amd64.debLinux
samba security update(DSA-3816-1) samba_4.2.14+dfsg-0+deb8u4_i386.debLinux
samba security update(DSA-3816-1) samba_4.2.14+dfsg-0+deb8u4_amd64.debLinux
samba security update(DSA-3816-1) samba_4.2.14+dfsg-0+deb8u4_kfreebsd-i386.debLinux
samba security update(DSA-3816-1) samba_4.2.14+dfsg-0+deb8u4_kfreebsd-amd64.debLinux
Samba security update (CESA-2017:2789) samba-3.6.23-51.el6.i686.rpmLinux
Samba security update (CESA-2017:2789) samba-3.6.23-51.el6.x86_64.rpmLinux
Samba security update (CESA-2017:2789) samba-doc-3.6.23-51.el6.i686.rpmLinux
Samba security update (CESA-2017:2789) samba-doc-3.6.23-51.el6.x86_64.rpmLinux
Samba security update (CESA-2017:2789) samba-swat-3.6.23-51.el6.i686.rpmLinux
Samba security update (CESA-2017:2789) samba-swat-3.6.23-51.el6.x86_64.rpmLinux
Samba security update (CESA-2017:2789) libsmbclient-3.6.23-51.el6.i686.rpmLinux
Samba security update (CESA-2017:2789) libsmbclient-3.6.23-51.el6.x86_64.rpmLinux
Samba security update (CESA-2017:2789) samba-client-3.6.23-51.el6.i686.rpmLinux
Samba security update (CESA-2017:2789) samba-client-3.6.23-51.el6.x86_64.rpmLinux
Samba security update (CESA-2017:2789) samba-common-3.6.23-51.el6.i686.rpmLinux
Samba security update (CESA-2017:2789) samba-common-3.6.23-51.el6.x86_64.rpmLinux
Samba security update (CESA-2017:2789) samba-winbind-3.6.23-51.el6.i686.rpmLinux
Samba security update (CESA-2017:2789) samba-winbind-3.6.23-51.el6.x86_64.rpmLinux
Samba security update (CESA-2017:2789) samba-glusterfs-3.6.23-51.el6.x86_64.rpmLinux
Samba security update (CESA-2017:2789) libsmbclient-devel-3.6.23-51.el6.i686.rpmLinux
Samba security update (CESA-2017:2789) libsmbclient-devel-3.6.23-51.el6.x86_64.rpmLinux
Samba security update (CESA-2017:2789) samba-winbind-devel-3.6.23-51.el6.i686.rpmLinux
Samba security update (CESA-2017:2789) samba-winbind-devel-3.6.23-51.el6.x86_64.rpmLinux
Samba security update (CESA-2017:2789) samba-domainjoin-gui-3.6.23-51.el6.i686.rpmLinux
Samba security update (CESA-2017:2789) samba-domainjoin-gui-3.6.23-51.el6.x86_64.rpmLinux
Samba security update (CESA-2017:2789) samba-winbind-clients-3.6.23-51.el6.i686.rpmLinux
Samba security update (CESA-2017:2789) samba-winbind-clients-3.6.23-51.el6.x86_64.rpmLinux
Samba security update (CESA-2017:2789) samba-winbind-krb5-locator-3.6.23-51.el6.i686.rpmLinux
Samba security update (CESA-2017:2789) samba-winbind-krb5-locator-3.6.23-51.el6.x86_64.rpmLinux
(RHSA-2017:2789) Moderate: samba security update libsmbclient-3.6.23-45.el6_9.i686.rpmLinux
(RHSA-2017:2789) Moderate: samba security update libsmbclient-3.6.23-45.el6_9.x86_64.rpmLinux
(RHSA-2017:2789) Moderate: samba security update libsmbclient-devel-3.6.23-45.el6_9.i686.rpmLinux
(RHSA-2017:2789) Moderate: samba security update libsmbclient-devel-3.6.23-45.el6_9.x86_64.rpmLinux
(RHSA-2017:2789) Moderate: samba security update samba-client-3.6.23-45.el6_9.i686.rpmLinux
(RHSA-2017:2789) Moderate: samba security update samba-client-3.6.23-45.el6_9.x86_64.rpmLinux
(RHSA-2017:2789) Moderate: samba security update samba-common-3.6.23-45.el6_9.i686.rpmLinux
(RHSA-2017:2789) Moderate: samba security update samba-common-3.6.23-45.el6_9.x86_64.rpmLinux
(RHSA-2017:2789) Moderate: samba security update samba-doc-3.6.23-45.el6_9.i686.rpmLinux
(RHSA-2017:2789) Moderate: samba security update samba-doc-3.6.23-45.el6_9.x86_64.rpmLinux
(RHSA-2017:2789) Moderate: samba security update samba-domainjoin-gui-3.6.23-45.el6_9.i686.rpmLinux
(RHSA-2017:2789) Moderate: samba security update samba-domainjoin-gui-3.6.23-45.el6_9.x86_64.rpmLinux
(RHSA-2017:2789) Moderate: samba security update samba-glusterfs-3.6.23-45.el6_9.x86_64.rpmLinux
(RHSA-2017:2789) Moderate: samba security update samba-swat-3.6.23-45.el6_9.i686.rpmLinux
(RHSA-2017:2789) Moderate: samba security update samba-swat-3.6.23-45.el6_9.x86_64.rpmLinux
(RHSA-2017:2789) Moderate: samba security update samba-winbind-3.6.23-45.el6_9.i686.rpmLinux
(RHSA-2017:2789) Moderate: samba security update samba-winbind-3.6.23-45.el6_9.x86_64.rpmLinux
(RHSA-2017:2789) Moderate: samba security update samba-winbind-clients-3.6.23-45.el6_9.i686.rpmLinux
(RHSA-2017:2789) Moderate: samba security update samba-winbind-clients-3.6.23-45.el6_9.x86_64.rpmLinux
(RHSA-2017:2789) Moderate: samba security update samba-winbind-devel-3.6.23-45.el6_9.i686.rpmLinux
(RHSA-2017:2789) Moderate: samba security update samba-winbind-devel-3.6.23-45.el6_9.x86_64.rpmLinux
(RHSA-2017:2789) Moderate: samba security update samba-winbind-krb5-locator-3.6.23-45.el6_9.i686.rpmLinux
(RHSA-2017:2789) Moderate: samba security update samba-winbind-krb5-locator-3.6.23-45.el6_9.x86_64.rpmLinux
(RHSA-2018:1860) Low: samba security and bug fix update libsmbclient-3.6.23-51.el6.i686.rpmLinux
(RHSA-2018:1860) Low: samba security and bug fix update libsmbclient-3.6.23-51.el6.x86_64.rpmLinux
(RHSA-2018:1860) Low: samba security and bug fix update libsmbclient-devel-3.6.23-51.el6.i686.rpmLinux
(RHSA-2018:1860) Low: samba security and bug fix update libsmbclient-devel-3.6.23-51.el6.x86_64.rpmLinux
(RHSA-2018:1860) Low: samba security and bug fix update samba-3.6.23-51.el6.i686.rpmLinux
(RHSA-2018:1860) Low: samba security and bug fix update samba-3.6.23-51.el6.x86_64.rpmLinux
(RHSA-2018:1860) Low: samba security and bug fix update samba-client-3.6.23-51.el6.i686.rpmLinux
(RHSA-2018:1860) Low: samba security and bug fix update samba-client-3.6.23-51.el6.x86_64.rpmLinux
(RHSA-2018:1860) Low: samba security and bug fix update samba-common-3.6.23-51.el6.i686.rpmLinux
(RHSA-2018:1860) Low: samba security and bug fix update samba-common-3.6.23-51.el6.x86_64.rpmLinux
(RHSA-2018:1860) Low: samba security and bug fix update samba-doc-3.6.23-51.el6.i686.rpmLinux
(RHSA-2018:1860) Low: samba security and bug fix update samba-doc-3.6.23-51.el6.x86_64.rpmLinux
(RHSA-2018:1860) Low: samba security and bug fix update samba-domainjoin-gui-3.6.23-51.el6.i686.rpmLinux
(RHSA-2018:1860) Low: samba security and bug fix update samba-domainjoin-gui-3.6.23-51.el6.x86_64.rpmLinux
(RHSA-2018:1860) Low: samba security and bug fix update samba-glusterfs-3.6.23-51.el6.x86_64.rpmLinux
(RHSA-2018:1860) Low: samba security and bug fix update samba-swat-3.6.23-51.el6.i686.rpmLinux
(RHSA-2018:1860) Low: samba security and bug fix update samba-swat-3.6.23-51.el6.x86_64.rpmLinux
(RHSA-2018:1860) Low: samba security and bug fix update samba-winbind-3.6.23-51.el6.i686.rpmLinux
(RHSA-2018:1860) Low: samba security and bug fix update samba-winbind-3.6.23-51.el6.x86_64.rpmLinux
(RHSA-2018:1860) Low: samba security and bug fix update samba-winbind-clients-3.6.23-51.el6.i686.rpmLinux
(RHSA-2018:1860) Low: samba security and bug fix update samba-winbind-clients-3.6.23-51.el6.x86_64.rpmLinux
(RHSA-2018:1860) Low: samba security and bug fix update samba-winbind-devel-3.6.23-51.el6.i686.rpmLinux
(RHSA-2018:1860) Low: samba security and bug fix update samba-winbind-devel-3.6.23-51.el6.x86_64.rpmLinux
(RHSA-2018:1860) Low: samba security and bug fix update samba-winbind-krb5-locator-3.6.23-51.el6.i686.rpmLinux
(RHSA-2018:1860) Low: samba security and bug fix update samba-winbind-krb5-locator-3.6.23-51.el6.x86_64.rpmLinux
Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) Vulnerability (CVE-2017-2619)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234