ZeroDay Findings
Sign inSign up

Findings

CVE-2017-7494

Samba Remote Code Execution Vulnerability

Published May 30, 2017 · updated Jun 16, 2026 · samba samba

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 30, 2017 · Catalog

    Detected

    Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.

  2. Mar 30, 2023 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Apr 20, 2023 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.

Required action

Apply updates per vendor instructions.

CISA due date Apr 20, 2023

Affected

  • cpe debian/debian linux8.0
  • cpe samba/sambaversion unspecified
  • vendor Samba Sambaversion unspecified

Sources

  • CISA KEVConfirmed exploitationCVE-2017-7494

    Samba contains a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share and then cause the server to load and execute it.

    cisa.gov
  • CVE.orgVulnerability recordCVE-2017-7494

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2017-7494

    30-day exploitation probability 99.4%

    first.org
  • Exploit DatabasePublic exploit reference42060

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Exploit DatabasePublic exploit reference42084

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Metasploit ModulesPublic exploit moduleexploit_linux/samba/is_known_pipename

    Public module reference (excellent). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDVulnerability recordCVE-2017-7494

    Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.

    nvd.nist.gov

References