Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2017-2619 PUBLISHED CVSS 7.5 HIGH

Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.

Risk Scores

CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Alpine:v3.9samba0, 3.3.7-r1, 3.3.7-r2
Alpine:v3.15samba3.3.6-r0, 3.3.7-r1, 3.3.7-r2
Alpine:v3.23samba0, 3.2.10-r0, 3.2.11-r0
Alpine:v3.22samba3.2.10-r0, 4.5.3-r1, 4.5.3-r0
Alpine:v3.4samba4.4.5-r2, 4.4.5-r1, 4.4.5-r0
Alpine:v3.5samba3.6.16-r0, 3.6.15-r0, 3.6.13-r1
Alpine:v3.8samba3.6.16-r0, 4.6.0-r0, 4.5.4-r0
Alpine:v3.19samba4.5.1-r0, 4.2.3-r0, 4.6.0-r0
Alpine:v3.17samba3.5.2-r0, 3.2.10-r0, 3.2.11-r0
Alpine:v3.7samba4.6.0-r0, 4.5.4-r0, 4.5.3-r1
Alpine:v3.12samba4.1.3-r2, 0, 3.2.11-r0
Alpine:v3.18samba3.5.4-r0, 3.5.4-r1, 3.5.5-r0
Alpine:v3.3samba4.1.3-r1, 4.2.9-r0, 4.2.7-r0
Alpine:v3.14samba3.3.5-r2, 3.3.5-r1, 3.3.5-r0
Alpine:v3.2samba3.6.11-r0, 4.2.9-r0, 4.2.7-r0
Alpine:v3.21samba3.3.4-r0, 0, 3.2.10-r0
Alpine:v3.6samba3.2.10-r0, 3.2.11-r0, 3.2.8-r0
Alpine:v3.20samba0, 3.2.10-r0, 3.2.11-r0
Alpine:v3.11samba3.6.3-r0, 4.6.0-r0, 4.5.4-r0
Alpine:v3.13samba4.6.0-r0, 4.5.4-r0, 4.5.3-r1

…and 2 more

Timeline

References

Open in Interactive Console →