UpHeron
All vulnerabilities

Servers and applications

CVE-2017-2619

Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.

Severity
High 7.5
Published
12 Mar 2018
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
4.4.12, 4.5.7, 4.6.1
Exploit chance
11% in the next 30 daysHigher than 95% of CVEs. EPSS by FIRST, 11 Nov 2026
Weakness
Race condition (CWE-362)Link following (CWE-59)
Attack
Over the network · Only under certain conditions · Needs a user account · No user action needed
Attacker can
Read data · Change data · Take it down
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Sources
NVD

Affected software

SoftwareAffected versions
SambaServers and applications · cpe:a:samba:samba
  • Every version before 4.4.12
  • From 4.5.0 before 4.5.7
  • From 4.6.0 before 4.6.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-2619
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-2619