CVE-2021-44142
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD
Description
The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.
Affected (42)
Show all products
Samba: Samba · Debian: Debian Linux · Canonical: Ubuntu Linux · Synology: Diskstation Manager · Fedoraproject: Fedora · Redhat: Codeready Linux Builder, Enterprise Linux, Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux For Ibm Z Systems, Enterprise Linux For Ibm Z Systems Eus, Enterprise Linux For Power Big Endian, Enterprise Linux For Power Little Endian, Enterprise Linux For Power Little Endian Eus, Enterprise Linux For Scientific Computing, Enterprise Linux Resilient Storage, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server Tus, Enterprise Linux Server Update Services For Sap Solutions, Enterprise Linux Workstation, Gluster Storage, Virtualization Host
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 10.0 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 14.04 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| From 6.2 to 6.2.4-25556.4 |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Version 34 |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| All versions | |
| Version 7.0 | |
| Version 7.0 | |
| Version 8.2 | |
| Version 7.0 | |
| Version 8.2 | |
| Version 7.0 | |
| Version 7.0 | |
| Version 8.2 | |
| Version 7.0 | |
| Version 7.0 | |
| Version 7.0 | |
| Version 8.2 | |
| Version 8.2 | |
| Version 8.1 | |
| Version 7.0 | |
| Version 3.5 | |
| Version 4.0 |
Related CWEs
References (11)
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.