Lucene search
+L

11556 matches found

OSV
OSV
added 2022/02/21 6:15 p.m.8 views

ALPINE-CVE-2021-44141

All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition. SMB1 with unix extensions has to be enabled in order for this attack to succee...

4.3CVSS6.8AI score0.01088EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/21 6:15 p.m.13 views

AZL-8610 CVE-2021-44141 affecting package samba 4.12.5-7

All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition. SMB1 with unix extensions has to be enabled in order for this attack to succee...

4.3CVSS6.6AI score0.01088EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/21 6:15 p.m.4 views

DEBIAN-CVE-2021-44141

All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition. SMB1 with unix extensions has to be enabled in order for this attack to succee...

4.3CVSS6.4AI score0.01088EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/21 6:15 p.m.53 views

CVE-2021-44141

All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition. SMB1 with unix extensions has to be enabled in order for this attack to succee...

4.3CVSS7AI score
SaveExploits0References2
OSV
OSV
added 2022/02/21 6:15 p.m.16 views

AZL-37007 CVE-2021-44141 affecting package samba for versions less than 4.18.3-1

All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition. SMB1 with unix extensions has to be enabled in order for this attack to succee...

4.3CVSS6.4AI score0.01088EPSS
SaveExploits0References1
Prion
Prion
added 2022/02/21 6:15 p.m.28 views

Arbitrary file deletion

All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition. SMB1 with unix extensions has to be enabled in order for this attack to succee...

3.5CVSS4.9AI score0.01088EPSS
SaveExploits0References2Affected Software3
OSV
OSV
added 2022/02/21 3:15 p.m.3 views

DEBIAN-CVE-2021-44142

The Samba vfsfruit module uses extended file attributes EA, xattr to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfsfruit configured allow out-of-bounds heap read and wri...

8.8CVSS7.7AI score0.73864EPSS
SaveExploits1References1
OSV
OSV
added 2022/02/21 3:15 p.m.16 views

AZL-37008 CVE-2021-44142 affecting package samba for versions less than 4.18.3-1

The Samba vfsfruit module uses extended file attributes EA, xattr to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfsfruit configured allow out-of-bounds heap read and wri...

8.8CVSS7.2AI score0.73864EPSS
SaveExploits1References1
OSV
OSV
added 2022/02/21 3:15 p.m.3 views

ALPINE-CVE-2021-44142

The Samba vfsfruit module uses extended file attributes EA, xattr to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfsfruit configured allow out-of-bounds heap read and wri...

8.8CVSS7.6AI score0.73864EPSS
SaveExploits1References1
NVD
NVD
added 2022/02/21 3:15 p.m.35 views

CVE-2021-44142

The Samba vfsfruit module uses extended file attributes EA, xattr to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfsfruit configured allow out-of-bounds heap read and wri...

9CVSS0.73864EPSS
SaveExploits1References6
OSV
OSV
added 2022/02/21 3:15 p.m.9 views

AZL-8611 CVE-2021-44142 affecting package samba 4.12.5-7

The Samba vfsfruit module uses extended file attributes EA, xattr to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfsfruit configured allow out-of-bounds heap read and wri...

8.8CVSS7.3AI score0.73864EPSS
SaveExploits1References1
OSV
OSV
added 2022/02/21 3:15 p.m.37 views

CVE-2021-44142

The Samba vfsfruit module uses extended file attributes EA, xattr to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfsfruit configured allow out-of-bounds heap read and wri...

8.8CVSS7.7AI score
SaveExploits0References6
Prion
Prion
added 2022/02/21 3:15 p.m.42 views

Heap overflow

The Samba vfsfruit module uses extended file attributes EA, xattr to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfsfruit configured allow out-of-bounds heap read and wri...

9CVSS8.8AI score0.73864EPSS
SaveExploits1References5Affected Software22
AlpineLinux
AlpineLinux
added 2022/02/21 2:30 p.m.55 views

CVE-2021-44142

The Samba vfsfruit module uses extended file attributes EA, xattr to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfsfruit configured allow out-of-bounds heap read and wri...

9CVSS9.2AI score0.73864EPSS
SaveExploits1
CVE
CVE
added 2022/02/21 2:30 p.m.1270 views

CVE-2021-44142

The CVE-2021-44142 issue is in the Samba vfs_fruit module. It allows out-of-bounds heap read/write via specially crafted extended file attributes (xattrs) when vfs_fruit is configured on Samba versions older than 4.13.17, 4.14.12, and 4.15.5. A remote attacker with write access to xattrs can exec...

9CVSS8.9AI score0.73864EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
added 2022/02/21 2:30 p.m.66 views

CVE-2021-44142

The Samba vfsfruit module uses extended file attributes EA, xattr to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfsfruit configured allow out-of-bounds heap read and wri...

9AI score0.73864EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2022/02/21 2:30 p.m.11 views

CVE-2021-44142

The Samba vfsfruit module uses extended file attributes EA, xattr to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfsfruit configured allow out-of-bounds heap read and wri...

8.8AI score0.73864EPSS
SaveExploits1References5
Debian CVE
Debian CVE
added 2022/02/21 2:30 p.m.62 views

CVE-2021-44142

The Samba vfsfruit module uses extended file attributes EA, xattr to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfsfruit configured allow out-of-bounds heap read and wri...

9CVSS8.3AI score0.73864EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2022/02/21 12:00 a.m.45 views

CVE-2021-44141

All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition. SMB1 with unix extensions has to be enabled in order for this attack to succee...

4.3CVSS5.9AI score0.01088EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2022/02/21 12:00 a.m.65 views

CVE-2021-44141

All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition. SMB1 with unix extensions has to be enabled in order for this attack to succee...

4.3CVSS6.5AI score0.01088EPSS
SaveExploits0
Rows per page
Query Builder