CVE-2022-3592: Medium severity samba vulnerability
A symlink following vulnerability was found in Samba, where a user can create a symbolic link that will make 'smbd' escape the configured share path. This flaw allows a remote user with access to the exported part of the file system under a share via SMB1 unix extensions or NFS to create symlinks to files outside the 'smbd' configured share path and gain access to another restricted server's filesystem.
Other sources
Samba 4.17 introduced following symlinks in user space with the intent to properly check symlink targets to stay within the share that was configured by the administrator. The check does not properly cover a corner case, so that a user can create a symbolic link that will make smbd escape the configured share path.
Affects - All versions of Samba since 4.17.0. Samba 4.17.2 has been issued as a security releases to correct the defect.
https://www.samba.org/samba/security/CVE-2022-3592.html
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-3592?
CVE-2022-3592 is a symlink following vulnerability found in Samba, allowing a user to create symbolic links that can make 'smbd' escape the configured share path.
What is the severity of CVE-2022-3592?
CVE-2022-3592 has a severity rating of 6.5, which is considered medium.
How does CVE-2022-3592 impact Samba?
CVE-2022-3592 allows a remote user with access to the exported part of the file system under a share via SMB1 unix extensions or NFS to create symlinks.
Which versions of Samba are affected by CVE-2022-3592?
Versions up to and excluding 4.17.2 of Samba are affected by CVE-2022-3592.
Where can I find more information about CVE-2022-3592?
You can find more information about CVE-2022-3592 at the following references: [samba.org](https://www.samba.org/samba/security/CVE-2022-3592.html), [bugzilla.redhat.com](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2137778), [bugzilla.redhat.com](https://bugzilla.redhat.com/show_bug.cgi?id=2137776).