CVE-2017-9461: Medium severity Samba Samba vulnerability
smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability (fdopenatomic infinite loop with high CPU usage and memory consumption) due to wrongly handling dangling symlinks.
Other sources
smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerablity (fdopenatomic infinite loop with high CPU usage and memory consumption) due to wrongly handling dangling symlinks.
Upstream patch:
https://git.samba.org/?p=samba.git;a=commit;h=10c3e3923022485c720f322ca4f0aca5d7501310
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9461?
CVE-2017-9461 is classified as a denial of service vulnerability which can lead to high CPU usage and memory consumption.
Which versions of Samba are affected by CVE-2017-9461?
CVE-2017-9461 affects Samba versions before 4.4.10 and 4.5.x before 4.5.6.
How do I fix CVE-2017-9461?
To mitigate CVE-2017-9461, upgrade Samba to version 4.4.10 or 4.5.6 and above.
What impact does CVE-2017-9461 have on system performance?
CVE-2017-9461 can cause systems to enter an infinite loop leading to performance degradation through excessive CPU and memory usage.
Is a specific operating system vulnerable to CVE-2017-9461?
Yes, systems running affected versions of Samba on operating systems like Red Hat Enterprise Linux and Debian are vulnerable to CVE-2017-9461.