A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session. This issue can expose file shares until clients disconnect and then connect again.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
| Vendor | Product | Versions | |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | all versions | |
| Red Hat | Red Hat Enterprise Linux 6 | — | |
| Red Hat | Red Hat Enterprise Linux 7 | — | |
| Red Hat | Red Hat Enterprise Linux 8 | — | |
| Red Hat | Red Hat Enterprise Linux 9 | all versions | |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | |
| samba | samba | 4.21.0 – < 4.21.6 | |
| — | samba | 4.21.0 – < 4.21.6 |
cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* ≥ 4.21.0 < 4.21.6cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* ≥ 4.22.0 < 4.22.2Our free, open-source honeypot sensor waits on ports your server does not use and reports the scanners and attackers that connect to a shared blocklist.