Lucene search
HistoryMar 06, 2023 - 11:15 p.m.
CVE-2021-20251
samba
race condition
password lockout
brute force attacks
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
AI Score
6.7
Confidence
High
EPSS
0.002
Percentile
58.0%
A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special conditions are met.
Affected configurations
Node
sambasambaRange4.1.0–4.16.8
ORsambasambaRange4.17.0–4.17.4
Node
fedoraprojectfedoraMatch37
| Vendor | Product | Version | CPE |
|---|---|---|---|
| samba | samba | * | cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* |
| fedoraproject | fedora | 37 | cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* |
Related
veracode
veracode
Authentication Bypass
2022-11-17 15:20:24
osv
osv
CVE-2021-20251
2023-03-06 23:15:10
ctdb-4.17.1+git.270.17afe7cb6b-1.1 on GA media
2024-06-15 00:00:00
samba regression
2023-01-26 21:36:01
ubuntucve
ubuntucve
CVE-2021-20251
2022-10-27 00:00:00
cve
cve
CVE-2021-20251
2023-03-06 23:15:10
cvelist
cvelist
CVE-2021-20251
2023-03-06 00:00:00
debiancve
debiancve
CVE-2021-20251
2023-03-06 23:15:10
redhatcve
redhatcve
CVE-2021-20251
2023-03-03 19:29:32
prion
prion
Race condition
2023-03-06 23:15:00
openvas
openvas
Samba 4.1 < 4.17.1 Improper Authentication (CVE-2021-20251)
2022-10-24 00:00:00
openSUSE: Security Advisory for samba (SUSE-SU-2023:0162-1)
2024-03-04 00:00:00
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2023-2276)
2023-07-04 00:00:00
nessus
nessus
EulerOS 2.0 SP11 : samba (EulerOS-SA-2023-2276)
2023-07-04 00:00:00
SUSE SLES15 Security Update : samba (SUSE-SU-2023:0162-1)
2023-01-27 00:00:00
EulerOS 2.0 SP11 : samba (EulerOS-SA-2023-2300)
2023-07-04 00:00:00
ubuntu
ubuntu
Samba vulnerabilities
2023-01-24 00:00:00
Samba regression
2023-01-26 00:00:00
gentoo
gentoo
Samba: Multiple Vulnerabilities
2023-09-17 00:00:00
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
AI Score
6.7
Confidence
High
EPSS
0.002
Percentile
58.0%
Related for NVD:CVE-2021-20251