CVE-2017-7494: Samba Remote Code Execution Vulnerability

KEVRansomware

Analyzed

AliasesALPINE-CVE-2017-7494SUSE-SU-2017:1391-1SUSE-SU-2017:1392-1+12 more

Published 30-05-2017Last modified 21-10-2025

Vulnerability summary

CVE-2017-7494 is a high (CVSS 10.0) Improper Control of Generation of Code vulnerability in Samba. It is known to be exploited: CISA lists it, first on 30-03-2023. It has been used in ransomware campaigns. EPSS estimates a 99.45% chance of exploitation in the next 30 days, higher than 99.9% of scored vulnerabilities. 3 public exploits are recorded.

Priority

Act nowransomware

Known ransomware use (CISA, 30-03-2023)

Source freshness unavailable

How is this decided?

CVSS score

10.0/10

010

High · v2.0 (NVD)

EPSS score

99.45%

0%100%

Critical · 0.00 pp in 30 days

KEVExploited in the wildCritical · listed in 1 catalog

RansomwareKnown useFlagged by CISA

Public exploits3exploit-database, metasploit

Advisory lineage

Upstream 0 · Downstream 2 · Related 1

MGASA-2017-0145 OPENSUSE-SU-2024:11365-1

Timeline

30-05-2017
PublishedVulnerability first disclosed.
30-03-2023
Added to CISA KEVExploitedSamba Remote Code Execution Vulnerability
20-04-2023
CISA remediation dueDeadline passedApply updates per vendor instructions.
21-10-2025
Last modifiedVulnerability information updated.

Description

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.

CVSS metrics

8 scores · 6 sources · 3 versions

v3.19.8v3.07.5v2.010.0

EPSS trend

Probability

99.45%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

No change 0.00 pp

From 99.45% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEVListed

Added: 30-03-2023
Federal due date: 20-04-2023

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

CISA required action

Apply updates per vendor instructions. www.samba.org/samba/security/CVE-2017-7494.html nvd.nist.gov/vuln/detail/CVE-2017-7494

Public exploits

3 found

exploit-databaseremotelinuxVerified
Samba 3.5.0 - Remote Code Execution
Maturity: weaponized
exploit-databaseremotelinuxVerified
Samba 3.5.0 < 4.4.14/4.5.10/4.6.4 - 'is_known_pipename()' Arbitrary Module Load (Metasploit)
Maturity: weaponized
MetasploitremoteVerified
Samba is_known_pipename() Arbitrary Module Load
exploit/linux/samba/is_known_pipename
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-94Improper Control of Generation of CodeThe product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat57 products

ctdb< 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:4.2.10-11.el7_2
ctdb-devel< 0:4.2.10-11.el7_2
ctdb-tests< 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:4.2.10-11.el7_2
libsmbclient< 0:3.6.23-43.el6_9 | < 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:3.6.23-32.el6_7 | < 0:3.6.23-32.el6_2 | < 0:3.6.23-32.el6_4 | < 0:3.6.23-32.el6_5 | < 0:3.6.23-32.el6_6 | < 0:4.2.10-11.el7_2
libsmbclient-devel< 0:3.6.23-43.el6_9 | < 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:3.6.23-32.el6_7 | < 0:3.6.23-32.el6_2 | < 0:3.6.23-32.el6_4 | < 0:3.6.23-32.el6_5 | < 0:3.6.23-32.el6_6 | < 0:4.2.10-11.el7_2

libwbclient< 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:4.2.10-11.el7_2
libwbclient-devel< 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:4.2.10-11.el7_2
samba< 0:3.6.23-43.el6_9 | < 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:3.6.23-32.el6_7 | < 0:3.6.23-32.el6_2 | < 0:3.6.23-32.el6_4 | < 0:3.6.23-32.el6_5 | < 0:3.6.23-32.el6_6 | < 0:4.2.10-11.el7_2
samba-client< 0:3.6.23-43.el6_9 | < 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:3.6.23-32.el6_7 | < 0:3.6.23-32.el6_2 | < 0:3.6.23-32.el6_4 | < 0:3.6.23-32.el6_5 | < 0:3.6.23-32.el6_6 | < 0:4.2.10-11.el7_2
samba-client-libs< 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:4.2.10-11.el7_2
samba-common< 0:3.6.23-43.el6_9 | < 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:3.6.23-32.el6_7 | < 0:3.6.23-32.el6_2 | < 0:3.6.23-32.el6_4 | < 0:3.6.23-32.el6_5 | < 0:3.6.23-32.el6_6 | < 0:4.2.10-11.el7_2
samba-common-libs< 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:4.2.10-11.el7_2
samba-common-tools< 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:4.2.10-11.el7_2
samba-dc< 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:4.2.10-11.el7_2
samba-dc-libs< 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:4.2.10-11.el7_2
samba-debuginfo< 0:3.6.23-43.el6_9 | < 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:3.6.23-32.el6_7 | < 0:3.6.23-32.el6_2 | < 0:3.6.23-32.el6_4 | < 0:3.6.23-32.el6_5 | < 0:3.6.23-32.el6_6 | < 0:4.2.10-11.el7_2
samba-devel< 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:4.2.10-11.el7_2
samba-doc< 0:3.6.23-43.el6_9 | < 0:3.6.23-32.el6_7 | < 0:3.6.23-32.el6_2 | < 0:3.6.23-32.el6_4 | < 0:3.6.23-32.el6_5 | < 0:3.6.23-32.el6_6
samba-domainjoin-gui< 0:3.6.23-43.el6_9 | < 0:3.6.23-32.el6_7 | < 0:3.6.23-32.el6_2 | < 0:3.6.23-32.el6_4 | < 0:3.6.23-32.el6_5 | < 0:3.6.23-32.el6_6
samba-glusterfs< 0:3.6.23-43.el6_9 | < 0:3.6.23-32.el6_7
samba-krb5-printing< 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs
samba-libs< 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:4.2.10-11.el7_2
samba-pidl< 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:4.2.10-11.el7_2
samba-python< 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:4.2.10-11.el7_2
samba-swat< 0:3.6.23-43.el6_9 | < 0:3.6.23-32.el6_7 | < 0:3.6.23-32.el6_2 | < 0:3.6.23-32.el6_4 | < 0:3.6.23-32.el6_5 | < 0:3.6.23-32.el6_6
samba-test< 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:4.2.10-11.el7_2
samba-test-devel< 0:4.2.10-11.el7_2
samba-test-libs< 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:4.2.10-11.el7_2
samba-vfs-glusterfs< 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:4.2.10-11.el7_2
samba-winbind< 0:3.6.23-43.el6_9 | < 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:3.6.23-32.el6_7 | < 0:3.6.23-32.el6_2 | < 0:3.6.23-32.el6_4 | < 0:3.6.23-32.el6_5 | < 0:3.6.23-32.el6_6 | < 0:4.2.10-11.el7_2
samba-winbind-clients< 0:3.6.23-43.el6_9 | < 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:3.6.23-32.el6_7 | < 0:3.6.23-32.el6_2 | < 0:3.6.23-32.el6_4 | < 0:3.6.23-32.el6_5 | < 0:3.6.23-32.el6_6 | < 0:4.2.10-11.el7_2
samba-winbind-devel< 0:3.6.23-43.el6_9 | < 0:3.6.23-32.el6_7 | < 0:3.6.23-32.el6_2 | < 0:3.6.23-32.el6_4 | < 0:3.6.23-32.el6_5 | < 0:3.6.23-32.el6_6
samba-winbind-krb5-locator< 0:3.6.23-43.el6_9 | < 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:3.6.23-32.el6_7 | < 0:3.6.23-32.el6_2 | < 0:3.6.23-32.el6_4 | < 0:3.6.23-32.el6_5 | < 0:3.6.23-32.el6_6 | < 0:4.2.10-11.el7_2
samba-winbind-modules< 0:4.4.4-14.el7_3 | < 0:4.4.6-5.el6rhs | < 0:4.4.6-5.el7rhgs | < 0:4.2.10-11.el7_2
samba3x< 0:3.6.23-14.el5_11
samba3x-client< 0:3.6.23-14.el5_11
samba3x-common< 0:3.6.23-14.el5_11
samba3x-debuginfo< 0:3.6.23-14.el5_11
samba3x-doc< 0:3.6.23-14.el5_11
samba3x-domainjoin-gui< 0:3.6.23-14.el5_11
samba3x-swat< 0:3.6.23-14.el5_11
samba3x-winbind< 0:3.6.23-14.el5_11
samba3x-winbind-devel< 0:3.6.23-14.el5_11
samba4< 0:4.2.10-10.el6_9
samba4-client< 0:4.2.10-10.el6_9
samba4-common< 0:4.2.10-10.el6_9
samba4-dc< 0:4.2.10-10.el6_9
samba4-dc-libs< 0:4.2.10-10.el6_9
samba4-debuginfo< 0:4.2.10-10.el6_9
samba4-devel< 0:4.2.10-10.el6_9
samba4-libs< 0:4.2.10-10.el6_9
samba4-pidl< 0:4.2.10-10.el6_9
samba4-python< 0:4.2.10-10.el6_9
samba4-test< 0:4.2.10-10.el6_9
samba4-winbind< 0:4.2.10-10.el6_9
samba4-winbind-clients< 0:4.2.10-10.el6_9
samba4-winbind-krb5-locator< 0:4.2.10-10.el6_9

Show all 57

Suse24 products

samba-doc&distro=SUSE Linux Enterprise Point of Sale 11 SP3< 3.6.3-93.1
samba-doc&distro=SUSE Linux Enterprise Server 11 SP3-LTSS< 3.6.3-93.1
samba-doc&distro=SUSE Linux Enterprise Server 11 SP3-TERADATA< 3.6.3-93.1
samba-doc&distro=SUSE Linux Enterprise Server 11 SP4< 3.6.3-93.1
samba-doc&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4< 3.6.3-93.1

Show all 24

Debian2 products

samba< 2:4.5.8+dfsg-2 | < 2:4.2.14+dfsg-0+deb8u6 | < 2:3.6.6-6+deb7u13
debian_linuxEOL8.0

Alpine1 product

samba≥ 3.5.0, < 4.2.14-r3 | ≥ 3.5.0, < 4.4.14-r0

Samba1 product

sambasince 3.5.0 | ≥ 3.5.0, < 4.4.0 | ≥ 4.4.0, < 4.4.14 | ≥ 4.5.0, < 4.5.10 | ≥ 4.6.0, < 4.6.4

Ubuntu1 product

samba< 2:4.3.11+dfsg-0ubuntu0.14.04.8 | < 2:4.3.11+dfsg-0ubuntu0.16.04.7

6 vendors · 86 products

References

40 links

www.securityfocus.com/bid/98636VDB EntryX Refsource BIDThird Party Advisory
www.debian.org/security/2017/dsa-3860Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.exploit-db.com/exploits/42084/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
access.redhat.com/errata/RHSA-2017:1270Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
www.samba.org/samba/security/CVE-2017-7494.htmlX Refsource CONFIRMPatchVendor AdvisoryARTICLEREPORT
download.schneider-electric.com/filesX Refsource MISCThird Party Advisory
access.redhat.com/errata/RHSA-2017:1390Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
www.securitytracker.com/id/1038552VDB EntryX Refsource SECTRACKThird Party Advisory
access.redhat.com/errata/RHSA-2017:1273Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2017:1271Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory

Show all 40 references

security.gentoo.org/glsa/201805-07Vendor AdvisoryX Refsource GENTOOThird Party Advisory
h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03759en_usX Refsource CONFIRMThird Party Advisory
access.redhat.com/errata/RHSA-2017:1272Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
security.netapp.com/advisory/ntap-20170524-0001/X Refsource CONFIRMThird Party Advisory
h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03755en_usX Refsource CONFIRMThird Party Advisory
www.exploit-db.com/exploits/42060/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-7494Government ResourceUS Government Resource
security.alpinelinux.org/vuln/CVE-2017-7494Advisory
www.suse.com/support/update/announcement/2017/suse-su-20171391-1/Advisory
bugzilla.suse.com/1038231REPORT
www.suse.com/security/cve/CVE-2017-7494WEB
www.suse.com/support/update/announcement/2017/suse-su-20171392-1/Advisory
www.suse.com/support/update/announcement/2017/suse-su-20171393-1/Advisory
www.suse.com/support/update/announcement/2017/suse-su-20171396-1/Advisory
access.redhat.com/security/updates/classification/ARTICLE
access.redhat.com/security/vulnerabilities/3034621ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1450347REPORT
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1270.jsonAdvisory
access.redhat.com/security/cve/CVE-2017-7494REPORT
www.cve.org/CVERecord?id=CVE-2017-7494AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2017-7494Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalogARTICLEREPORT
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1271.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1272.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1273.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1390.jsonAdvisory
ubuntu.com/security/CVE-2017-7494REPORT
ubuntu.com/security/notices/USN-3296-1Advisory
ubuntu.com/security/notices/USN-3296-2Advisory
security-tracker.debian.org/tracker/CVE-2017-7494Advisory