CVE-2017-7494 Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then...
CriticalCVSS 9.8
EPSS 99.4%
CISA KEV
added 2023-03-30 · due 2023-04-20
Ransomware
Exploited in the wild
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.
CISA Known Exploited Vulnerability
- Date added
- 2023-03-30
- Due date (FCEB)
- 2023-04-20
- Ransomware use
- Known
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/samba(Debian:12) | < 2:4.5.8+dfsg-2 | 2:4.5.8+dfsg-2 |
| debian/samba(Debian:13) | < 2:4.5.8+dfsg-2 | 2:4.5.8+dfsg-2 |
| debian/samba(Debian:14) | < 2:4.5.8+dfsg-2 | 2:4.5.8+dfsg-2 |
| samba | >= 3.5.0, < 4.4.0 | 4.4.0 |
| samba | >= 4.4.0, < 4.4.14 | 4.4.14 |
| samba | >= 4.5.0, < 4.5.10 | 4.5.10 |
| samba | >= 4.6.0, < 4.6.4 | 4.6.4 |
| debian linux | = 8.0 | No fix listed |
| alpine/samba(Alpine:v3.3) | >= 3.5.0, < 4.2.14-r3 | 4.2.14-r3 |
| alpine/samba(Alpine:v3.4) | >= 3.5.0, < 4.4.14-r0 | 4.4.14-r0 |
| samba | = since 3.5.0 | No fix listed |
References
- Debian Security Tracker CVE-2017-7494 vendor-advisory
- DSA-3860 third-party-advisory vendor-advisory
- 98636 third-party-advisory vdb-entry
- 1038552 third-party-advisory vdb-entry
- RHSA-2017:1270 third-party-advisory vendor-advisory
- RHSA-2017:1271 third-party-advisory vendor-advisory
- RHSA-2017:1272 third-party-advisory vendor-advisory
- RHSA-2017:1273 third-party-advisory vendor-advisory
- RHSA-2017:1390 third-party-advisory vendor-advisory
- download.schneider-electric.com third-party-advisory
- h20566.www2.hpe.com third-party-advisory
- h20566.www2.hpe.com third-party-advisory
- GLSA-201805-07 third-party-advisory vendor-advisory
- security.netapp.com third-party-advisory
- 42060 exploit third-party-advisory vdb-entry
- 42084 exploit third-party-advisory vdb-entry
- www.samba.org patch vendor-advisory
- www.cisa.gov government-resource us-government-resource
- security.alpinelinux.org vendor-advisory