CVE-2017-7494
Samba Remote Code Execution Vulnerability
Published May 30, 2017 · updated Jun 16, 2026 · samba samba
Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.
Timeline
Detection, updates, and resolution for this record.
May 30, 2017 · Catalog
Detected
Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.
Mar 30, 2023 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Apr 20, 2023 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.
Required action
Apply updates per vendor instructions.
CISA due date Apr 20, 2023
Affected
- cpe debian/debian linux8.0
- cpe samba/sambaversion unspecified
- vendor Samba Sambaversion unspecified
Sources
- CISA KEVCVE-2017-7494
Samba contains a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share and then cause the server to load and execute it.
cisa.gov - CVE.orgCVE-2017-7494
Official CVE identifier
cve.org - FIRST EPSSCVE-2017-7494
30-day exploitation probability 99.4%
first.org - Exploit Database42060
Public archive entry. The exploit body is not stored here.
exploit-db.com - Exploit Database42084
Public archive entry. The exploit body is not stored here.
exploit-db.com - Metasploit Modulesexploit_linux/samba/is_known_pipename
Public module reference (excellent). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2017-7494
Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.
nvd.nist.gov