A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or modify share metadata, to perform this operation outside of the share.
{
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "10.0"
},
{
"last_affected": "10.0"
},
{
"introduced": "11.0"
},
{
"last_affected": "11.0"
}
],
"vendor_product": "debian:debian_linux",
"source": "CPE_STRING"
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
}
],
"vendor_product": "redhat:enterprise_linux",
"source": "CPE_STRING"
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_aus:8.6:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "8.6"
},
{
"last_affected": "8.6"
}
],
"vendor_product": "redhat:enterprise_linux_aus",
"source": "CPE_STRING"
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_eus",
"extracted_events": [
{
"introduced": "8.6"
},
{
"last_affected": "8.6"
}
],
"source": "CPE_STRING"
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_tus:8.6:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_tus",
"extracted_events": [
{
"introduced": "8.6"
},
{
"last_affected": "8.6"
}
],
"source": "CPE_STRING"
},
{
"cpes": [
"cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "4.0"
},
{
"last_affected": "4.0"
}
],
"vendor_product": "redhat:virtualization_host",
"source": "CPE_STRING"
}
]
}