Details of VAR-202201-0295

ID

VAR-202201-0295

CVE

CVE-2021-44142

TITLE

Samba vfs_fruit Out-of-bounds read / write vulnerability due to insecure processing of extended file attributes in module

Trust: 0.8

sources: JVNDB: JVNDB-2022-001296

DESCRIPTION

The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root. Authentication is not required to exploit this vulnerability.The specific flaw exists within the handling of AppleDouble entries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. The specific flaw exists within the parsing of EA metadata when opening files in smbd. The problem in vfs_fruit exists in the default configuration of the fruit VFS module using fruit:metadata=netatalk or fruit:resource=file. If both options are set to different settings than the default values, the system is not affected by the security issue. Patches addressing both these issues have been posted to: www.samba.org/samba/security/. CVE-2022-0336 Kees van Vloten reported that Samba AD users with permission to write to an account can impersonate arbitrary services. For the oldstable distribution (buster), these problems have been fixed in version 2:4.9.5+dfsg-5+deb10u3. As per DSA 5015-1, CVE-2022-0336 has not been addressed for the oldstable distribution (buster). For the stable distribution (bullseye), these problems have been fixed in version 2:4.13.13+dfsg-1~deb11u3. Additionally, some followup fixes for CVE-2020-25717 are included in this update (Cf. We recommend that you upgrade your samba packages. For the detailed security status of samba please refer to its security tracker page at: https://security-tracker.debian.org/tracker/samba Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmIGeeJfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0SBDg//TfBB+gXbb751f6ltULdhmZUtEVL1Kyns8/LpEkKKKNU8AS8FOsLQs/o8 ICNJ3Fqv9XYqZ0Kc8w4w800jq6svy4nXkwRIiOzN0WqKXxNDZMzqDs0ACVyNQgE8 Pfugf+M5FAawPl5WhBtY+g+uUiwwjz7+UZ1eYcxLf1PT6lQLZ043WLT4mwUcB5vI 1vbmDwlLQXxkLHwvL8bmjiM0wt3E4w+6IdspEfC0wsR4biyoG2vkUWuPGuuNnsNO 8gDyuNaSRUCNEEDiMR8WBwwd9WTvvlrlmHvOS1mBQy2SX/2270apRWN0WSYJ16ee qgtWpB7aPNJGMS2z6lE7VgZ0l2mlvqoTm7SkXH3RjZTisXQjqKZ7LojckDghdWz2 XaWLQMFb7S2ezaDoUE8NcXWXxyzC0LrFVoiOsK69bXT7IoBtamWO/ZjChdEo+9rd X906cyro9CMtPIcb5Czc5Rj0EstbDplVr9Xma42KTJcYVCp5GQ/aJ0ZKtoFctITp ZbWACwfu5xj6XbpkAYnQDkMsjhrrlsTX804oODcUPhDdV/L+rI17Yz2ofqMpk8Pl Xpuk/YWVjheB1fLpAGh1e5OtXBbBodrlSoLWwz9pvwkZYzUQHBUcbWD9IXlbKG92 2mmOQDnboWcGLiKxMjch4B7nVmspOn5FFwZN0PP0/mMdFZpNqyU= =UWmB -----END PGP SIGNATURE----- . ========================================================================== Ubuntu Security Notice USN-5260-1 February 01, 2022 samba vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 21.10 - Ubuntu 20.04 LTS Summary: Several security issues were fixed in Samba. Software Description: - samba: SMB/CIFS file, print, and login server for Unix Details: Orange Tsai discovered that the Samba vfs_fruit module incorrectly handled certain memory operations. (CVE-2021-44142) Michael Hanselmann discovered that Samba incorrectly created directories. In certain configurations, a remote attacker could possibly create a directory on the server outside of the shared directory. (CVE-2021-43566) Kees van Vloten discovered that Samba incorrectly handled certain aliased SPN checks. (CVE-2022-0336) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 21.10: samba 2:4.13.17~dfsg-0ubuntu0.21.10.1 Ubuntu 20.04 LTS: samba 2:4.13.17~dfsg-0ubuntu0.21.04.1 This update uses a new upstream release, which includes additional bug fixes. In general, a standard system update will make all the necessary changes. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Critical: samba security and bug fix update Advisory ID: RHSA-2022:0328-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2022:0328 Issue date: 2022-01-31 CVE Names: CVE-2021-44142 ==================================================================== 1. Summary: An update for samba is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - noarch, x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - noarch, x86_64 Red Hat Enterprise Linux ComputeNode (v. 7) - noarch, x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - noarch, x86_64 Red Hat Enterprise Linux Server (v. 7) - noarch, ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - noarch, ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Resilient Storage (v. 7) - ppc64le, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - noarch, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - noarch, x86_64 3. Description: Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fix(es): * samba: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution (CVE-2021-44142) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Fix CVE-2020-25717 username map [script] advice (BZ#2034800) * Fix Kerberos authentication on standalone server with MIT realm (BZ#2036595) 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the smb service will be restarted automatically. 5. Package List: Red Hat Enterprise Linux Client (v. 7): Source: samba-4.10.16-18.el7_9.src.rpm noarch: samba-common-4.10.16-18.el7_9.noarch.rpm x86_64: libsmbclient-4.10.16-18.el7_9.i686.rpm libsmbclient-4.10.16-18.el7_9.x86_64.rpm libwbclient-4.10.16-18.el7_9.i686.rpm libwbclient-4.10.16-18.el7_9.x86_64.rpm samba-client-4.10.16-18.el7_9.x86_64.rpm samba-client-libs-4.10.16-18.el7_9.i686.rpm samba-client-libs-4.10.16-18.el7_9.x86_64.rpm samba-common-libs-4.10.16-18.el7_9.i686.rpm samba-common-libs-4.10.16-18.el7_9.x86_64.rpm samba-common-tools-4.10.16-18.el7_9.x86_64.rpm samba-debuginfo-4.10.16-18.el7_9.i686.rpm samba-debuginfo-4.10.16-18.el7_9.x86_64.rpm samba-krb5-printing-4.10.16-18.el7_9.x86_64.rpm samba-libs-4.10.16-18.el7_9.i686.rpm samba-libs-4.10.16-18.el7_9.x86_64.rpm samba-winbind-4.10.16-18.el7_9.x86_64.rpm samba-winbind-clients-4.10.16-18.el7_9.x86_64.rpm samba-winbind-modules-4.10.16-18.el7_9.i686.rpm samba-winbind-modules-4.10.16-18.el7_9.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): noarch: samba-pidl-4.10.16-18.el7_9.noarch.rpm x86_64: libsmbclient-devel-4.10.16-18.el7_9.i686.rpm libsmbclient-devel-4.10.16-18.el7_9.x86_64.rpm libwbclient-devel-4.10.16-18.el7_9.i686.rpm libwbclient-devel-4.10.16-18.el7_9.x86_64.rpm samba-4.10.16-18.el7_9.x86_64.rpm samba-dc-4.10.16-18.el7_9.x86_64.rpm samba-dc-libs-4.10.16-18.el7_9.x86_64.rpm samba-debuginfo-4.10.16-18.el7_9.i686.rpm samba-debuginfo-4.10.16-18.el7_9.x86_64.rpm samba-devel-4.10.16-18.el7_9.i686.rpm samba-devel-4.10.16-18.el7_9.x86_64.rpm samba-python-4.10.16-18.el7_9.i686.rpm samba-python-4.10.16-18.el7_9.x86_64.rpm samba-python-test-4.10.16-18.el7_9.x86_64.rpm samba-test-4.10.16-18.el7_9.x86_64.rpm samba-test-libs-4.10.16-18.el7_9.i686.rpm samba-test-libs-4.10.16-18.el7_9.x86_64.rpm samba-vfs-glusterfs-4.10.16-18.el7_9.x86_64.rpm samba-winbind-krb5-locator-4.10.16-18.el7_9.x86_64.rpm Red Hat Enterprise Linux ComputeNode (v. 7): Source: samba-4.10.16-18.el7_9.src.rpm noarch: samba-common-4.10.16-18.el7_9.noarch.rpm x86_64: libsmbclient-4.10.16-18.el7_9.i686.rpm libsmbclient-4.10.16-18.el7_9.x86_64.rpm libwbclient-4.10.16-18.el7_9.i686.rpm libwbclient-4.10.16-18.el7_9.x86_64.rpm samba-client-4.10.16-18.el7_9.x86_64.rpm samba-client-libs-4.10.16-18.el7_9.i686.rpm samba-client-libs-4.10.16-18.el7_9.x86_64.rpm samba-common-libs-4.10.16-18.el7_9.i686.rpm samba-common-libs-4.10.16-18.el7_9.x86_64.rpm samba-common-tools-4.10.16-18.el7_9.x86_64.rpm samba-debuginfo-4.10.16-18.el7_9.i686.rpm samba-debuginfo-4.10.16-18.el7_9.x86_64.rpm samba-libs-4.10.16-18.el7_9.i686.rpm samba-libs-4.10.16-18.el7_9.x86_64.rpm samba-winbind-4.10.16-18.el7_9.x86_64.rpm samba-winbind-clients-4.10.16-18.el7_9.x86_64.rpm samba-winbind-modules-4.10.16-18.el7_9.i686.rpm samba-winbind-modules-4.10.16-18.el7_9.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional (v. 7): noarch: samba-pidl-4.10.16-18.el7_9.noarch.rpm x86_64: libsmbclient-devel-4.10.16-18.el7_9.i686.rpm libsmbclient-devel-4.10.16-18.el7_9.x86_64.rpm libwbclient-devel-4.10.16-18.el7_9.i686.rpm libwbclient-devel-4.10.16-18.el7_9.x86_64.rpm samba-4.10.16-18.el7_9.x86_64.rpm samba-dc-4.10.16-18.el7_9.x86_64.rpm samba-dc-libs-4.10.16-18.el7_9.x86_64.rpm samba-debuginfo-4.10.16-18.el7_9.i686.rpm samba-debuginfo-4.10.16-18.el7_9.x86_64.rpm samba-devel-4.10.16-18.el7_9.i686.rpm samba-devel-4.10.16-18.el7_9.x86_64.rpm samba-krb5-printing-4.10.16-18.el7_9.x86_64.rpm samba-python-4.10.16-18.el7_9.i686.rpm samba-python-4.10.16-18.el7_9.x86_64.rpm samba-python-test-4.10.16-18.el7_9.x86_64.rpm samba-test-4.10.16-18.el7_9.x86_64.rpm samba-test-libs-4.10.16-18.el7_9.i686.rpm samba-test-libs-4.10.16-18.el7_9.x86_64.rpm samba-vfs-glusterfs-4.10.16-18.el7_9.x86_64.rpm samba-winbind-krb5-locator-4.10.16-18.el7_9.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: samba-4.10.16-18.el7_9.src.rpm noarch: samba-common-4.10.16-18.el7_9.noarch.rpm ppc64: libsmbclient-4.10.16-18.el7_9.ppc.rpm libsmbclient-4.10.16-18.el7_9.ppc64.rpm libwbclient-4.10.16-18.el7_9.ppc.rpm libwbclient-4.10.16-18.el7_9.ppc64.rpm samba-4.10.16-18.el7_9.ppc64.rpm samba-client-4.10.16-18.el7_9.ppc64.rpm samba-client-libs-4.10.16-18.el7_9.ppc.rpm samba-client-libs-4.10.16-18.el7_9.ppc64.rpm samba-common-libs-4.10.16-18.el7_9.ppc.rpm samba-common-libs-4.10.16-18.el7_9.ppc64.rpm samba-common-tools-4.10.16-18.el7_9.ppc64.rpm samba-debuginfo-4.10.16-18.el7_9.ppc.rpm samba-debuginfo-4.10.16-18.el7_9.ppc64.rpm samba-krb5-printing-4.10.16-18.el7_9.ppc64.rpm samba-libs-4.10.16-18.el7_9.ppc.rpm samba-libs-4.10.16-18.el7_9.ppc64.rpm samba-winbind-4.10.16-18.el7_9.ppc64.rpm samba-winbind-clients-4.10.16-18.el7_9.ppc64.rpm samba-winbind-modules-4.10.16-18.el7_9.ppc.rpm samba-winbind-modules-4.10.16-18.el7_9.ppc64.rpm ppc64le: libsmbclient-4.10.16-18.el7_9.ppc64le.rpm libwbclient-4.10.16-18.el7_9.ppc64le.rpm samba-4.10.16-18.el7_9.ppc64le.rpm samba-client-4.10.16-18.el7_9.ppc64le.rpm samba-client-libs-4.10.16-18.el7_9.ppc64le.rpm samba-common-libs-4.10.16-18.el7_9.ppc64le.rpm samba-common-tools-4.10.16-18.el7_9.ppc64le.rpm samba-debuginfo-4.10.16-18.el7_9.ppc64le.rpm samba-krb5-printing-4.10.16-18.el7_9.ppc64le.rpm samba-libs-4.10.16-18.el7_9.ppc64le.rpm samba-winbind-4.10.16-18.el7_9.ppc64le.rpm samba-winbind-clients-4.10.16-18.el7_9.ppc64le.rpm samba-winbind-modules-4.10.16-18.el7_9.ppc64le.rpm s390x: libsmbclient-4.10.16-18.el7_9.s390.rpm libsmbclient-4.10.16-18.el7_9.s390x.rpm libwbclient-4.10.16-18.el7_9.s390.rpm libwbclient-4.10.16-18.el7_9.s390x.rpm samba-4.10.16-18.el7_9.s390x.rpm samba-client-4.10.16-18.el7_9.s390x.rpm samba-client-libs-4.10.16-18.el7_9.s390.rpm samba-client-libs-4.10.16-18.el7_9.s390x.rpm samba-common-libs-4.10.16-18.el7_9.s390.rpm samba-common-libs-4.10.16-18.el7_9.s390x.rpm samba-common-tools-4.10.16-18.el7_9.s390x.rpm samba-debuginfo-4.10.16-18.el7_9.s390.rpm samba-debuginfo-4.10.16-18.el7_9.s390x.rpm samba-krb5-printing-4.10.16-18.el7_9.s390x.rpm samba-libs-4.10.16-18.el7_9.s390.rpm samba-libs-4.10.16-18.el7_9.s390x.rpm samba-winbind-4.10.16-18.el7_9.s390x.rpm samba-winbind-clients-4.10.16-18.el7_9.s390x.rpm samba-winbind-modules-4.10.16-18.el7_9.s390.rpm samba-winbind-modules-4.10.16-18.el7_9.s390x.rpm x86_64: libsmbclient-4.10.16-18.el7_9.i686.rpm libsmbclient-4.10.16-18.el7_9.x86_64.rpm libwbclient-4.10.16-18.el7_9.i686.rpm libwbclient-4.10.16-18.el7_9.x86_64.rpm samba-4.10.16-18.el7_9.x86_64.rpm samba-client-4.10.16-18.el7_9.x86_64.rpm samba-client-libs-4.10.16-18.el7_9.i686.rpm samba-client-libs-4.10.16-18.el7_9.x86_64.rpm samba-common-libs-4.10.16-18.el7_9.i686.rpm samba-common-libs-4.10.16-18.el7_9.x86_64.rpm samba-common-tools-4.10.16-18.el7_9.x86_64.rpm samba-debuginfo-4.10.16-18.el7_9.i686.rpm samba-debuginfo-4.10.16-18.el7_9.x86_64.rpm samba-krb5-printing-4.10.16-18.el7_9.x86_64.rpm samba-libs-4.10.16-18.el7_9.i686.rpm samba-libs-4.10.16-18.el7_9.x86_64.rpm samba-python-4.10.16-18.el7_9.i686.rpm samba-python-4.10.16-18.el7_9.x86_64.rpm samba-winbind-4.10.16-18.el7_9.x86_64.rpm samba-winbind-clients-4.10.16-18.el7_9.x86_64.rpm samba-winbind-modules-4.10.16-18.el7_9.i686.rpm samba-winbind-modules-4.10.16-18.el7_9.x86_64.rpm Red Hat Enterprise Linux Server Resilient Storage (v. 7): ppc64le: ctdb-4.10.16-18.el7_9.ppc64le.rpm ctdb-tests-4.10.16-18.el7_9.ppc64le.rpm samba-debuginfo-4.10.16-18.el7_9.ppc64le.rpm s390x: ctdb-4.10.16-18.el7_9.s390x.rpm ctdb-tests-4.10.16-18.el7_9.s390x.rpm samba-debuginfo-4.10.16-18.el7_9.s390x.rpm x86_64: ctdb-4.10.16-18.el7_9.x86_64.rpm ctdb-tests-4.10.16-18.el7_9.x86_64.rpm samba-debuginfo-4.10.16-18.el7_9.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 7): noarch: samba-pidl-4.10.16-18.el7_9.noarch.rpm ppc64: libsmbclient-devel-4.10.16-18.el7_9.ppc.rpm libsmbclient-devel-4.10.16-18.el7_9.ppc64.rpm libwbclient-devel-4.10.16-18.el7_9.ppc.rpm libwbclient-devel-4.10.16-18.el7_9.ppc64.rpm samba-dc-4.10.16-18.el7_9.ppc64.rpm samba-dc-libs-4.10.16-18.el7_9.ppc64.rpm samba-debuginfo-4.10.16-18.el7_9.ppc.rpm samba-debuginfo-4.10.16-18.el7_9.ppc64.rpm samba-devel-4.10.16-18.el7_9.ppc.rpm samba-devel-4.10.16-18.el7_9.ppc64.rpm samba-python-4.10.16-18.el7_9.ppc.rpm samba-python-4.10.16-18.el7_9.ppc64.rpm samba-python-test-4.10.16-18.el7_9.ppc64.rpm samba-test-4.10.16-18.el7_9.ppc64.rpm samba-test-libs-4.10.16-18.el7_9.ppc.rpm samba-test-libs-4.10.16-18.el7_9.ppc64.rpm samba-winbind-krb5-locator-4.10.16-18.el7_9.ppc64.rpm ppc64le: libsmbclient-devel-4.10.16-18.el7_9.ppc64le.rpm libwbclient-devel-4.10.16-18.el7_9.ppc64le.rpm samba-dc-4.10.16-18.el7_9.ppc64le.rpm samba-dc-libs-4.10.16-18.el7_9.ppc64le.rpm samba-debuginfo-4.10.16-18.el7_9.ppc64le.rpm samba-devel-4.10.16-18.el7_9.ppc64le.rpm samba-python-4.10.16-18.el7_9.ppc64le.rpm samba-python-test-4.10.16-18.el7_9.ppc64le.rpm samba-test-4.10.16-18.el7_9.ppc64le.rpm samba-test-libs-4.10.16-18.el7_9.ppc64le.rpm samba-winbind-krb5-locator-4.10.16-18.el7_9.ppc64le.rpm s390x: libsmbclient-devel-4.10.16-18.el7_9.s390.rpm libsmbclient-devel-4.10.16-18.el7_9.s390x.rpm libwbclient-devel-4.10.16-18.el7_9.s390.rpm libwbclient-devel-4.10.16-18.el7_9.s390x.rpm samba-dc-4.10.16-18.el7_9.s390x.rpm samba-dc-libs-4.10.16-18.el7_9.s390x.rpm samba-debuginfo-4.10.16-18.el7_9.s390.rpm samba-debuginfo-4.10.16-18.el7_9.s390x.rpm samba-devel-4.10.16-18.el7_9.s390.rpm samba-devel-4.10.16-18.el7_9.s390x.rpm samba-python-4.10.16-18.el7_9.s390.rpm samba-python-4.10.16-18.el7_9.s390x.rpm samba-python-test-4.10.16-18.el7_9.s390x.rpm samba-test-4.10.16-18.el7_9.s390x.rpm samba-test-libs-4.10.16-18.el7_9.s390.rpm samba-test-libs-4.10.16-18.el7_9.s390x.rpm samba-winbind-krb5-locator-4.10.16-18.el7_9.s390x.rpm x86_64: libsmbclient-devel-4.10.16-18.el7_9.i686.rpm libsmbclient-devel-4.10.16-18.el7_9.x86_64.rpm libwbclient-devel-4.10.16-18.el7_9.i686.rpm libwbclient-devel-4.10.16-18.el7_9.x86_64.rpm samba-dc-4.10.16-18.el7_9.x86_64.rpm samba-dc-libs-4.10.16-18.el7_9.x86_64.rpm samba-debuginfo-4.10.16-18.el7_9.i686.rpm samba-debuginfo-4.10.16-18.el7_9.x86_64.rpm samba-devel-4.10.16-18.el7_9.i686.rpm samba-devel-4.10.16-18.el7_9.x86_64.rpm samba-python-test-4.10.16-18.el7_9.x86_64.rpm samba-test-4.10.16-18.el7_9.x86_64.rpm samba-test-libs-4.10.16-18.el7_9.i686.rpm samba-test-libs-4.10.16-18.el7_9.x86_64.rpm samba-vfs-glusterfs-4.10.16-18.el7_9.x86_64.rpm samba-winbind-krb5-locator-4.10.16-18.el7_9.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: samba-4.10.16-18.el7_9.src.rpm noarch: samba-common-4.10.16-18.el7_9.noarch.rpm x86_64: libsmbclient-4.10.16-18.el7_9.i686.rpm libsmbclient-4.10.16-18.el7_9.x86_64.rpm libwbclient-4.10.16-18.el7_9.i686.rpm libwbclient-4.10.16-18.el7_9.x86_64.rpm samba-4.10.16-18.el7_9.x86_64.rpm samba-client-4.10.16-18.el7_9.x86_64.rpm samba-client-libs-4.10.16-18.el7_9.i686.rpm samba-client-libs-4.10.16-18.el7_9.x86_64.rpm samba-common-libs-4.10.16-18.el7_9.i686.rpm samba-common-libs-4.10.16-18.el7_9.x86_64.rpm samba-common-tools-4.10.16-18.el7_9.x86_64.rpm samba-debuginfo-4.10.16-18.el7_9.i686.rpm samba-debuginfo-4.10.16-18.el7_9.x86_64.rpm samba-krb5-printing-4.10.16-18.el7_9.x86_64.rpm samba-libs-4.10.16-18.el7_9.i686.rpm samba-libs-4.10.16-18.el7_9.x86_64.rpm samba-python-4.10.16-18.el7_9.i686.rpm samba-python-4.10.16-18.el7_9.x86_64.rpm samba-winbind-4.10.16-18.el7_9.x86_64.rpm samba-winbind-clients-4.10.16-18.el7_9.x86_64.rpm samba-winbind-modules-4.10.16-18.el7_9.i686.rpm samba-winbind-modules-4.10.16-18.el7_9.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 7): noarch: samba-pidl-4.10.16-18.el7_9.noarch.rpm x86_64: libsmbclient-devel-4.10.16-18.el7_9.i686.rpm libsmbclient-devel-4.10.16-18.el7_9.x86_64.rpm libwbclient-devel-4.10.16-18.el7_9.i686.rpm libwbclient-devel-4.10.16-18.el7_9.x86_64.rpm samba-dc-4.10.16-18.el7_9.x86_64.rpm samba-dc-libs-4.10.16-18.el7_9.x86_64.rpm samba-debuginfo-4.10.16-18.el7_9.i686.rpm samba-debuginfo-4.10.16-18.el7_9.x86_64.rpm samba-devel-4.10.16-18.el7_9.i686.rpm samba-devel-4.10.16-18.el7_9.x86_64.rpm samba-python-test-4.10.16-18.el7_9.x86_64.rpm samba-test-4.10.16-18.el7_9.x86_64.rpm samba-test-libs-4.10.16-18.el7_9.i686.rpm samba-test-libs-4.10.16-18.el7_9.x86_64.rpm samba-vfs-glusterfs-4.10.16-18.el7_9.x86_64.rpm samba-winbind-krb5-locator-4.10.16-18.el7_9.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2021-44142 https://access.redhat.com/security/updates/classification/#critical 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYfg3utzjgjWX9erEAQiW5A/9FfMdoVM57m1MQWjHSyxSKaaQzRG4nASl XluNgbIP6XShKejIacSixa+57y/+xm7ZtQwJvURtwj3JKut6gCnyMqohQ72Pn4YU Wxq0DjNBf33FT0hN7GprY4a2/wOwsC+m1jVhvawZ11IQnRUbDi1pIJFellXUpPVW SUE2sPTqWbePWxPaQmWxXrcrw0f5XLqqHiCV+ME6nF6TVd/LFMvF1b118XEzNmma 7iBvSiORi+3NJTp+vYGgy6tA7ikpeFvLAPpkzUB/XTbF9TMWcKil1L9ceYadt9cR XiNY3Y/n6GdKZt04nwtbpXlS4kq/y5vIVycRT3ZKBAciVbTdJ9a9pTsocdyvrIQq /feWDP1ATyO4NUUUbAbZXgB9RohhFVOs4eCmLTy5XLBWnw2d744/hXwcpyY9F/Rq gPxzyXXAFthavOgezzVEK3T8un3R75UlJZh4R4D5iDzXdQRIK9cT5HrUs3Xz5aTD GyETh0QfGPJlCRTs3saG0+oB197Rtk872NrSeLsiT5XuKUzADuJow759pmIaeZbg EgoDOiKfSp15EvEcbLyx+LYDOPgB2QAZhvKbN52qfxTPzMczmPAE0vStTa5EJlYD G3KQ/ZOObJA1m9/Q9vFv6yAhUAOu8N/n8Vg5nAdOrhCkI5+Pge0N6drabsQQXkzA iv62kDMkb+Q=NKmo -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://listman.redhat.com/mailman/listinfo/rhsa-announce

Trust: 4.23

sources: NVD: CVE-2021-44142 // JVNDB: JVNDB-2022-001296 // ZDI: ZDI-22-246 // ZDI: ZDI-22-245 // ZDI: ZDI-22-244 // VULHUB: VHN-406753 // VULMON: CVE-2021-44142 // PACKETSTORM: 169234 // PACKETSTORM: 166137 // PACKETSTORM: 165797 // PACKETSTORM: 165796 // PACKETSTORM: 165793 // PACKETSTORM: 165790

AFFECTED PRODUCTS

vendor:	samba	model:	samba	scope:	-	version:	-	Trust: 2.1
vendor:	redhat	model:	enterprise linux for ibm z systems eus	scope:	eq	version:	8.2	Trust: 1.0
vendor:	fedoraproject	model:	fedora	scope:	eq	version:	34	Trust: 1.0
vendor:	synology	model:	diskstation manager	scope:	gte	version:	6.2	Trust: 1.0
vendor:	canonical	model:	ubuntu linux	scope:	eq	version:	14.04	Trust: 1.0
vendor:	redhat	model:	enterprise linux server aus	scope:	eq	version:	8.2	Trust: 1.0
vendor:	redhat	model:	enterprise linux workstation	scope:	eq	version:	7.0	Trust: 1.0
vendor:	canonical	model:	ubuntu linux	scope:	eq	version:	21.10	Trust: 1.0
vendor:	fedoraproject	model:	fedora	scope:	eq	version:	35	Trust: 1.0
vendor:	redhat	model:	enterprise linux for power big endian	scope:	eq	version:	7.0	Trust: 1.0
vendor:	redhat	model:	enterprise linux server update services for sap solutions	scope:	eq	version:	8.2	Trust: 1.0
vendor:	debian	model:	linux	scope:	eq	version:	11.0	Trust: 1.0
vendor:	debian	model:	linux	scope:	eq	version:	10.0	Trust: 1.0
vendor:	canonical	model:	ubuntu linux	scope:	eq	version:	20.04	Trust: 1.0
vendor:	redhat	model:	enterprise linux for power little endian eus	scope:	eq	version:	8.2	Trust: 1.0
vendor:	redhat	model:	enterprise linux for power little endian	scope:	eq	version:	7.0	Trust: 1.0
vendor:	redhat	model:	enterprise linux for ibm z systems eus	scope:	eq	version:	8.4	Trust: 1.0
vendor:	redhat	model:	enterprise linux for scientific computing	scope:	eq	version:	7.0	Trust: 1.0
vendor:	redhat	model:	enterprise linux server tus	scope:	eq	version:	8.2	Trust: 1.0
vendor:	redhat	model:	enterprise linux resilient storage	scope:	eq	version:	7.0	Trust: 1.0
vendor:	redhat	model:	enterprise linux	scope:	eq	version:	7.0	Trust: 1.0
vendor:	synology	model:	diskstation manager	scope:	lt	version:	6.2.4-25556.4	Trust: 1.0
vendor:	redhat	model:	enterprise linux server aus	scope:	eq	version:	8.4	Trust: 1.0
vendor:	redhat	model:	enterprise linux for power little endian	scope:	eq	version:	8.0	Trust: 1.0
vendor:	redhat	model:	codeready linux builder	scope:	eq	version:	-	Trust: 1.0
vendor:	samba	model:	samba	scope:	lt	version:	4.15.5	Trust: 1.0
vendor:	samba	model:	samba	scope:	lt	version:	4.13.17	Trust: 1.0
vendor:	redhat	model:	enterprise linux eus	scope:	eq	version:	8.2	Trust: 1.0
vendor:	redhat	model:	enterprise linux server update services for sap solutions	scope:	eq	version:	8.4	Trust: 1.0
vendor:	redhat	model:	enterprise linux	scope:	eq	version:	8.0	Trust: 1.0
vendor:	redhat	model:	gluster storage	scope:	eq	version:	3.5	Trust: 1.0
vendor:	redhat	model:	enterprise linux for power little endian eus	scope:	eq	version:	8.4	Trust: 1.0
vendor:	canonical	model:	ubuntu linux	scope:	eq	version:	18.04	Trust: 1.0
vendor:	samba	model:	samba	scope:	gte	version:	4.14.0	Trust: 1.0
vendor:	redhat	model:	enterprise linux server update services for sap solutions	scope:	eq	version:	8.1	Trust: 1.0
vendor:	redhat	model:	enterprise linux for ibm z systems	scope:	eq	version:	7.0	Trust: 1.0
vendor:	samba	model:	samba	scope:	lt	version:	4.14.12	Trust: 1.0
vendor:	redhat	model:	enterprise linux desktop	scope:	eq	version:	7.0	Trust: 1.0
vendor:	redhat	model:	enterprise linux server	scope:	eq	version:	8.1	Trust: 1.0
vendor:	redhat	model:	enterprise linux server	scope:	eq	version:	7.0	Trust: 1.0
vendor:	samba	model:	samba	scope:	gte	version:	4.15.0	Trust: 1.0
vendor:	redhat	model:	enterprise linux server tus	scope:	eq	version:	8.4	Trust: 1.0
vendor:	redhat	model:	enterprise linux for ibm z systems	scope:	eq	version:	8.0	Trust: 1.0
vendor:	redhat	model:	virtualization host	scope:	eq	version:	4.0	Trust: 1.0
vendor:	canonical	model:	ubuntu linux	scope:	eq	version:	16.04	Trust: 1.0
vendor:	redhat	model:	enterprise linux eus	scope:	eq	version:	8.4	Trust: 1.0
vendor:	samba	model:	samba	scope:	lt	version:	4.13.17 earlier s	Trust: 0.8
vendor:	samba	model:	samba	scope:	eq	version:	-	Trust: 0.8

sources: ZDI: ZDI-22-246 // ZDI: ZDI-22-245 // ZDI: ZDI-22-244 // JVNDB: JVNDB-2022-001296 // NVD: CVE-2021-44142

CVSS

SEVERITY

CVSSV2

CVSSV3

ZDI:	CVE-2021-44142
value:	CRITICAL
Trust: 1.4
nvd@nist.gov:	CVE-2021-44142
value:	HIGH
Trust: 1.0
134c704f-9b21-4f2e-91b3-4a467353bcc0:	CVE-2021-44142
value:	HIGH
Trust: 1.0
OTHER:	JVNDB-2022-001296
value:	CRITICAL
Trust: 0.8
ZDI:	CVE-2021-44142
value:	MEDIUM
Trust: 0.7
CNNVD:	CNNVD-202201-2719
value:	HIGH
Trust: 0.6
VULHUB:	VHN-406753
value:	HIGH
Trust: 0.1
VULMON:	CVE-2021-44142
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2021-44142
severity:	HIGH
baseScore:	9.0
vectorString:	AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.1
VULHUB:	VHN-406753
severity:	HIGH
baseScore:	9.0
vectorString:	AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2021-44142
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	5.9
version:	3.1
Trust: 2.0
ZDI:	CVE-2021-44142
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	5.9
version:	3.0
Trust: 1.4
OTHER:	JVNDB-2022-001296
baseSeverity:	CRITICAL
baseScore:	9.9
vectorString:	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	CHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8
ZDI:	CVE-2021-44142
baseSeverity:	MEDIUM
baseScore:	5.3
vectorString:	AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	1.4
version:	3.0
Trust: 0.7

sources: ZDI: ZDI-22-246 // ZDI: ZDI-22-245 // ZDI: ZDI-22-244 // VULHUB: VHN-406753 // VULMON: CVE-2021-44142 // JVNDB: JVNDB-2022-001296 // CNNVD: CNNVD-202201-2719 // NVD: CVE-2021-44142 // NVD: CVE-2021-44142

PROBLEMTYPE DATA

problemtype:	CWE-125	Trust: 1.1
problemtype:	CWE-787	Trust: 1.1

sources: VULHUB: VHN-406753 // NVD: CVE-2021-44142

THREAT TYPE

remote

Trust: 0.8

sources: PACKETSTORM: 165797 // PACKETSTORM: 165796 // CNNVD: CNNVD-202201-2719

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202201-2719

EXPLOIT AVAILABILITY

sources: VULHUB: VHN-406753

PATCH

title:	Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution The Samba-Bugzilla	url:	https://www.samba.org/samba/security/CVE-2021-44142.html	Trust: 2.9
title:	Samba Buffer error vulnerability fix	url:	http://123.124.177.30/web/xxk/bdxqById.tag?id=184448	Trust: 0.6
title:	Red Hat: Critical: samba security and bug fix update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20220332 - Security Advisory	Trust: 0.1
title:	Ubuntu Security Notice: USN-5260-2: Samba vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-5260-2	Trust: 0.1
title:	Red Hat: Critical: samba security and bug fix update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20220331 - Security Advisory	Trust: 0.1
title:	Ubuntu Security Notice: USN-5260-3: Samba vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-5260-3	Trust: 0.1
title:	Red Hat: Critical: samba security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20220457 - Security Advisory	Trust: 0.1
title:	Red Hat: Critical: samba security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20220329 - Security Advisory	Trust: 0.1
title:	Red Hat: Critical: samba security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20220664 - Security Advisory	Trust: 0.1
title:	Red Hat: Critical: samba security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20220458 - Security Advisory	Trust: 0.1
title:	Red Hat: Critical: samba security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20220663 - Security Advisory	Trust: 0.1
title:	Red Hat: Critical: samba security and bug fix update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20220328 - Security Advisory	Trust: 0.1
title:	Red Hat: Critical: samba security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20220330 - Security Advisory	Trust: 0.1
title:	Debian CVElist Bug Report Logs: samba: CVE-2021-44142	url:	https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs&qid=a2808bd91ead4fb4ad90e6c138690723	Trust: 0.1
title:	Ubuntu Security Notice: USN-5260-1: Samba vulnerabilities	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-5260-1	Trust: 0.1
title:	Debian Security Advisories: DSA-5071-1 samba -- security update	url:	https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories&qid=966a313ce95b33748fba988c48abb6d6	Trust: 0.1
title:	Amazon Linux 2: ALAS2-2022-1746	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux2&qid=ALAS2-2022-1746	Trust: 0.1
title:	Arch Linux Issues:	url:	https://vulmon.com/vendoradvisory?qidtp=arch_linux_issues&qid=CVE-2021-44142	Trust: 0.1
title:	Amazon Linux AMI: ALAS-2022-1564	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami&qid=ALAS-2022-1564	Trust: 0.1
title:	Amazon Linux 2022: ALAS-2022-224	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux2022&qid=ALAS-2022-224	Trust: 0.1
title:	Amazon Linux 2022: ALAS2022-2022-022	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux2022&qid=ALAS2022-2022-022	Trust: 0.1
title:	CVE-2021-44142 Vulnerability Checker	url:	https://github.com/horizon3ai/CVE-2021-44142	Trust: 0.1
title:	CVE-2021-44142 Vulnerability Checker	url:	https://github.com/hrsman/Samba-CVE-2021-44142	Trust: 0.1
title:	CVE-2021-44142 Storytale	url:	https://github.com/gudyrmik/CVE-2021-44142	Trust: 0.1
title:	CVE-2020-0609 CVE-2020-0796 CVE-2021-44142 CVE-2022-41040 CVE-2022-47966 Scanner	url:	https://github.com/stalker3343/diplom	Trust: 0.1
title:	Repository with scripts to verify system against CVE	url:	https://github.com/backloop-biz/Vulnerability_checker	Trust: 0.1
title:	Repository with scripts to verify system against CVE	url:	https://github.com/backloop-biz/CVE_checks	Trust: 0.1
title:	Threatpost	url:	https://threatpost.com/samba-fruit-bug-rce-root-access/178141/	Trust: 0.1
title:	The Register	url:	https://www.theregister.co.uk/2022/02/02/samba_vfs_fruit_vulnerability/	Trust: 0.1

sources: ZDI: ZDI-22-246 // ZDI: ZDI-22-245 // ZDI: ZDI-22-244 // VULMON: CVE-2021-44142 // JVNDB: JVNDB-2022-001296 // CNNVD: CNNVD-202201-2719

EXTERNAL IDS

db:	NVD	id:	CVE-2021-44142	Trust: 5.4
db:	CERT/CC	id:	VU#119678	Trust: 2.6
db:	ZDI	id:	ZDI-22-246	Trust: 1.3
db:	ZDI	id:	ZDI-22-244	Trust: 0.8
db:	PACKETSTORM	id:	166137	Trust: 0.8
db:	JVN	id:	JVNVU92602689	Trust: 0.8
db:	JVNDB	id:	JVNDB-2022-001296	Trust: 0.8
db:	ZDI_CAN	id:	ZDI-CAN-15846	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-15833	Trust: 0.7
db:	ZDI	id:	ZDI-22-245	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-16156	Trust: 0.7
db:	PACKETSTORM	id:	165906	Trust: 0.7
db:	PACKETSTORM	id:	165842	Trust: 0.7
db:	PACKETSTORM	id:	169234	Trust: 0.7
db:	CS-HELP	id:	SB2022032506	Trust: 0.6
db:	CS-HELP	id:	SB2022021713	Trust: 0.6
db:	CS-HELP	id:	SB2022041954	Trust: 0.6
db:	CS-HELP	id:	SB2022021902	Trust: 0.6
db:	CS-HELP	id:	SB2022021417	Trust: 0.6
db:	CS-HELP	id:	SB2022051734	Trust: 0.6
db:	CS-HELP	id:	SB2022020807	Trust: 0.6
db:	CS-HELP	id:	SB2022022408	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.0489	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.0795	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.0600	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.0619	Trust: 0.6
db:	CNNVD	id:	CNNVD-202201-2719	Trust: 0.6
db:	PACKETSTORM	id:	165793	Trust: 0.2
db:	PACKETSTORM	id:	165791	Trust: 0.2
db:	PACKETSTORM	id:	165796	Trust: 0.2
db:	PACKETSTORM	id:	165797	Trust: 0.2
db:	PACKETSTORM	id:	165790	Trust: 0.2
db:	PACKETSTORM	id:	166138	Trust: 0.1
db:	PACKETSTORM	id:	165789	Trust: 0.1
db:	PACKETSTORM	id:	165788	Trust: 0.1
db:	PACKETSTORM	id:	165905	Trust: 0.1
db:	PACKETSTORM	id:	165801	Trust: 0.1
db:	VULHUB	id:	VHN-406753	Trust: 0.1
db:	VULMON	id:	CVE-2021-44142	Trust: 0.1

sources: ZDI: ZDI-22-246 // ZDI: ZDI-22-245 // ZDI: ZDI-22-244 // VULHUB: VHN-406753 // VULMON: CVE-2021-44142 // PACKETSTORM: 169234 // PACKETSTORM: 166137 // PACKETSTORM: 165797 // PACKETSTORM: 165796 // PACKETSTORM: 165793 // PACKETSTORM: 165791 // PACKETSTORM: 165790 // JVNDB: JVNDB-2022-001296 // CNNVD: CNNVD-202201-2719 // NVD: CVE-2021-44142

REFERENCES

url:	https://www.samba.org/samba/security/cve-2021-44142.html	Trust: 4.0
url:	https://kb.cert.org/vuls/id/119678	Trust: 2.6
url:	https://bugzilla.samba.org/show_bug.cgi?id=14914	Trust: 1.8
url:	https://www.zerodayinitiative.com/blog/2022/2/1/cve-2021-44142-details-on-a-samba-code-execution-bug-demonstrated-at-pwn2own-austin	Trust: 1.8
url:	https://security.gentoo.org/glsa/202309-06	Trust: 1.1
url:	https://access.redhat.com/security/cve/cve-2021-44142	Trust: 1.0
url:	https://www.kb.cert.org/vuls/id/119678	Trust: 1.0
url:	https://jvn.jp/vu/jvnvu92602689/	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2021-44142	Trust: 0.7
url:	https://www.cybersecurity-help.cz/vdb/sb2022051734	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.0795	Trust: 0.6
url:	https://vigilance.fr/vulnerability/samba-buffer-overflow-via-vfs-module-vfs-fruit-37416	Trust: 0.6
url:	https://www.zerodayinitiative.com/advisories/zdi-22-246/	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022032506	Trust: 0.6
url:	https://packetstormsecurity.com/files/169234/debian-security-advisory-5071-1.html	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022021713	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022021417	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022041954	Trust: 0.6
url:	https://packetstormsecurity.com/files/165842/ubuntu-security-notice-usn-5260-3.html	Trust: 0.6
url:	https://packetstormsecurity.com/files/165906/red-hat-security-advisory-2022-0457-03.html	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022020807	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.0619	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022021902	Trust: 0.6
url:	https://cxsecurity.com/cveshow/cve-2021-44142/	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022022408	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.0600	Trust: 0.6
url:	https://packetstormsecurity.com/files/166137/red-hat-security-advisory-2022-0664-01.html	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.0489	Trust: 0.6
url:	https://access.redhat.com/security/team/contact/	Trust: 0.4
url:	https://listman.redhat.com/mailman/listinfo/rhsa-announce	Trust: 0.4
url:	https://bugzilla.redhat.com/):	Trust: 0.4
url:	https://access.redhat.com/security/team/key/	Trust: 0.4
url:	https://access.redhat.com/security/updates/classification/#critical	Trust: 0.4
url:	https://access.redhat.com/articles/11258	Trust: 0.4
url:	https://ubuntu.com/security/notices/usn-5260-2	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0336	Trust: 0.2
url:	https://ubuntu.com/security/notices/usn-5260-1	Trust: 0.2
url:	https://cwe.mitre.org/data/definitions/125.html	Trust: 0.1
url:	https://cwe.mitre.org/data/definitions/787.html	Trust: 0.1
url:	https://github.com/horizon3ai/cve-2021-44142	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1
url:	https://www.zerodayinitiative.com/advisories/zdi-22-244/	Trust: 0.1
url:	https://www.debian.org/security/faq	Trust: 0.1
url:	https://www.debian.org/security/	Trust: 0.1
url:	https://security-tracker.debian.org/tracker/samba	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2022:0664	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-43566	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/samba/2:4.13.17~dfsg-0ubuntu0.21.04.1	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/samba/2:4.13.17~dfsg-0ubuntu0.21.10.1	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.28	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2022:0331	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2022:0330	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2022:0328	Trust: 0.1

CREDITS

Nguyen Hoang Thach (https://twitter.com/hi_im_d4rkn3ss) and Billy Jheng Bing-Jhong (https://twitter.com/st424204)

Trust: 2.0

sources: ZDI: ZDI-22-246 // ZDI: ZDI-22-245 // CNNVD: CNNVD-202201-2719

SOURCES

db:	ZDI	id:	ZDI-22-246
db:	ZDI	id:	ZDI-22-245
db:	ZDI	id:	ZDI-22-244
db:	VULHUB	id:	VHN-406753
db:	VULMON	id:	CVE-2021-44142
db:	PACKETSTORM	id:	169234
db:	PACKETSTORM	id:	166137
db:	PACKETSTORM	id:	165797
db:	PACKETSTORM	id:	165796
db:	PACKETSTORM	id:	165793
db:	PACKETSTORM	id:	165791
db:	PACKETSTORM	id:	165790
db:	JVNDB	id:	JVNDB-2022-001296
db:	CNNVD	id:	CNNVD-202201-2719
db:	NVD	id:	CVE-2021-44142

LAST UPDATE DATE

2025-08-11T21:35:07.211000+00:00

SOURCES UPDATE DATE

db:	ZDI	id:	ZDI-22-246	date:	2022-02-01T00:00:00
db:	ZDI	id:	ZDI-22-245	date:	2022-02-01T00:00:00
db:	ZDI	id:	ZDI-22-244	date:	2022-02-01T00:00:00
db:	VULHUB	id:	VHN-406753	date:	2022-02-23T00:00:00
db:	VULMON	id:	CVE-2021-44142	date:	2023-11-07T00:00:00
db:	JVNDB	id:	JVNDB-2022-001296	date:	2022-02-02T02:33:00
db:	CNNVD	id:	CNNVD-202201-2719	date:	2022-12-09T00:00:00
db:	NVD	id:	CVE-2021-44142	date:	2025-04-23T19:15:51.880

SOURCES RELEASE DATE

db:	ZDI	id:	ZDI-22-246	date:	2022-02-01T00:00:00
db:	ZDI	id:	ZDI-22-245	date:	2022-02-01T00:00:00
db:	ZDI	id:	ZDI-22-244	date:	2022-02-01T00:00:00
db:	VULHUB	id:	VHN-406753	date:	2022-02-21T00:00:00
db:	VULMON	id:	CVE-2021-44142	date:	2022-02-21T00:00:00
db:	PACKETSTORM	id:	169234	date:	2022-02-28T20:12:00
db:	PACKETSTORM	id:	166137	date:	2022-02-24T16:10:57
db:	PACKETSTORM	id:	165797	date:	2022-02-01T17:04:22
db:	PACKETSTORM	id:	165796	date:	2022-02-01T17:04:16
db:	PACKETSTORM	id:	165793	date:	2022-02-01T17:02:58
db:	PACKETSTORM	id:	165791	date:	2022-02-01T17:02:44
db:	PACKETSTORM	id:	165790	date:	2022-02-01T17:02:33
db:	JVNDB	id:	JVNDB-2022-001296	date:	2022-02-02T00:00:00
db:	CNNVD	id:	CNNVD-202201-2719	date:	2022-01-31T00:00:00
db:	NVD	id:	CVE-2021-44142	date:	2022-02-21T15:15:07.380