vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with certain substring relationships exist, allows remote attackers to bypass intended file-access restrictions via a symlink that points outside of a share.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Samba | Samba | 3.0.0 (including) | 4.1.22 (excluding) |
| Samba | Samba | 4.2.0 (including) | 4.2.7 (excluding) |
| Samba | Samba | 4.3.0 (including) | 4.3.3 (excluding) |
| Red Hat Enterprise Linux 6 | RedHat | samba4-0:4.0.0-67.el6_7.rc4 | * |
| Red Hat Enterprise Linux 6 | RedHat | samba-0:3.6.23-24.el6_7 | * |
| Red Hat Enterprise Linux 7 | RedHat | samba-0:4.2.3-11.el7_2 | * |
| Red Hat Gluster Storage 3.1 for RHEL 6 | RedHat | samba-0:4.1.17-16.el6rhs | * |
| Red Hat Gluster Storage 3.1 for RHEL 7 | RedHat | samba-0:4.2.4-9.1.el7rhgs | * |
| Samba | Ubuntu | devel | * |
| Samba | Ubuntu | precise | * |
| Samba | Ubuntu | trusty | * |
| Samba | Ubuntu | upstream | * |
| Samba | Ubuntu | vivid | * |
| Samba | Ubuntu | wily | * |
| Samba | Ubuntu | xenial | * |
| Samba | Ubuntu | yakkety | * |
| Samba | Ubuntu | zesty | * |
| Samba4 | Ubuntu | precise | * |
| Samba4 | Ubuntu | upstream | * |