CVE-2017-12163: debian debian_linux
Vulnerability summary
CVE-2017-12163 is a high (CVSS 7.1) vulnerability in debian debian_linux. EPSS estimates a 7.59% chance of exploitation in the next 30 days, higher than 94.4% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 17 · Related 9Timeline
- 26-07-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker.
CVSS metrics
6 scores · 5 sources · 2 versions- CVE.orgCNA4.1MediumCVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:NDiffers
- OSV · AlpineEcosystem advisory · calculated7.1HighCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
- OSV · UbuntuEcosystem advisory · calculated4.1MediumCVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:NDiffers
- OSV · DebianEcosystem advisory · calculated7.1HighCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
EPSS trend
Probability
7.59%
Chance of exploitation in the next 30 days
Percentile
94%
Versus all other CVEs
30-day change
0.00 pp
From 7.59% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Redhat4 products
- enterprise_linux_desktop6.0 | 7.0
- enterprise_linux_server6.0 | 7.0
- enterprise_linux_workstation6.0 | 7.0
- gluster_storage3.0
Debian2 products
- samba< 2:4.6.7+dfsg-2
- debian_linuxEOL8.0 | 9.0
Alpine1 product
- samba≥ 4.5.0, < 4.7.0-r0 | ≥ 4.5.0, < 4.4.16-r0 | ≥ 4.5.0, < 4.5.14-r0 | ≥ 4.5.0, < 4.6.8-r0
Samba1 product
- sambaEOL4.7 | 4.6.8 | 4.5.14 | 4.4.16 | < 4.4.16 | ≥ 4.5.0, < 4.5.14 | ≥ 4.6.0, < 4.6.8
Ubuntu1 product
- samba< 2:4.3.11+dfsg-0ubuntu0.14.04.12 | < 2:4.3.11+dfsg-0ubuntu0.16.04.11
5 vendors · 9 products
References
19 links- h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03775en_usX Refsource CONFIRMThird Party Advisory
- www.synology.com/support/security/Synology_SA_17_57_SambaX Refsource CONFIRMMitigationThird Party Advisory
- support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03817en_usX Refsource CONFIRMThird Party Advisory
Show all 19 references
- bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12163X Refsource CONFIRMIssue TrackingMitigationThird Party Advisory