PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2017-7494

CVE-2017-7494

samba: Loading shared modules from any path in the system leading to RCE (SambaCry)

Loading…

Severity

Important

Red Hat Product Security

7.5

CVSS 3.0

Review impact separately from score.

Published · May 24, 2017

Updated · November 21, 2025

Description

A remote code execution flaw was found in Samba. A malicious authenticated samba client, having write access to the samba share, could use this flaw to execute arbitrary code as root.

Statement

This vulnerability exists in the samba server, client side packages are not affected.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Any of the following:

  1. SELinux is enabled by default and our default policy prevents loading of modules from outside of samba's module directories and therefore blocks the exploit

  2. Mount the filesystem which is used by samba for its writable share using "noexec" option.

  3. Add the parameter:

    nt pipe support = no

    to the [global] section of your smb.conf and restart smbd. This prevents clients from accessing any named pipe endpoints. Note this can disable some expected functionality for Windows clients.

CVSS / CWE

CVSS 3.0 · 7.5
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE not specified