Race condition in Samba - CVE-2017-2619

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU6630

Race condition in Samba - CVE-2017-2619

Published: May 23, 2017 / Updated: May 23, 2017


Vulnerability identifier: #VU6630
CSH Severity: Low
CVSS v4: 5.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-2619
CWE-ID: CWE-362
Exploitation vector: Adjecent network
Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a remote authenticated user to access otherwise restricted files.

The vulnerability exists due to a race condition when processing symlinks, which lead to files outside the shared folder. An attacker with ability to crate a symlink on a network share can access files not exported under the share definition.

Successful exploitation of the vulnerability may allow an attacker to gain access to potentially sensitive data, but requires that server is under heavy load.

Affected software

Samba
Amazon Linux AMI
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power
Red Hat Enterprise Linux for x86_64
CentOS
SUSE Linux
Ubuntu
Slackware Linux
Fedora
samba (Alpine package)
samba

How to mitigate CVE-2017-2619

The vulnerability is patched in versions 4.6.1, 4.5.7 and 4.4.12.

samba (Alpine package) - update to 4.2.14-r2
samba - addressed in versions 4.4.12-0.fc24, 4.4.13-0.fc24, 4.4.13-1.fc24, 4.5.7-0.fc25, 4.5.8-0.fc25, 4.6.2-0.fc26

Links to Public Exploits and PoC-codes

External References

Related Security Bulletins