Situation
A vulnerability (CVE-2019-10197) was found in Samba versions 4.9.0 through 4.10.7 that could allow for unintended access, addition, and/or modification to files over the network.
Problem
The vulnerability is a flaw with Samba SMB server which does not properly prevent clients from escaping outside the share root directory.
Implication
An attacker could use this vulnerability to gain access to files outside of the Samba share which could lead to the disclosure of sensitive information or addition/modification of data outside the Samba share.
Need
Samba has released patches and it is advised to apply them if you are running versions lower than 4.9.13 and 4.10.8, or you can install the latest Samba stable release.
