CVE-2017-7494

CriticalCVSS 9.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

VendorProductVersions
Sambasambasince 3.5.0

References

Timeline

Published
May 30, 2017
Last modified
Jun 17, 2026
Added to CISA KEV
Mar 30, 2023
NVD status
Analyzed

Related CVEs from 2017

CVE-2017-74955.5fs/ext4/inode.c in the Linux kernel before 4.6.2, when ext4 data=ordered mode is used, mishandles a needs-flushing-before-commit list, whichCVE-2017-74967.0fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking the error condition of CVE-2017-74974.3The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud tenants by user. An attacker with the ability toCVE-2017-75007.8It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changinCVE-2017-75017.8It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. An attacker with abilitCVE-2017-75027.5Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of servCVE-2017-75039.8It was found that the Red Hat JBoss EAP 7.0.5 implementation of javax.xml.transform.TransformerFactory is vulnerable to XXE. An attacker couCVE-2017-75049.8HTTPServerILServlet.java in JMS over HTTP Invocation Layer of the JbossMQ implementation, which is enabled by default in Red Hat Jboss AppliCVE-2017-75058.8Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management permission who are assigCVE-2017-75068.8spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacCVE-2017-75077.5GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid contCVE-2017-75087.5OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when receiving malformed IPv6 packet.
CVE-2017-7494: Critical severity, CVSS 9.8 | Vulnix