Samba has released security updates to fix discovered vulnerabilities for different previous versions of Samba. Samba is an SMB (Server Message Block) networking protocol re-implementation that provides file sharing and printing services across many platforms (OS) over a network.

Fixed vulnerabilities include CVE-2021-44141, CVE-2021-44142 and CVE-2022-0336.

Versions affected:

• Samba 4.13.16 and prior,

• Samba 4.14.11 and prior,

• Samba 4.15.4 and prior. 

Security Risks

An unauthenticated remote attacker could exploit these vulnerabilities in Samba by executing arbitrary code with the highest root privileges on servers running vulnerable software.

Recommended Action

The National Cyber Security Authority recommends system administrators to:

• upgrade to Samba 4.13.17, 4.14.12 or 4.15.5 releases according to the version in use.

For further information and support, please contact the National Cyber Security Authority (NCSA) by email to rwcsirt@ncsa.gov.rw or call us on 9009.
 

References

Samba Security Releases

Samba Security Releases Download