A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or modify share metadata, to perform this operation outside of the share.
{
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "10.0"
},
{
"last_affected": "10.0"
},
{
"introduced": "11.0"
},
{
"last_affected": "11.0"
}
],
"source": "CPE_STRING",
"vendor_product": "debian:debian_linux"
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
}
],
"source": "CPE_STRING",
"vendor_product": "redhat:enterprise_linux"
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_aus:8.6:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "8.6"
},
{
"last_affected": "8.6"
}
],
"source": "CPE_STRING",
"vendor_product": "redhat:enterprise_linux_aus"
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "8.6"
},
{
"last_affected": "8.6"
}
],
"source": "CPE_STRING",
"vendor_product": "redhat:enterprise_linux_eus"
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_tus:8.6:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "8.6"
},
{
"last_affected": "8.6"
}
],
"source": "CPE_STRING",
"vendor_product": "redhat:enterprise_linux_tus"
},
{
"cpes": [
"cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "4.0"
},
{
"last_affected": "4.0"
}
],
"source": "CPE_STRING",
"vendor_product": "redhat:virtualization_host"
}
]
}{
"cpe": "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "4.15.0"
}
],
"source": "CPE_RANGE"
}