---
id: "CVE-2017-7494"
kind: "vulnerability"
aliases: ["CVE-2017-7494"]
title: "Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability,\u2026"
severity: "critical"
cvss: 10.0
epss: null
exploited: true
status: "open"
category: "package"
products: [{"name": "Samba Samba", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "samba", "fixed": ["4.4.0"], "affected": ">= 3.5.0, < 4.4.0", "ecosystem": "vendor"}, {"name": "samba", "fixed": ["4.4.14"], "affected": ">= 4.4.0, < 4.4.14", "ecosystem": "vendor"}, {"name": "samba", "fixed": ["4.5.10"], "affected": ">= 4.5.0, < 4.5.10", "ecosystem": "vendor"}, {"name": "samba", "fixed": ["4.6.4"], "affected": ">= 4.6.0, < 4.6.4", "ecosystem": "vendor"}, {"name": "debian linux", "fixed": [], "affected": "= 8.0", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "file-server", "package", "ransomware", "samba", "self-hosted"]
not_affected_if: ["no-writable-share", "samba-not-in-use"]
published_at: "2017-05-30T18:29:00+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T22:29:04+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-7494", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7494", "first_seen_at": "2026-10-23T22:29:04+00:00"}]
---

# Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability,…

Samba, the Windows file and print sharing server, can be made to run code it should not. A malicious client uploads a shared library to a writable share and gets the server to load and execute it.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Samba Samba affected ? fixed ?
- vendor:samba affected >= 3.5.0, < 4.4.0 fixed 4.4.0
- vendor:samba affected >= 4.4.0, < 4.4.14 fixed 4.4.14
- vendor:samba affected >= 4.5.0, < 4.5.10 fixed 4.5.10
- vendor:samba affected >= 4.6.0, < 4.6.4 fixed 4.6.4
- vendor:debian linux affected = 8.0 fixed ?

## Fix

Apply the Samba update per vendor instructions; the affected and fixed versions are not stated in the sources.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-7494
- 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2017-7494

## From the sources

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_