60
Vulnerability1 · 1 read
CVE-2021-44142
- CVSS 3.1
- 8.8 high
- EPSS
- 74%p99
- Published
- ·
- Modified
Description · NVD
The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.
- Products
- samba, debian linux, ubuntu linux, diskstation manager, fedora, codeready linux builder, gluster storage, virtualization host, enterprise linux, enterprise linux desktop, enterprise linux eus, enterprise linux for ibm z systems
- Weakness
- CWE-125, CWE-787
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the news
6 stories60
60
60
60
35