Samba vulnerabilities2 known to be exploited.
Samba has 236 published vulnerabilities across 7 products in our catalogue. 2 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Samba, with 210. If you run Samba software, patch the exploited flaws first.
The most recent Samba flaw added to the known-exploited list is CVE-2017-7494, on 30 March 2023. We keep watching the known-exploited list.
Which Samba products have the most vulnerabilities?
Samba leads with 210 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Samba vulnerabilities are being exploited?
2 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 9.8Samba Remote Code Execution Vulnerability
Samba contains a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share and then cause the server to load and execute it.
- 5.5Microsoft Netlogon Privilege Escalation Vulnerability
Microsoft's Netlogon Remote Protocol (MS-NRPC) contains a privilege escalation vulnerability when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller.
Which Samba flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the...
- >99%
An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC).
- 88%CVE-2004-2687Critical
distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server...
- 88%CVE-2015-0240Critical
The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer,...
- 86%CVE-2003-0085Critical
Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remote attackers to execute arbitrary code.
- 85%CVE-2003-0201Critical
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.
- 79%CVE-2010-2063High
Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory corruption and...
- 78%CVE-2007-2446Critical
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum...
- 74%CVE-2012-1182Critical
The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which...
- 74%CVE-2021-44142High
The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to...
All Samba products we track.
6 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Sambasamba210 vulnerabilities534 versions
- Rsyncrsync17 vulnerabilities117 versions
- Cifs-Utilscifs-utils4 vulnerabilities19 versions
- Pppppp2 vulnerabilities27 versions
- Jitterbugjitterbug1 vulnerability1 version
- Volume Servicevolume_service1 vulnerability4 versions
This directory lists the 6 Samba products with at least one tracked version, of 7 in our catalogue.
Running Samba? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Samba contains a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share and then cause the server to load and execute it.
- Matched to
- Samba on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 236 published vulnerabilities across 7 products and 702 versions from Samba. The most recent Samba flaw added to the known-exploited list is CVE-2017-7494, on 30 March 2023.
2 Samba vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2017-7494 and CVE-2020-1472. The full list is on this page.
Samba, with 210 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Samba products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.