- Vendor / Project
- Samba
- Product
- Samba
- Date added
- Mar 30, 2023
- Due date
- Apr 20, 2023
- Known ransomware use
- Known
- CWEs
- CWE-94
Description
Samba contains a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share and then cause the server to load and execute it.
Required action
Apply updates per vendor instructions.