ALPINE-CVE-2025-0620

See a problem?
Please try reporting it to the source first.

Source

https://security.alpinelinux.org/vuln/CVE-2025-0620

Import Source

https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2025-0620.json

JSON Data

https://api.osv.dev/v1/vulns/ALPINE-CVE-2025-0620

Upstream

CVE-2025-0620

Published

2025-06-06T14:15:21.247Z

Modified

2025-12-03T22:57:55.406888Z

Severity

4.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session. This issue can expose file shares until clients disconnect and then connect again.

References

https://security.alpinelinux.org/vuln/CVE-2025-0620

Affected packages

Alpine:v3.22 / samba

Package

Name: samba
Purl: pkg:apk/alpine/samba?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.21.6-r0

Affected versions

3.*

3.2.8-r0

3.2.8-r1

3.2.10-r0

3.2.11-r0

3.2.11-r1

3.3.4-r0

3.3.5-r0

3.3.5-r1

3.3.5-r2

3.3.6-r0

3.3.7-r0

3.3.7-r1

3.3.7-r2

3.3.7-r3

3.3.7-r4

3.3.8-r0

3.4.3-r0

3.4.3-r1

3.4.4-r0

3.4.5-r0

3.4.5-r1

3.4.7-r0

3.4.7-r1

3.5.2-r0

3.5.3-r0

3.5.4-r0

3.5.4-r1

3.5.5-r0

3.5.6-r0

3.5.6-r1

3.5.6-r2

3.5.6-r3

3.5.6-r4

3.5.7-r0

3.5.8-r0

3.5.9-r0

3.5.9-r1

3.5.10-r0

3.5.11-r0

3.6.1-r0

3.6.1-r1

3.6.1-r2

3.6.2-r0

3.6.3-r0

3.6.4-r0

3.6.4-r1

3.6.5-r0

3.6.6-r0

3.6.7-r0

3.6.7-r1

3.6.8-r0

3.6.8-r1

3.6.9-r0

3.6.10-r0

3.6.11-r0

3.6.12-r0

3.6.13-r0

3.6.13-r1

3.6.15-r0

3.6.16-r0

3.6.19-r0

3.6.19-r1

4.*

4.1.0-r1

4.1.0-r2

4.1.1-r0

4.1.2-r0

4.1.3-r0

4.1.3-r1

4.1.3-r2

4.1.4-r0

4.1.5-r0

4.1.5-r1

4.1.6-r0

4.1.7-r0

4.1.8-r0

4.1.9-r0

4.1.10-r0

4.1.11-r0

4.1.12-r0

4.1.13-r0

4.1.14-r0

4.1.14-r1

4.1.15-r0

4.1.16-r0

4.1.17-r0

4.2.0-r0

4.2.0-r1

4.2.1-r0

4.2.1-r1

4.2.1-r2

4.2.3-r0

4.2.3-r1

4.2.3-r2

4.2.3-r3

4.2.7-r0

4.2.9-r0

4.2.9-r1

4.4.2-r0

4.4.2-r1

4.4.3-r0

4.4.4-r0

4.4.5-r0

4.4.5-r1

4.5.1-r0

4.5.3-r0

4.5.3-r1

4.5.4-r0

4.6.0-r0

4.6.1-r0

4.6.1-r1

4.6.1-r2

4.6.4-r0

4.6.5-r0

4.6.6-r0

4.6.6-r1

4.7.0-r0

4.7.0-r1

4.7.0-r2

4.7.1-r0

4.7.2-r0

4.7.3-r0

4.7.4-r0

4.7.6-r0

4.8.0-r0

4.8.1-r0

4.8.2-r0

4.8.2-r1

4.8.4-r0

4.8.4-r1

4.8.5-r0

4.8.7-r0

4.8.8-r0

4.8.11-r0

4.8.11-r1

4.10.2-r0

4.10.3-r0

4.10.4-r0

4.10.4-r1

4.10.5-r0

4.10.6-r0

4.10.8-r0

4.10.8-r1

4.11.1-r0

4.11.2-r0

4.11.2-r1

4.11.2-r2

4.11.3-r0

4.11.4-r0

4.11.4-r1

4.11.5-r0

4.11.6-r0

4.12.0-r0

4.12.1-r0

4.12.2-r0

4.12.2-r1

4.12.2-r2

4.12.5-r0

4.12.6-r0

4.12.7-r0

4.12.8-r0

4.12.9-r0

4.13.2-r0

4.13.2-r1

4.13.3-r0

4.13.3-r1

4.13.3-r2

4.13.5-r0

4.14.2-r0

4.14.2-r1

4.14.4-r0

4.14.5-r0

4.14.6-r0

4.14.6-r1

4.15.0-r0

4.15.1-r0

4.15.1-r1

4.15.2-r0

4.15.3-r0

4.15.3-r1

4.15.5-r0

4.15.5-r1

4.15.6-r0

4.15.7-r0

4.15.7-r1

4.15.9-r0

4.16.4-r0

4.16.6-r0

4.16.7-r0

4.16.7-r1

4.16.8-r0

4.16.8-r1

4.17.4-r0

4.17.4-r1

4.17.5-r0

4.17.5-r1

4.18.0-r0

4.18.1-r0

4.18.1-r1

4.18.2-r0

4.18.3-r0

4.18.3-r1

4.18.4-r0

4.18.5-r0

4.18.5-r1

4.18.6-r0

4.18.7-r0

4.18.8-r0

4.18.9-r0

4.18.9-r1

4.18.10-r0

4.19.4-r0

4.19.4-r1

4.19.5-r0

4.19.5-r1

4.19.5-r2

4.19.6-r0

4.20.1-r0

4.20.2-r0

4.20.2-r1

4.20.2-r2

4.20.5-r0

4.20.6-r0

4.20.6-r1

4.21.3-r0

4.21.4-r0

4.21.4-r1

4.21.4-r2

4.21.4-r3

4.21.4-r4

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2025-0620.json"

Alpine:v3.23 / samba