# MA-664.052017: MyCERT Advisory - Samba Releases Security Updates

**Date:** 29 May 2017  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-664.052017  
**Advisory ID:** MA-664.052017

---

**1.0 Introduction**
The Samba Team has released security updates that address a vulnerability in all versions of Samba from 3.5.0 onward.
|  |
| --- | --- | --- | Severity | Type | Version | High (CVE-2017-7494) | Remote code execution from a writable share | All versions of Samba from 3.5.0 onwards |
**2.0 Impact**
A remote attacker could exploit this vulnerability to take control of an affected system.
**3.0 Affected Products**
• All versions of Samba from 3.5.0 onwards.
**4.0 Recommendations**
MyCERT recommends all users of this product to review the provided information in below URL and apply necessary update:
• <https://www.samba.org/samba/security/CVE-2017-7494.html>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: [[email protected]](/cdn-cgi/l/email-protection#9ffce6fdfaeda6a6a6dffce6fdfaedecfafceaedf6ebe6b1f2e6) or [[email protected]](mycert@mycert.org.my) â€¨
Phone: 1-300-88-2999 (monitored during business hours)
â€¨Fax: +603 89453442 â€¨
Mobile: +60 19 2665850 (24x7 call incident reporting)â€¨
SMS: CYBER999 REPORT EMAIL COMPLAINT to 15888â€¨
Business Hours: Mon - Fri 09:00 AM - 18:00 PM MYTâ€¨
Web: <https://www.mycert.org.my>
Twitter: <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps: [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0 References**
• <https://www.us-cert.gov/ncas/current-activity/2017/05/24/Samba-Releases-Security-Updates>
• <https://www.samba.org/samba/security/CVE-2017-7494.html>
• <https://access.redhat.com/security/cve/CVE-2017-7494>
• <http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2017-7494>