CVE-2017-2619CWE-362

CVE-2017-2619: vulnerability in samba

Published · Updated

Follow this CVE+ Monitor samba+ Monitor samba

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 11%
from disclosure to weaponsame day
Published on NVDMar 12
1st PoCMar 27
Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.
Affected products
Samba · samba
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — samba

In the same product, most dangerous first.

CVE-2017-7494CRITICALCVE-2017-7494EPSS 99.4%KEVCVE-2017-12150HIGHCVE-2017-12150EPSS 13.1%CVE-2017-12151HIGHCVE-2017-12151EPSS 4.1%CVE-2019-10218MEDIUMCVE-2019-10218EPSS 3.4%CVE-2019-14847MEDIUMCVE-2019-14847EPSS 2.1%CVE-2019-14833MEDIUMCVE-2019-14833EPSS 1.9%