CVE-2017-7494β€”Samba Remote Code Execution Vulnerability

PUBLISHEDvulnerability record
2023-03-30 Β· last modified June 21, 2025

Metadata

CVE ID:
CVE-2017-7494
Project:
Samba
Product:
Samba
Date Added:
2023-03-30
Due Date:
2023-04-20
Last Updated:
June 21, 2025

Vulnerability Name

Samba Remote Code Execution Vulnerability

Description

Samba contains a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share and then cause the server to load and execute it.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
KNOWN

Action

Apply updates per vendor instructions.

Additional Notes

  • https://www.samba.org/samba/security/CVE-2017-7494.html
  • https://nvd.nist.gov/vuln/detail/CVE-2017-7494

Related Weaknesses

browse all CVEs