CVE-2019-10218 — samba: smb client vulnerable to filenames containing path separators

Back Back to CVE browser

MEDIUM

samba: smb client vulnerable to filenames containing path separators

Published Nov 6, 2019

6.5

MEDIUM

CVSS 3.1

EPSS 3.38%

Description

A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathname to the client with separators. This could allow the client to access files and folders outside of the SMB network pathnames. An attacker could use this vulnerability to create files outside of the current working directory using the privileges of the client user.

Affected products

Vendor Samba Product Samba Default
n/a
- Version
  all samba versions before samba 4.11.2, 4.10.10 and 4.9.15
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Samba

n/a

Version	Status	Constraints
all samba versions before samba 4.11.2, 4.10.10 and 4.9.15	affected	-

Red Hat Enterprise Linux 7

samba-0:4.10.4-10.el7

Fixed · RHSA-2020:1084
Red Hat Enterprise Linux 8

openchange-0:2.3-24.el8

Fixed · RHSA-2020:1878
Red Hat Enterprise Linux 8

openchange-0:2.3-24.el8

Fixed · RHSA-2020:1878
Red Hat Enterprise Linux 8

samba-0:4.11.2-13.el8

Fixed · RHSA-2020:1878
Red Hat Enterprise Linux 8

samba-0:4.11.2-13.el8

Fixed · RHSA-2020:1878
Red Hat Gluster Storage 3.5 for RHEL 7

libtalloc-0:2.2.0-9.el7rhgs

Fixed · RHSA-2020:0943
Red Hat Gluster Storage 3.5 for RHEL 7

libtdb-0:1.4.2-4.el7rhgs

Fixed · RHSA-2020:0943
Red Hat Gluster Storage 3.5 for RHEL 7

libtevent-0:0.10.0-4.el7rhgs

Fixed · RHSA-2020:0943
Red Hat Gluster Storage 3.5 for RHEL 7

samba-0:4.11.6-104.el7rhgs

Fixed · RHSA-2020:0943
Red Hat Enterprise Linux 5

samba

Out of support scope
Red Hat Enterprise Linux 5

samba3x

Out of support scope
Red Hat Enterprise Linux 6

samba

Out of support scope
Red Hat Enterprise Linux 6

samba4

Not affected
Red Hat Virtualization 4

redhat-virtualization-host

Will not fix

Product	Package	State	Advisory
Red Hat Enterprise Linux 7	samba-0:4.10.4-10.el7	Fixed	RHSA-2020:1084
Red Hat Enterprise Linux 8	openchange-0:2.3-24.el8	Fixed	RHSA-2020:1878
Red Hat Enterprise Linux 8	openchange-0:2.3-24.el8	Fixed	RHSA-2020:1878
Red Hat Enterprise Linux 8	samba-0:4.11.2-13.el8	Fixed	RHSA-2020:1878
Red Hat Enterprise Linux 8	samba-0:4.11.2-13.el8	Fixed	RHSA-2020:1878
Red Hat Gluster Storage 3.5 for RHEL 7	libtalloc-0:2.2.0-9.el7rhgs	Fixed	RHSA-2020:0943
Red Hat Gluster Storage 3.5 for RHEL 7	libtdb-0:1.4.2-4.el7rhgs	Fixed	RHSA-2020:0943
Red Hat Gluster Storage 3.5 for RHEL 7	libtevent-0:0.10.0-4.el7rhgs	Fixed	RHSA-2020:0943
Red Hat Gluster Storage 3.5 for RHEL 7	samba-0:4.11.6-104.el7rhgs	Fixed	RHSA-2020:0943
Red Hat Enterprise Linux 5	samba	Out of support scope	n/a
Red Hat Enterprise Linux 5	samba3x	Out of support scope	n/a
Red Hat Enterprise Linux 6	samba	Out of support scope	n/a
Red Hat Enterprise Linux 6	samba4	Not affected	n/a
Red Hat Virtualization 4	redhat-virtualization-host	Will not fix	n/a

Remediation

No remediation recorded yet.

Metrics

3.38% 0.03377

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.03377

Score over time

2021–2026

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (27 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	3.38% (0.03377)	88.39th	v5 (v2026.06.15)
Jun 15, 2026	3.52% (0.03515)	87.67th	v5 (v2026.06.15)
Nov 30, 2025	4.51% (0.04508)	88.69th	v4 (v2025.03.14)
Nov 21, 2025	6.75% (0.06746)	90.89th	v4 (v2025.03.14)
Nov 18, 2025	4.48% (0.04476)	87.99th	v4 (v2025.03.14)
Mar 30, 2025	6.75% (0.06746)	90.38th	v4 (v2025.03.14)
Mar 29, 2025	11.10% (0.11097)	89.08th	v4 (v2025.03.14)
Mar 20, 2025	6.75% (0.06746)	90.49th	v4 (v2025.03.14)
Mar 17, 2025	4.87% (0.04872)	88.83th	v4 (v2025.03.14)
Dec 12, 2024	0.43% (0.00425)	75.15th	v3 (v2023.03.01)
Feb 8, 2024	0.30% (0.00299)	68.64th	v3 (v2023.03.01)
Oct 13, 2023	0.30% (0.00299)	65.92th	v3 (v2023.03.01)
Sep 27, 2023	0.26% (0.00262)	63.33th	v3 (v2023.03.01)
Sep 10, 2023	0.27% (0.00273)	63.98th	v3 (v2023.03.01)
Aug 26, 2023	0.28% (0.00281)	64.44th	v3 (v2023.03.01)
Mar 7, 2023	0.24% (0.00235)	59.76th	v3 (v2023.03.01)
Mar 6, 2023	1.18% (0.01183)	61.76th	v2 (v2022.01.01)
Oct 19, 2022	1.18% (0.01183)	60.79th	v2 (v2022.01.01)
Apr 1, 2022	1.18% (0.01183)	58.77th	v2 (v2022.01.01)
Feb 4, 2022	11.69% (0.11687)	88.96th	v2 (v2022.01.01)
Feb 3, 2022	7.85% (0.07855)	85.01th	v1
Jan 6, 2022	7.85% (0.07855)	84.84th	v1
Sep 1, 2021	1.86% (0.01865)	76.13th	v1
Jun 8, 2021	1.86% (0.01865)	0.00th	v1
Jun 2, 2021	7.85% (0.07855)	0.00th	v1
May 30, 2021	1.86% (0.01865)	0.00th	v1
Apr 14, 2021	1.66% (0.01659)	0.00th	v1

Weaknesses (1)

CWE-22

Path Traversal

References (13)

http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00015.html
vendor-advisoryThird Party Advisory
https://access.redhat.com/security/cve/CVE-2019-10218
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1763137
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10218
Issue TrackingThird Party Advisory
https://lists.debian.org/debian-lts-announce/2021/05/msg00023.html
mailing-list
https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html
mailing-list
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OKPYHDFI7HRELVXBE5J4MTGSI35AKFBI/
vendor-advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UMIYCYXCPRTVCVZ3TP6ZGPJ6RZS3IX4G/
vendor-advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XQ3IUACPZJXSC4OM6P2V4IC4QMZQZWPD/
vendor-advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10218
https://www.cve.org/CVERecord?id=CVE-2019-10218
https://www.samba.org/samba/security/CVE-2019-10218.html
Vendor Advisory
https://www.synology.com/security/advisory/Synology_SA_19_35

Link	Providers	Tags
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00015.html		vendor-advisoryThird Party Advisory
https://access.redhat.com/security/cve/CVE-2019-10218		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1763137		Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10218		Issue TrackingThird Party Advisory
https://lists.debian.org/debian-lts-announce/2021/05/msg00023.html		mailing-list
https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html		mailing-list
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OKPYHDFI7HRELVXBE5J4MTGSI35AKFBI/		vendor-advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UMIYCYXCPRTVCVZ3TP6ZGPJ6RZS3IX4G/		vendor-advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XQ3IUACPZJXSC4OM6P2V4IC4QMZQZWPD/		vendor-advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10218
https://www.cve.org/CVERecord?id=CVE-2019-10218
https://www.samba.org/samba/security/CVE-2019-10218.html		Vendor Advisory
https://www.synology.com/security/advisory/Synology_SA_19_35