AZL-37002 CVE-2021-23192 affecting package samba for versions less than 4.18.3-1

🗓️ 02 Mar 2022 23:15:08Reported by GoogleType

osv🔗 osv.dev👁 4 Views

Samba DCE RPC fragmentation flaw allows attacker to replace later fragments and bypass signatures on older versions before 4.18.3-1.

Reporter	Title	Published	Views	Family All 127
ALT Linux	Security fix for the ALT Linux 10 package samba version 4.14.10-alt1	7 Nov 202100:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Samba, OpenSSL, Python, and XStream affect IBM Spectrum Protect Plus (CVE-2021-20254, CVE-2021-3712, CVE-2021-43859, CVE-2022-0778, CVE-2020-25717, CVE-2021-23192, CVE-2021-3733)	30 Jun 202203:51	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Samba affects IBM Spectrum Scale SMB protocol access method (CVE-2021-23192)	21 Mar 202213:32	–	ibm
FreeBSD	samba -- Multiple Vulnerabilities	10 Nov 202100:00	–	freebsd
Tenable Nessus	Amazon Linux 2022 : ctdb, ctdb-pcp-pmda, libsmbclient (ALAS2022-2022-022)	11 Dec 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : samba (ALAS2022-2022-224)	10 Dec 202200:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0077: samba (ALINUX3-SA-2021:0077)	14 May 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0176: samba (ALINUX3-SA-2022:0176)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : samba (ALSA-2021:5082)	12 Mar 202200:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: samba (CVE-2021-23192)	22 Jan 202600:00	–	nessus