Critical Directory Escape Vulnerability in Samba Package
Summary
ALPINE-CVE-2019-10197: A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. Affects samba versions < 4.10.8-r0. Fixed in 4.10.8-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Samba is an open-source software suite that provides seamless file and print services to SMB/CIFS clients. It allows for interoperability between Linux/Unix servers and Windows-based clients. Samba is widely used in enterprise environments for sharing files and printers across different operating systems. However, certain configurations in Samba can lead to vulnerabilities, making it susceptible to unauthorized access and exploitation.
Vulnerability Detail
A flaw was identified in Samba versions 4.9.x up to 4.9.13, 4.10.x up to 4.10.8, and 4.11.x up to 4.11.0rc3. This vulnerability arises when specific parameters are set in the Samba configuration file, allowing an unauthenticated attacker to escape the shared directory and access files outside the intended share. The potential ramifications include unauthorized access to sensitive data, which could lead to data breaches and compromise system integrity. The CVSS score for this vulnerability is 9.1, indicating a critical level of severity.
How To Fix
Minimum fixed version
4.10.8-r0
This is the first release that contains the fix.
sudo apk add --upgrade sambaTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can restrict access to sensitive directories by modifying the Samba configuration file to limit the permissions of shared directories. Ensure that the 'valid users' parameter is set correctly to prevent unauthorized access.
Conclusion
The identified vulnerability in Samba poses a significant risk to systems using affected versions. It is crucial to update to the patched version to mitigate the risk of unauthorized access. Additionally, implementing workarounds can provide temporary relief until the update is applied.
See every vulnerability recorded for samba →
FAQ
The vulnerability allows unauthorized users to access files outside the shared directory, potentially leading to data breaches.
You can check your Samba version using the command 'smbd --version' and compare it with the affected versions listed.
Yes, you can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time using just a manifest file.
Consider applying the workaround by adjusting the Samba configuration to limit access to sensitive directories until you can update.
Detailed information can be found in the CVE database and through the provided vulnerability report links.
References
Related vulnerabilities
Recent vulnerabilities recorded for samba.
