Lucene search

[email protected]CVE-2021-44142

HistoryFeb 21, 2022 - 3:15 p.m.

CVE-2021-44142

2022-02-2115:15:07

CWE-787

CWE-125

[email protected]

web.nvd.nist.gov

817

samba

vfs_fruit

cve-2021-44142

remote code execution

nvd

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

0.18 Low

EPSS

Percentile

96.2%

JSON

The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide “…enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver.” Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.

Affected configurations

NVD

Node

sambasambaRange<4.13.17

sambasambaRange4.14.0–4.14.12

sambasambaRange4.15.0–4.15.5

Node

debiandebian_linuxMatch10.0

debiandebian_linuxMatch11.0

Node

canonicalubuntu_linuxMatch14.04esm

canonicalubuntu_linuxMatch16.04esm

canonicalubuntu_linuxMatch18.04lts

canonicalubuntu_linuxMatch20.04lts

canonicalubuntu_linuxMatch21.10

Node

synologydiskstation_managerRange6.2–6.2.4-25556.4

Node

fedoraprojectfedoraMatch34

fedoraprojectfedoraMatch35

Node

redhatcodeready_linux_builderMatch-

redhatgluster_storageMatch3.5

redhatvirtualization_hostMatch4.0

redhatenterprise_linuxMatch7.0

redhatenterprise_linuxMatch8.0

redhatenterprise_linux_desktopMatch7.0

redhatenterprise_linux_eusMatch8.2

redhatenterprise_linux_eusMatch8.4

redhatenterprise_linux_for_ibm_z_systemsMatch7.0

redhatenterprise_linux_for_ibm_z_systemsMatch8.0

redhatenterprise_linux_for_ibm_z_systems_eusMatch8.2

redhatenterprise_linux_for_ibm_z_systems_eusMatch8.4

redhatenterprise_linux_for_power_big_endianMatch7.0

redhatenterprise_linux_for_power_little_endianMatch7.0

redhatenterprise_linux_for_power_little_endianMatch8.0

redhatenterprise_linux_for_power_little_endian_eusMatch8.2

redhatenterprise_linux_for_power_little_endian_eusMatch8.4

redhatenterprise_linux_for_scientific_computingMatch7.0

redhatenterprise_linux_resilient_storageMatch7.0

redhatenterprise_linux_serverMatch7.0

redhatenterprise_linux_serverMatch8.1

redhatenterprise_linux_server_ausMatch8.2

redhatenterprise_linux_server_ausMatch8.4

redhatenterprise_linux_server_tusMatch8.2

redhatenterprise_linux_server_tusMatch8.4

redhatenterprise_linux_server_update_services_for_sap_solutionsMatch8.1

redhatenterprise_linux_server_update_services_for_sap_solutionsMatch8.2

redhatenterprise_linux_server_update_services_for_sap_solutionsMatch8.4

redhatenterprise_linux_workstationMatch7.0

CPENameOperatorVersion
samba:sambasambalt4.13.17
samba:sambasambalt4.14.12
samba:sambasambalt4.15.5

CPE	Name	Operator	Version
samba:samba	samba	lt	4.13.17
samba:samba	samba	lt	4.14.12
samba:samba	samba	lt	4.15.5

CNA Affected

[
  {
    "vendor": "Samba",
    "product": "Samba",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "4.13.17",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "unspecified",
        "lessThan": "4.14.12",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "unspecified",
        "lessThan": "4.15.5",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]