Samba Remote Code Execution Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 30/03/2023. Patch affected systems as an emergency. It is known to be used in ransomware campaigns.
| Package | Affected versions | Patched versions |
|---|---|---|
| samba | ≥ 3.5.0, < 4.4.0≥ 4.4.0, < 4.4.14≥ 4.5.0, < 4.5.10≥ 4.6.0, < 4.6.4 | 4.4.04.4.144.5.104.6.4 |
Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free