Description
Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Samba samba
since 3.5.0affected
References
- http://www.securityfocus.com/bid/98636 ↗
- http://www.debian.org/security/2017/dsa-3860 ↗
- https://www.exploit-db.com/exploits/42084/ ↗
- https://access.redhat.com/errata/RHSA-2017:1270 ↗
- https://www.samba.org/samba/security/CVE-2017-7494.html ↗
- https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2018-095-01+Security+Notification+Umotion+V1.1.pdf&p_Doc_Ref=SEVD-2018-095-01 ↗
- https://access.redhat.com/errata/RHSA-2017:1390 ↗
- http://www.securitytracker.com/id/1038552 ↗
- https://access.redhat.com/errata/RHSA-2017:1273 ↗
- https://access.redhat.com/errata/RHSA-2017:1271 ↗
- https://security.gentoo.org/glsa/201805-07 ↗
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03759en_us ↗
- https://access.redhat.com/errata/RHSA-2017:1272 ↗
- https://security.netapp.com/advisory/ntap-20170524-0001/ ↗
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03755en_us ↗
- https://www.exploit-db.com/exploits/42060/ ↗
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-7494 ↗