Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-2619

Опубликовано: 12 мар. 2018
Источник: ubuntu
Приоритет: medium
EPSS Средний
CVSS2: 6
CVSS3: 7.5

Описание

Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.

РелизСтатусПримечание
devel

released

2:4.5.8+dfsg-0ubuntu0.17.04.1
esm-infra-legacy/trusty

not-affected

2:4.3.11+dfsg-0ubuntu0.14.04.6
esm-infra/xenial

not-affected

2:4.3.11+dfsg-0ubuntu0.16.04.5
precise

released

2:3.6.25-0ubuntu0.12.04.9
precise/esm

not-affected

2:3.6.25-0ubuntu0.12.04.9
trusty

released

2:4.3.11+dfsg-0ubuntu0.14.04.6
trusty/esm

not-affected

2:4.3.11+dfsg-0ubuntu0.14.04.6
upstream

released

4.6.1,4.5.7,4.4.12
vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

precise

ignored

end of life
precise/esm

DNE

precise was needed
trusty

DNE

trusty/esm

DNE

upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

Показывать по

EPSS

Процентиль: 95%
0.2026
Средний

6 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 5.9
redhat
больше 8 лет назад

Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.

CVSS3: 7.5
nvd
больше 7 лет назад

Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.

CVSS3: 7.5
debian
больше 7 лет назад

Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a mali ...

suse-cvrf
около 8 лет назад

Security update for samba

suse-cvrf
около 8 лет назад

Security update for samba

EPSS

Процентиль: 95%
0.2026
Средний

6 Medium

CVSS2

7.5 High

CVSS3

Уязвимость CVE-2017-2619