2 matches found
Missing access checks on reparse point
Description Starting with Samba 4.21, users can create and delete NTFS-style reparse points https://en.wikipedia.org/wiki/NTFSreparsepoint via the SMB protocol. The Reparse Point Metadata is stored in an extended attribute named "user.SmbReparse" together with the FILEATTRIBUTEREPARSEPOINT bit in...
5.8AI score
SaveExploits0
The vulnerability of Samba software allows a malicious individual to compromise the accessibility of protected information.
The vulnerability in the sysrecvfrom function of nmbd in Samba allows malicious actors operating remotely to cause service interruptions lockup and excessive processor resource consumption by using improperly formed UDP packets...
3.3CVSS6.5AI score0.20481EPSS
SaveExploits0References3Affected Software1
20