CVE-2017-9461
smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability (fd_open_atomic infinite loop with high CPU usage and memory consumption) due to wrongly handling dangling symlinks.
Does this matter?
Lower severity and a low EPSS score (4.23%). Track it; it rarely justifies an emergency change on its own.
Description
smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability (fd_open_atomic infinite loop with high CPU usage and memory consumption) due to wrongly handling dangling symlinks.
- CVSS 3.0
- 6.5 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 4.23% probability · 91th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-835
- Affected
- samba/samba · redhat/enterprise linux desktop · redhat/enterprise linux server · redhat/enterprise linux server aus · redhat/enterprise linux server eus · redhat/enterprise linux server tus · redhat/enterprise linux workstation · debian/debian linux
- Source
- cve@mitre.org
EPSS 4.2% since 27 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- http://www.securityfocus.com/bid/99455Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2017:1950Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2338Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2778Third Party Advisory
- https://bugs.debian.org/864291Exploit, Issue Tracking, Patch, Third Party Advisory
- https://bugzilla.samba.org/show_bug.cgi?id=12572Exploit, Issue Tracking, Patch, Third Party Advisory, VDB Entry
- https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=10c3e3923022485c720f322ca4f0aca5d7501310
- https://lists.debian.org/debian-lts-announce/2019/04/msg00013.htmlThird Party Advisory
- http://www.securityfocus.com/bid/99455Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2017:1950Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2338Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2778Third Party Advisory
- https://bugs.debian.org/864291Exploit, Issue Tracking, Patch, Third Party Advisory
- https://bugzilla.samba.org/show_bug.cgi?id=12572Exploit, Issue Tracking, Patch, Third Party Advisory, VDB Entry
- https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=10c3e3923022485c720f322ca4f0aca5d7501310
- https://lists.debian.org/debian-lts-announce/2019/04/msg00013.htmlThird Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.