Lucene search

CVE-2021-23192

🗓️ 09 Nov 2021 00:00:00Reported by ubuntu.comType

A flaw found in Samba's DCE/RPC implementation allows an attacker to bypass signature requirements by replacing fragments with their own data

Reporter	Title	Published	Views	Family All 56
IBM Security Bulletins	Security Bulletin: A vulnerability in Samba affects IBM Spectrum Scale SMB protocol access method (CVE-2021-23192)	21 Mar 202213:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Samba, OpenSSL, Python, and XStream affect IBM Spectrum Protect Plus (CVE-2021-20254, CVE-2021-3712, CVE-2021-43859, CVE-2022-0778, CVE-2020-25717, CVE-2021-23192, CVE-2021-3733)	30 Jun 202203:51	–	ibm
CBLMariner	CVE-2021-23192 affecting package samba for versions less than 4.18.3-1	15 Oct 202419:11	–	cbl_mariner
CBLMariner	CVE-2021-23192 affecting package samba 4.12.5-6	11 Dec 202403:14	–	cbl_mariner
Veracode	Fragment Injection	12 Nov 202115:46	–	veracode
OpenVAS	Samba 4.10.0 < 4.13.14, 4.14.0 < 4.14.10, 4.15.0 < 4.15.2 DCE/RPC Fragment Injection Vulnerability	11 Nov 202100:00	–	openvas
OpenVAS	openSUSE: Security Advisory for samba (openSUSE-SU-2021:3650-1)	11 Nov 202100:00	–	openvas
OpenVAS	openSUSE: Security Advisory for samba (openSUSE-SU-2021:1471-1)	16 Nov 202100:00	–	openvas
OpenVAS	SUSE: Security Advisory (SUSE-SU-2021:3650-1)	11 Nov 202100:00	–	openvas
OpenVAS	SUSE: Security Advisory (SUSE-SU-2021:3649-1)	11 Nov 202100:00	–	openvas

Source	Link
samba	www.samba.org/samba/security/CVE-2021-23192.html
samba	www.samba.org/samba/history/samba-4.13.14.html
ubuntu	www.ubuntu.com/security/notices/USN-5142-1
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-23192
launchpad	www.launchpad.net/bugs/cve/CVE-2021-23192
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-23192

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	20.04	noarch	samba	2:4.13.14+dfsg-0ubuntu0.20.04.1	UNKNOWN
ubuntu	21.04	noarch	samba	2:4.13.14+dfsg-0ubuntu0.21.04.1	UNKNOWN
ubuntu	21.10	noarch	samba	2:4.13.14+dfsg-0ubuntu0.21.10.1	UNKNOWN
ubuntu	22.04	noarch	samba	2:4.13.14+dfsg-0ubuntu1	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 Nov 2021 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS25.0

CVSS37.5

EPSS0.002

samba dce/rpc signature