Vulnerabilitycritical

Samba bug may allow code execution as root on Linux machines, NAS devices (CVE-2021-44142)

Help Net Securityby @zeljkazorzFeb 2, 2022 · 00:00 UTC (Feb 2, 2022)3 min read3 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2021-44142 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-44142 CVE-2017-7494

Tags: cve-2021-44142 cve-2017-7494 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-7494	Unauthenticated RCE in Samba via malicious shared library upload (SambaCry)	9.8	99%	KEVRansomware	May 30, 2017 KEV Mar 30, 2023
CVE-2021-44142	The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a…	8.8	74%		Feb 21, 2022

From the original article

3 min read at helpnetsecurity.com

A critical vulnerability (CVE-2021-44142) in Samba, a widely used open source implementation of the Server Message Block (SMB) networking protocol, could allow attackers to execute arbitrary code as root on affected Samba installations.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.