Lucene search

K
cvelistRedhatCVELIST:CVE-2021-3671
HistoryOct 12, 2021 - 12:00 a.m.

CVE-2021-3671

2021-10-1200:00:00
CWE-476
redhat
www.cve.org
8
samba
kerberos
vulnerability
tgs-req
crash

AI Score

7.4

Confidence

High

EPSS

0.005

Percentile

77.0%

A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Samba",
    "versions": [
      {
        "version": "Fixed in samba 4.13.12, samba 4.14.8",
        "status": "affected"
      }
    ]
  }
]