| Package | Affected versions | Patched versions |
|---|---|---|
| gluster storage | = 3.0 | |
| samba | ≥ 3.2.0, < 4.8.11≥ 4.10.0, < 4.10.2≥ 4.9.0, < 4.9.6 | 4.8.114.10.24.9.6 |
A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share. Versions before 4.8.11, 4.9.6 and 4.10.2 are vulnerable.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free